This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208949.roa File: AS208949.roa (raw, json) Hash identifier: ZPK3tJ2I2dysmTWyZqxlNJ5zq50ZqcqvGuZjZG6h6Pk= Subject key identifier: DD:66:E0:24:5E:21:EE:2F:04:AA:CB:22:2C:39:C4:6B:2C:5B:E3:D0 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 057D959FBA9DA9D41E46561B72DD299FDC75DE3A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208949.roa Signing time: Sun 14 Dec 2025 20:00:39 +0000 ROA not before: Sun 14 Dec 2025 19:55:39 +0000 ROA not after: Sun 13 Dec 2026 20:00:39 +0000 asID: 208949 IP address blocks: 82.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7d:95:9f:ba:9d:a9:d4:1e:46:56:1b:72:dd:29:9f:dc:75:de:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 14 19:55:39 2025 GMT Not After : Dec 13 20:00:39 2026 GMT Subject: CN=DD66E0245E21EE2F04AACB222C39C46B2C5BE3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:4b:fc:c6:07:82:22:76:aa:0d:99:df:db: f8:d9:3d:60:c1:fc:13:7d:58:9c:67:7f:d7:a0:3a: c7:c0:72:75:b7:63:8b:ab:42:6c:65:90:75:d1:3d: 8b:bc:16:af:bf:ed:d9:66:97:ca:bb:bb:af:3c:0f: 02:81:96:89:56:c4:7a:7c:91:09:12:58:f9:78:33: 57:3e:6d:53:84:05:c9:90:3e:8d:96:fa:da:a8:59: 43:31:12:ad:fa:fc:ee:30:24:8a:07:bd:8a:07:12: b5:01:f1:72:13:6f:2e:ad:5b:c8:43:41:97:40:b1: b3:45:4c:99:73:64:33:ef:a6:34:06:00:fb:75:a7: 0f:b2:be:b4:e4:63:c4:e5:17:3e:0b:a3:3e:65:a0: f5:05:d5:a0:82:bf:db:16:f9:ab:77:ac:22:37:92: 42:c2:42:47:55:ac:57:8d:ed:d6:39:b2:e5:1d:7f: f2:ad:4c:19:a3:b3:59:c2:95:85:e5:88:7c:db:80: a3:29:66:9e:c2:eb:58:ae:cf:32:3f:52:20:87:11: 63:25:84:45:84:75:a5:b5:5b:58:99:b0:01:74:8d: 02:e2:5e:8e:ad:4c:e7:c0:fe:2a:33:6d:0b:d9:9c: 12:55:a4:30:27:cb:ea:64:d6:fa:29:6d:5b:25:28: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:E0:24:5E:21:EE:2F:04:AA:CB:22:2C:39:C4:6B:2C:5B:E3:D0 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.186.0/24 Signature Algorithm: sha256WithRSAEncryption 37:5a:0a:93:8d:6e:7c:89:dd:3f:58:fc:73:3e:52:22:2b:4c: 88:dc:43:b7:c9:f0:a1:5e:df:56:bf:6d:cc:f5:0f:dd:83:50: 8d:19:d5:ce:b6:52:30:a4:c7:cb:62:a2:ec:96:b6:c0:b6:e7: 21:6c:98:54:b0:db:2a:36:49:50:b6:4c:a1:9f:62:10:de:6c: 05:ae:51:64:03:46:21:bf:19:c2:ce:b3:c7:a0:ae:71:08:f8: 65:f5:50:8b:90:a7:27:d7:ef:e4:17:82:1f:14:d2:2e:21:75: 02:05:f1:c1:41:b0:68:9a:6d:1d:df:10:00:26:c2:db:49:51: 9f:1d:d8:d3:82:9b:28:62:4a:73:6b:8b:b5:04:16:4d:85:8a: 33:6d:93:f8:52:8c:c5:38:60:c1:1a:2e:6f:fa:12:c0:65:3c: 72:fb:e0:24:94:94:cc:5e:55:bd:ea:92:14:5f:1d:91:20:1e: 54:b6:b7:6d:e7:ad:48:b8:52:99:88:29:79:79:45:70:86:73: 2f:33:a5:ca:16:bc:75:7a:cf:75:64:ad:ef:ee:5c:b4:24:75: ff:fa:9c:c8:c1:59:c5:95:ae:c4:a7:48:bb:63:c2:42:8b:75: ad:fa:d7:1a:d7:73:b8:ed:19:01:9b:18:5f:3b:e2:e2:d2:7d: 43:93:38:df -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUBX2Vn7qdqdQeRlYbct0pn9x13jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTQxOTU1MzlaFw0yNjEyMTMyMDAwMzlaMDMxMTAvBgNV BAMTKERENjZFMDI0NUUyMUVFMkYwNEFBQ0IyMjJDMzlDNDZCMkM1QkUzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2kv8xgeCInaqDZnf2/jZPWDB /BN9WJxnf9egOsfAcnW3Y4urQmxlkHXRPYu8Fq+/7dlml8q7u688DwKBlolWxHp8 kQkSWPl4M1c+bVOEBcmQPo2W+tqoWUMxEq36/O4wJIoHvYoHErUB8XITby6tW8hD QZdAsbNFTJlzZDPvpjQGAPt1pw+yvrTkY8TlFz4Loz5loPUF1aCCv9sW+at3rCI3 kkLCQkdVrFeN7dY5suUdf/KtTBmjs1nClYXliHzbgKMpZp7C61iuzzI/UiCHEWMl hEWEdaW1W1iZsAF0jQLiXo6tTOfA/iozbQvZnBJVpDAny+pk1vopbVslKMkFAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU3WbgJF4h7i8EqssiLDnEayxb49AwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA4OTQ5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUie6 MA0GCSqGSIb3DQEBCwUAA4IBAQA3WgqTjW58id0/WPxzPlIiK0yI3EO3yfChXt9W v23M9Q/dg1CNGdXOtlIwpMfLYqLslrbAtuchbJhUsNsqNklQtkyhn2IQ3mwFrlFk A0YhvxnCzrPHoK5xCPhl9VCLkKcn1+/kF4IfFNIuIXUCBfHBQbBomm0d3xAAJsLb SVGfHdjTgpsoYkpza4u1BBZNhYozbZP4UozFOGDBGi5v+hLAZTxy++AklJTMXlW9 6pIUXx2RIB5Utrdt561IuFKZiCl5eUVwhnMvM6XKFrx1es91ZK3v7ly0JHX/+pzI wVnFla7Ep0i7Y8JCi3Wt+tca13O47RkBmxhfO+Li0n1Dkzjf -----END CERTIFICATE-----Generated at Fri Dec 19 15:42:14 2025 by rpki-client