This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204874.roa File: AS204874.roa (raw, json) Hash identifier: h9WFhpU/erajuKdcE24+7l6vcxFhjtJb6sRdKrYbeLc= Subject key identifier: 57:E3:33:3E:95:B3:CA:29:EB:97:D5:E4:17:8B:CD:31:72:C9:45:9E Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4B820FDD20415126F80928AD50944AA2B630752D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204874.roa Signing time: Wed 31 Dec 2025 16:27:35 +0000 ROA not before: Wed 31 Dec 2025 16:22:35 +0000 ROA not after: Wed 30 Dec 2026 16:27:35 +0000 asID: 204874 IP address blocks: 82.41.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:82:0f:dd:20:41:51:26:f8:09:28:ad:50:94:4a:a2:b6:30:75:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 16:22:35 2025 GMT Not After : Dec 30 16:27:35 2026 GMT Subject: CN=57E3333E95B3CA29EB97D5E4178BCD3172C9459E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:a6:0f:44:64:a5:8b:29:c4:d5:f3:0e:3b: 93:0f:0e:67:7c:2a:92:6c:7d:b6:ab:fb:44:6b:93: be:d5:24:b3:c2:72:3d:c0:ba:ea:e2:58:da:20:51: 29:e5:0c:b7:68:03:a7:aa:65:8b:26:28:10:d2:4f: 2b:92:48:88:b8:5b:a7:b5:44:0a:a4:7d:10:1b:b2: 15:b3:8f:ae:6d:29:b7:4b:d4:ce:3d:9e:51:9b:97: 6b:85:35:63:68:cc:a2:6e:64:2c:4e:1c:1a:56:6f: aa:b0:a5:08:be:b4:63:8e:b4:fb:93:38:21:cf:11: dd:86:b4:a6:6d:c1:3c:be:fb:7e:e4:fe:54:49:bd: dd:11:cc:0e:74:bc:09:3a:a1:96:bb:c8:b5:54:95: 6c:ef:2a:72:f7:1b:97:11:1e:4f:7f:de:bc:fa:35: fa:61:b3:96:f9:f5:67:79:bc:86:1e:e1:ef:05:44: 19:ca:89:4e:66:f8:bb:de:97:9e:02:ff:ec:bc:cd: 5b:ac:3e:5e:33:bb:dd:d3:f6:9e:fa:d8:55:52:dd: ff:05:92:39:48:36:fe:1f:84:77:6b:3b:dc:62:13: 90:91:3d:a1:f7:2a:8d:1f:27:6a:7b:d2:18:aa:3a: b2:f5:a9:0f:7f:fc:95:6d:9c:78:03:77:4d:2e:1f: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:33:3E:95:B3:CA:29:EB:97:D5:E4:17:8B:CD:31:72:C9:45:9E X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204874.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.156.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:e2:c9:71:0c:66:b0:e8:04:8d:cb:d4:fa:db:95:05:c6:62: fb:46:e0:db:f0:d4:c1:1c:e9:32:cc:cd:24:0d:ee:4a:18:98: df:8c:6e:26:e3:4e:0e:32:28:30:81:ac:c6:bb:c0:64:b7:13: 78:b2:b6:f9:0a:24:56:37:8b:02:38:c0:b5:ad:75:a7:38:58: 40:92:c5:96:55:bd:52:2d:d1:dc:a8:d6:97:60:41:72:85:e2: 9f:28:f2:37:03:05:5a:5e:34:f0:a5:b5:2b:53:1b:60:65:75: e0:01:ce:79:b0:9b:ec:db:48:18:85:03:49:ea:70:15:59:1c: 34:b6:e9:c8:34:83:8c:51:b7:c4:ad:06:39:07:63:ce:fc:8c: 8a:b7:6c:88:9a:4c:e5:a8:d4:31:34:9f:c7:58:8c:46:fa:9c: 47:27:b7:5c:c7:86:91:b2:6d:fe:e3:87:da:9f:2b:71:7d:82: 0f:eb:24:ab:a0:83:10:ef:d9:e5:f0:d4:29:47:1a:82:b5:ef: b2:f0:09:6a:9d:42:07:83:07:90:6b:17:0f:47:ff:fd:32:23: 69:e5:c6:13:5d:96:2a:8f:80:0e:a6:05:88:b7:b3:f3:79:94: 1c:64:be:63:f2:16:12:9c:82:82:d3:33:04:bf:0f:49:d5:e9: 2c:1d:d0:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUS4IP3SBBUSb4CSitUJRKorYwdS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzExNjIyMzVaFw0yNjEyMzAxNjI3MzVaMDMxMTAvBgNV BAMTKDU3RTMzMzNFOTVCM0NBMjlFQjk3RDVFNDE3OEJDRDMxNzJDOTQ1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIaYPRGSliynE1fMOO5MPDmd8 KpJsfbar+0Rrk77VJLPCcj3AuuriWNogUSnlDLdoA6eqZYsmKBDSTyuSSIi4W6e1 RAqkfRAbshWzj65tKbdL1M49nlGbl2uFNWNozKJuZCxOHBpWb6qwpQi+tGOOtPuT OCHPEd2GtKZtwTy++37k/lRJvd0RzA50vAk6oZa7yLVUlWzvKnL3G5cRHk9/3rz6 Nfphs5b59Wd5vIYe4e8FRBnKiU5m+Lvel54C/+y8zVusPl4zu93T9p762FVS3f8F kjlINv4fhHdrO9xiE5CRPaH3Ko0fJ2p70hiqOrL1qQ9//JVtnHgDd00uH70BAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUV+MzPpWzyinrl9XkF4vNMXLJRZ4wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0ODc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUimc MA0GCSqGSIb3DQEBCwUAA4IBAQBb4slxDGaw6ASNy9T625UFxmL7RuDb8NTBHOky zM0kDe5KGJjfjG4m404OMigwgazGu8BktxN4srb5CiRWN4sCOMC1rXWnOFhAksWW Vb1SLdHcqNaXYEFyheKfKPI3AwVaXjTwpbUrUxtgZXXgAc55sJvs20gYhQNJ6nAV WRw0tunINIOMUbfErQY5B2PO/IyKt2yImkzlqNQxNJ/HWIxG+pxHJ7dcx4aRsm3+ 44fanytxfYIP6ySroIMQ79nl8NQpRxqCte+y8AlqnUIHgweQaxcPR//9MiNp5cYT XZYqj4AOpgWIt7PzeZQcZL5j8hYSnIKC0zMEvw9J1eksHdB3 -----END CERTIFICATE-----Generated at Fri Jan 2 20:00:14 2026 by rpki-client