This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211407.roa File: AS211407.roa (raw, json) Hash identifier: ZCFvMzz7uFBZkwUpt7mEkoGo+vDYCIq/2c2kkcImA+A= Subject key identifier: 1B:31:F2:85:36:6B:1A:02:14:BC:C9:67:28:5A:2D:9D:BE:B7:42:64 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 09BA0B78F49B93002F27FC80CF8524A6E6CEB11C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211407.roa Signing time: Wed 17 Dec 2025 03:28:13 +0000 ROA not before: Wed 17 Dec 2025 03:23:13 +0000 ROA not after: Wed 16 Dec 2026 03:28:13 +0000 asID: 211407 IP address blocks: 82.39.222.0/24 maxlen: 24 82.41.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ba:0b:78:f4:9b:93:00:2f:27:fc:80:cf:85:24:a6:e6:ce:b1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 17 03:23:13 2025 GMT Not After : Dec 16 03:28:13 2026 GMT Subject: CN=1B31F285366B1A0214BCC967285A2D9DBEB74264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:92:4b:e0:99:ce:a5:9e:a4:14:f5:02:46: a3:21:c0:9f:c4:b3:84:c6:b5:17:d9:f0:fe:e9:68: 5e:55:94:89:36:6a:24:bd:f0:df:f6:e8:10:6e:bc: 3f:5e:4e:e8:53:4d:4b:c1:56:60:00:25:11:3c:bc: 89:2d:5e:e6:7e:24:34:46:fc:cf:3c:23:66:be:bb: 2e:6a:a4:e8:d9:99:35:bf:ba:4b:7b:9c:5b:1b:16: 2f:04:8e:be:2c:7d:09:d3:02:eb:d8:aa:8d:bb:99: 1b:9b:75:f1:f5:51:d2:5b:14:42:b5:86:c2:65:10: 8d:7f:38:6d:ed:05:8f:f7:bb:51:d7:7a:33:4b:d1: bf:30:0a:f7:75:d1:4e:99:63:f5:0f:55:2c:74:55: 1e:d6:b4:65:48:63:e6:cd:84:b5:b3:24:b9:49:aa: 79:96:75:10:a7:2c:86:9e:03:65:90:d6:3b:79:53: 22:3d:e2:b0:46:7d:d8:03:35:31:11:42:01:c7:a1: 28:b5:4f:00:e0:ea:08:b2:c4:be:12:a5:42:37:91: a2:45:39:9d:8b:86:51:cf:a3:26:d6:40:59:3b:16: 34:0c:d3:ba:a5:f1:d8:61:81:e2:19:44:36:67:d7: d4:c9:b4:3e:af:de:68:8a:47:d1:e6:fe:94:69:fc: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:F2:85:36:6B:1A:02:14:BC:C9:67:28:5A:2D:9D:BE:B7:42:64 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.222.0/24 82.41.42.0/24 Signature Algorithm: sha256WithRSAEncryption 52:32:45:f8:6c:7e:50:ff:5a:27:aa:e4:9c:14:ec:f7:75:ca: 92:7b:51:68:c5:ed:7d:79:54:a9:bd:ab:57:b8:c8:9f:fa:0e: 52:bf:6f:53:1f:4c:46:7b:da:b9:cb:cd:15:f7:6c:93:31:18: c6:c7:90:d8:97:b7:09:59:a1:dc:02:60:e0:1b:02:5f:76:89: fa:19:b1:2f:8a:e9:6e:35:be:af:31:e4:2f:ff:1c:f8:16:0b: ba:62:f2:51:e2:4d:1f:52:51:b1:3d:d2:57:62:13:e7:6f:be: c5:ca:74:5b:d6:d9:ed:22:80:5c:d5:bc:80:94:2b:05:cd:e8: 57:48:0b:a8:c1:08:ce:a5:c9:90:a9:ed:7f:4b:95:82:9a:b3: 36:2b:02:73:04:76:bc:3a:2e:a1:4b:27:24:76:41:a2:5a:97: 7a:ed:83:f8:8a:43:c4:c5:9d:45:5b:2f:a1:56:2f:86:f7:40: 82:1c:e7:15:af:01:84:52:b5:de:44:9c:cd:10:d3:9e:e6:7a: 1d:bb:5f:01:33:8d:8a:9e:5e:7f:7b:03:4c:0c:f3:66:59:ad: 82:5d:0f:f1:3a:37:9f:a0:79:68:cf:47:18:1e:df:e9:71:90: fa:c6:86:eb:d5:15:de:ee:f7:a1:b2:e8:1a:4c:5e:48:4f:c1: 34:9e:0e:39 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUCboLePSbkwAvJ/yAz4UkpubOsRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTcwMzIzMTNaFw0yNjEyMTYwMzI4MTNaMDMxMTAvBgNV BAMTKDFCMzFGMjg1MzY2QjFBMDIxNEJDQzk2NzI4NUEyRDlEQkVCNzQyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOpJL4JnOpZ6kFPUCRqMhwJ/E s4TGtRfZ8P7paF5VlIk2aiS98N/26BBuvD9eTuhTTUvBVmAAJRE8vIktXuZ+JDRG /M88I2a+uy5qpOjZmTW/ukt7nFsbFi8Ejr4sfQnTAuvYqo27mRubdfH1UdJbFEK1 hsJlEI1/OG3tBY/3u1HXejNL0b8wCvd10U6ZY/UPVSx0VR7WtGVIY+bNhLWzJLlJ qnmWdRCnLIaeA2WQ1jt5UyI94rBGfdgDNTERQgHHoSi1TwDg6giyxL4SpUI3kaJF OZ2LhlHPoybWQFk7FjQM07ql8dhhgeIZRDZn19TJtD6v3miKR9Hm/pRp/AYVAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUGzHyhTZrGgIUvMlnKFotnb63QmQwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExNDA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUife AwQAUikqMA0GCSqGSIb3DQEBCwUAA4IBAQBSMkX4bH5Q/1onquScFOz3dcqSe1Fo xe19eVSpvatXuMif+g5Sv29TH0xGe9q5y80V92yTMRjGx5DYl7cJWaHcAmDgGwJf don6GbEviuluNb6vMeQv/xz4Fgu6YvJR4k0fUlGxPdJXYhPnb77FynRb1tntIoBc 1byAlCsFzehXSAuowQjOpcmQqe1/S5WCmrM2KwJzBHa8Oi6hSyckdkGiWpd67YP4 ikPExZ1FWy+hVi+G90CCHOcVrwGEUrXeRJzNENOe5nodu18BM42Knl5/ewNMDPNm Wa2CXQ/xOjefoHloz0cYHt/pcZD6xobr1RXe7vehsugaTF5IT8E0ng45 -----END CERTIFICATE-----Generated at Fri Dec 19 10:50:25 2025 by rpki-client