This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203019.roa File: AS203019.roa (raw, json) Hash identifier: 8ATEzxwpJnuhNrEALnTdRuBZTTEVNpiZ6SI6TTqeXHM= Subject key identifier: 1D:2C:8A:C1:F3:09:FA:09:80:72:5A:DC:D5:3F:70:65:AC:88:61:2C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6BF9EBBC3FEA4D14739240DAD44AA641639B89FF Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203019.roa Signing time: Fri 12 Dec 2025 12:06:06 +0000 ROA not before: Fri 12 Dec 2025 12:01:06 +0000 ROA not after: Fri 11 Dec 2026 12:06:06 +0000 asID: 203019 IP address blocks: 82.39.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f9:eb:bc:3f:ea:4d:14:73:92:40:da:d4:4a:a6:41:63:9b:89:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 12 12:01:06 2025 GMT Not After : Dec 11 12:06:06 2026 GMT Subject: CN=1D2C8AC1F309FA0980725ADCD53F7065AC88612C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:d0:af:4e:a7:28:59:ad:8a:c9:23:a8:a4: 5c:f1:46:ea:20:5d:61:a6:fa:1f:4e:92:ca:04:03: f5:3b:65:e2:d0:04:12:4d:0b:5e:34:0a:4b:7c:4e: 1c:6d:b4:d2:97:65:71:b7:1e:53:72:17:b2:ab:dc: 02:09:f3:59:f1:d4:b0:48:7c:c3:f1:2e:b4:59:7f: b2:38:a1:2b:8e:0f:d4:1f:58:2e:c0:d9:82:3b:5d: f0:4f:fc:2e:c2:f2:1f:64:36:d4:25:10:2e:a8:73: f9:00:87:80:af:68:da:32:15:6e:32:98:13:c1:e0: 18:72:d9:ba:68:e1:7a:40:39:3e:09:53:11:0b:39: fe:49:90:fb:77:1f:e7:7b:d7:10:98:41:5c:8f:b0: 81:e6:ea:2b:47:ff:71:98:a9:4b:ee:0f:8e:c6:10: 16:e5:ca:c5:0a:f2:14:aa:a7:18:d0:c5:b1:26:9a: 23:d1:45:6e:48:a8:a2:7e:a1:40:5b:ce:88:03:13: 8b:de:bf:92:55:20:df:4e:2c:d9:f0:f7:b3:61:96: ef:0e:69:6f:7e:d4:b2:c9:c9:1d:bb:cf:6e:0a:1f: 45:f3:01:37:04:2f:ac:b3:85:32:6f:a7:ff:90:25: 23:a5:61:6b:9f:03:72:e6:30:b8:a1:ee:0f:7d:39: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2C:8A:C1:F3:09:FA:09:80:72:5A:DC:D5:3F:70:65:AC:88:61:2C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.220.0/24 Signature Algorithm: sha256WithRSAEncryption 31:fe:a1:7b:a7:d0:c1:8b:e7:bb:11:f9:93:08:f4:71:43:a6: 93:39:15:5a:97:96:10:76:a6:43:b2:0f:1e:4b:7a:fd:fe:5b: 03:c8:dd:f4:1f:e6:f5:24:2d:9a:ab:79:3b:a5:bc:a2:42:b6: 33:81:96:65:3f:4b:91:57:c2:b3:78:64:f9:d3:63:89:00:9b: 82:22:8b:e1:da:f6:d0:5c:92:45:8b:d5:76:d7:98:cb:da:23: c5:9a:2f:b1:93:69:18:51:3e:74:7d:ef:53:be:76:e8:8f:ca: 7c:cb:67:09:06:b5:33:8e:99:52:4e:8f:ce:0b:98:f6:92:4a: d6:ff:b7:e2:60:0c:73:7c:c1:41:fe:f8:60:20:a2:c3:aa:a5: b9:86:91:07:92:9c:35:74:f0:f3:f4:ca:da:3e:28:0f:5f:ea: 0d:ad:1c:98:6a:77:80:f3:c0:36:a9:75:9b:5a:8b:53:87:5d: 07:e0:6c:d8:6c:2d:a8:3a:0a:fb:d7:0e:5f:9b:3b:b0:f0:d4: 73:b0:c4:d7:05:c1:94:ae:00:4e:d7:75:fe:e5:b3:06:ea:ed: 1f:4b:ed:cb:71:c6:cf:66:9a:4b:c6:0f:1d:6f:33:5a:4d:fa: 1d:f4:8b:ea:66:9c:12:bc:b9:f9:cc:5c:fb:bf:82:32:c2:21: 37:e9:ee:24 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUa/nrvD/qTRRzkkDa1EqmQWObif8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTIxMjAxMDZaFw0yNjEyMTExMjA2MDZaMDMxMTAvBgNV BAMTKDFEMkM4QUMxRjMwOUZBMDk4MDcyNUFEQ0Q1M0Y3MDY1QUM4ODYxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc69CvTqcoWa2KySOopFzxRuog XWGm+h9OksoEA/U7ZeLQBBJNC140Ckt8ThxttNKXZXG3HlNyF7Kr3AIJ81nx1LBI fMPxLrRZf7I4oSuOD9QfWC7A2YI7XfBP/C7C8h9kNtQlEC6oc/kAh4CvaNoyFW4y mBPB4Bhy2bpo4XpAOT4JUxELOf5JkPt3H+d71xCYQVyPsIHm6itH/3GYqUvuD47G EBblysUK8hSqpxjQxbEmmiPRRW5IqKJ+oUBbzogDE4vev5JVIN9OLNnw97Nhlu8O aW9+1LLJyR27z24KH0XzATcEL6yzhTJvp/+QJSOlYWufA3LmMLih7g99OVptAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUHSyKwfMJ+gmAclrc1T9wZayIYSwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzMDE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUifc MA0GCSqGSIb3DQEBCwUAA4IBAQAx/qF7p9DBi+e7EfmTCPRxQ6aTORVal5YQdqZD sg8eS3r9/lsDyN30H+b1JC2aq3k7pbyiQrYzgZZlP0uRV8KzeGT502OJAJuCIovh 2vbQXJJFi9V215jL2iPFmi+xk2kYUT50fe9Tvnboj8p8y2cJBrUzjplSTo/OC5j2 kkrW/7fiYAxzfMFB/vhgIKLDqqW5hpEHkpw1dPDz9MraPigPX+oNrRyYaneA88A2 qXWbWotTh10H4GzYbC2oOgr71w5fmzuw8NRzsMTXBcGUrgBO13X+5bMG6u0fS+3L ccbPZppLxg8dbzNaTfod9IvqZpwSvLn5zFz7v4IywiE36e4k -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:42 2025 by rpki-client