This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211895.roa File: AS211895.roa (raw, json) Hash identifier: PKjflu1kqJmITb/tlK1IKF32sxXWErkLcgwr8Kp4DDo= Subject key identifier: 00:40:A0:A8:C5:74:2C:4F:F5:95:C4:BF:A8:A8:6F:5E:6C:C6:92:4A Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4C12C7A2AC7BDC690A846FD87DD6BB247EEE200A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211895.roa Signing time: Fri 12 Dec 2025 18:03:37 +0000 ROA not before: Fri 12 Dec 2025 17:58:37 +0000 ROA not after: Fri 11 Dec 2026 18:03:37 +0000 asID: 211895 IP address blocks: 82.22.82.0/24 maxlen: 24 82.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:12:c7:a2:ac:7b:dc:69:0a:84:6f:d8:7d:d6:bb:24:7e:ee:20:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 12 17:58:37 2025 GMT Not After : Dec 11 18:03:37 2026 GMT Subject: CN=0040A0A8C5742C4FF595C4BFA8A86F5E6CC6924A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:52:d2:ea:6d:f9:73:05:d5:fd:00:cf:a0: 20:d3:7f:37:70:f3:c6:72:35:5a:9a:a1:e2:b3:c0: b4:19:48:5c:bc:3d:d6:7a:a9:13:00:3b:d0:27:42: 96:6e:40:27:54:79:80:63:35:e2:c3:52:aa:4f:81: 8f:84:40:16:f8:e0:ea:90:11:a5:8f:50:74:bb:a1: 19:d8:23:ed:da:90:e0:f0:e2:8a:cf:00:57:a1:9f: 4b:45:d6:dd:90:e8:62:60:af:c4:8d:1b:b3:b6:04: 3a:5d:ad:83:7b:49:cc:5a:14:31:1a:08:ed:63:ac: 25:83:e8:93:3f:64:db:87:68:f3:51:51:66:41:21: 49:ea:95:17:07:4f:49:61:60:18:78:f8:bb:88:b7: 82:82:a4:0d:61:16:70:78:b9:92:e5:8d:b9:e9:dc: 83:a1:ad:24:36:69:7c:1b:df:2d:cb:1b:94:80:a6: fe:e0:be:c8:c4:9a:46:4a:1d:2b:3e:a3:d3:c2:2e: a3:f6:00:da:e9:fa:40:ec:17:f9:57:62:70:cb:c5: 78:9f:3e:64:64:d3:db:78:1a:70:c0:8d:17:5f:61: d9:09:ed:7f:fb:40:3d:0d:f4:ef:60:16:50:6b:a8: 40:8f:7e:b9:4c:a6:11:25:a2:a0:be:7e:6b:fe:1c: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:A0:A8:C5:74:2C:4F:F5:95:C4:BF:A8:A8:6F:5E:6C:C6:92:4A X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.82.0/24 82.41.2.0/24 Signature Algorithm: sha256WithRSAEncryption a7:cc:2c:f6:75:d9:21:3a:ce:38:33:14:a7:44:76:0c:e0:59: 02:bb:ab:3d:4f:21:df:7b:a2:92:00:b5:cd:17:a5:8e:80:cd: 4d:99:cd:ac:dd:d9:cb:33:f2:e2:a5:cf:27:78:87:0e:7c:4c: 7c:75:fb:be:30:30:40:4c:30:97:f3:82:bf:d4:85:53:74:25: ec:2f:96:ba:0a:82:ff:87:99:36:0d:77:cb:ff:46:17:4a:2d: 91:3a:6d:5b:ee:ed:c3:5f:e0:1b:a8:f8:cb:bd:dc:36:92:00: 9a:e6:87:eb:c9:07:bb:e9:4e:97:3c:04:4c:22:a7:a9:d2:9e: a1:af:fc:ce:de:e0:21:77:1d:9a:12:3b:7e:a3:04:27:1a:2f: 05:16:8d:5d:6b:bb:34:e5:61:3d:2d:99:9c:63:99:5c:cc:23: 99:dc:a0:e4:a9:7a:76:96:e6:88:95:5e:38:38:f9:b5:2f:54: 32:dd:d5:ac:f0:68:de:0f:97:ab:68:b5:53:ca:7d:0f:22:f4: 9a:aa:21:c7:98:55:df:91:1c:f7:33:01:6e:12:4e:02:fd:cc: 65:21:e0:38:04:9a:f2:2f:08:a9:80:58:73:03:40:f0:82:b6: ef:63:8b:1f:fe:6d:aa:25:dd:c4:3b:97:1f:16:66:bb:73:36: 91:6a:24:f8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUTBLHoqx73GkKhG/Yfda7JH7uIAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTIxNzU4MzdaFw0yNjEyMTExODAzMzdaMDMxMTAvBgNV BAMTKDAwNDBBMEE4QzU3NDJDNEZGNTk1QzRCRkE4QTg2RjVFNkNDNjkyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxllLS6m35cwXV/QDPoCDTfzdw 88ZyNVqaoeKzwLQZSFy8PdZ6qRMAO9AnQpZuQCdUeYBjNeLDUqpPgY+EQBb44OqQ EaWPUHS7oRnYI+3akODw4orPAFehn0tF1t2Q6GJgr8SNG7O2BDpdrYN7ScxaFDEa CO1jrCWD6JM/ZNuHaPNRUWZBIUnqlRcHT0lhYBh4+LuIt4KCpA1hFnB4uZLljbnp 3IOhrSQ2aXwb3y3LG5SApv7gvsjEmkZKHSs+o9PCLqP2ANrp+kDsF/lXYnDLxXif PmRk09t4GnDAjRdfYdkJ7X/7QD0N9O9gFlBrqECPfrlMphEloqC+fmv+HLjnAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUAECgqMV0LE/1lcS/qKhvXmzGkkowHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExODk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhZS AwQAUikCMA0GCSqGSIb3DQEBCwUAA4IBAQCnzCz2ddkhOs44MxSnRHYM4FkCu6s9 TyHfe6KSALXNF6WOgM1Nmc2s3dnLM/Lipc8neIcOfEx8dfu+MDBATDCX84K/1IVT dCXsL5a6CoL/h5k2DXfL/0YXSi2ROm1b7u3DX+AbqPjLvdw2kgCa5ofryQe76U6X PARMIqep0p6hr/zO3uAhdx2aEjt+owQnGi8FFo1da7s05WE9LZmcY5lczCOZ3KDk qXp2luaIlV44OPm1L1Qy3dWs8GjeD5eraLVTyn0PIvSaqiHHmFXfkRz3MwFuEk4C /cxlIeA4BJryLwipgFhzA0DwgrbvY4sf/m2qJd3EO5cfFma7czaRaiT4 -----END CERTIFICATE-----Generated at Tue Dec 16 04:36:04 2025 by rpki-client