This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212633.roa File: AS212633.roa (raw, json) Hash identifier: IV9DSGFGcK6JUD/UlDmu/kjjSadNLgeoBJr5qUu9nGg= Subject key identifier: D6:86:38:A1:60:1D:85:A4:53:58:07:F2:B4:D6:63:B8:B8:91:67:82 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4E0ECD49AA02BC67E8875257434B970602C0EBAE Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212633.roa Signing time: Thu 11 Dec 2025 13:53:30 +0000 ROA not before: Thu 11 Dec 2025 13:48:30 +0000 ROA not after: Thu 10 Dec 2026 13:53:30 +0000 asID: 212633 IP address blocks: 82.39.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0e:cd:49:aa:02:bc:67:e8:87:52:57:43:4b:97:06:02:c0:eb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 11 13:48:30 2025 GMT Not After : Dec 10 13:53:30 2026 GMT Subject: CN=D68638A1601D85A4535807F2B4D663B8B8916782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:6a:a4:a7:77:f4:eb:e2:cc:71:48:7b:e8: 94:6d:13:71:00:4a:92:5d:96:ed:98:04:b5:fe:f9: eb:09:79:3f:8e:3d:27:dd:d5:b3:a5:40:f0:9a:0b: 31:9d:89:cf:99:29:30:5c:11:50:ea:52:74:a1:7d: 61:26:3b:7e:2b:e4:7a:1f:01:11:cd:eb:ac:d3:88: f5:c2:3b:a4:5d:cf:1b:55:58:55:b4:ce:cc:f2:5c: 2a:44:5d:de:fd:bd:2d:c1:53:d9:e8:fa:44:22:29: 18:0d:23:a7:4e:17:5e:56:6d:64:05:5f:79:4f:cd: e9:a8:f2:a0:a9:ec:dd:47:fb:79:4a:ca:10:9f:44: 17:a8:6b:74:85:7d:5f:8a:7e:0c:5b:77:be:80:ac: 23:a5:3c:af:bd:21:ab:02:4b:56:fc:d1:02:3a:8e: 54:53:2e:9b:2a:ae:17:c4:5e:08:02:64:b5:c1:31: 83:72:30:0a:97:2d:97:db:e7:25:c8:76:1a:3f:39: 48:5a:2f:9e:46:d7:6e:a9:b2:c8:90:66:a8:68:25: 44:21:b6:34:80:7c:8e:21:10:7c:7b:b0:3d:93:d1: 15:5a:44:df:41:44:c9:fc:a5:54:55:65:d3:c2:dc: 6d:d0:2e:d5:23:ef:4d:db:32:f2:c8:59:d2:06:d0: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:38:A1:60:1D:85:A4:53:58:07:F2:B4:D6:63:B8:B8:91:67:82 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.152.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:fb:e4:02:53:53:1a:2c:8e:1f:cc:b2:7b:98:4f:de:cb:42: dc:b4:6f:68:7d:12:aa:86:8a:e1:c8:f4:90:83:e9:7a:60:5c: c1:2d:cf:47:92:87:3e:10:5e:37:45:4e:95:70:c6:cf:99:d7: 8f:20:ef:1e:1b:db:71:da:57:81:9a:ef:10:fe:66:0e:f6:0c: b1:68:90:e5:bb:d4:4c:78:53:65:40:cb:6e:6a:a1:fb:ad:fd: ac:da:e4:23:1a:85:0d:a1:0d:9c:31:96:3f:48:33:40:d9:f8: 18:62:c4:2e:40:2a:d0:89:71:ea:fa:e5:a0:d1:dc:2d:21:d2: 98:84:dc:74:17:86:d8:77:f6:bc:a1:d0:eb:b7:31:27:de:2c: 9e:86:59:a6:d6:25:01:23:c3:f6:09:96:84:b8:77:1b:f4:83: ca:ae:dd:f4:25:75:51:f4:cc:41:f9:4c:20:69:4d:99:ef:75: 1a:a7:5f:48:5b:63:41:a4:09:3f:c0:a6:3a:9a:03:f9:de:a2: 8c:f2:c7:fd:17:cb:b8:d8:bc:f9:0d:57:82:a1:81:d3:c2:ac: 64:53:98:9a:0d:8d:59:d0:43:a5:ba:f2:ea:90:82:8d:0c:6e: 8a:20:79:12:3b:b8:76:02:4d:ee:f9:bc:40:57:64:5c:4a:ac: f8:4e:68:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTg7NSaoCvGfoh1JXQ0uXBgLA664wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTExMzQ4MzBaFw0yNjEyMTAxMzUzMzBaMDMxMTAvBgNV BAMTKEQ2ODYzOEExNjAxRDg1QTQ1MzU4MDdGMkI0RDY2M0I4Qjg5MTY3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaumqkp3f06+LMcUh76JRtE3EA SpJdlu2YBLX++esJeT+OPSfd1bOlQPCaCzGdic+ZKTBcEVDqUnShfWEmO34r5Hof ARHN66zTiPXCO6RdzxtVWFW0zszyXCpEXd79vS3BU9no+kQiKRgNI6dOF15WbWQF X3lPzemo8qCp7N1H+3lKyhCfRBeoa3SFfV+Kfgxbd76ArCOlPK+9IasCS1b80QI6 jlRTLpsqrhfEXggCZLXBMYNyMAqXLZfb5yXIdho/OUhaL55G126pssiQZqhoJUQh tjSAfI4hEHx7sD2T0RVaRN9BRMn8pVRVZdPC3G3QLtUj703bMvLIWdIG0L3tAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU1oY4oWAdhaRTWAfytNZjuLiRZ4IwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyNjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUieY MA0GCSqGSIb3DQEBCwUAA4IBAQBN++QCU1MaLI4fzLJ7mE/ey0LctG9ofRKqhorh yPSQg+l6YFzBLc9Hkoc+EF43RU6VcMbPmdePIO8eG9tx2leBmu8Q/mYO9gyxaJDl u9RMeFNlQMtuaqH7rf2s2uQjGoUNoQ2cMZY/SDNA2fgYYsQuQCrQiXHq+uWg0dwt IdKYhNx0F4bYd/a8odDrtzEn3iyehlmm1iUBI8P2CZaEuHcb9IPKrt30JXVR9MxB +UwgaU2Z73Uap19IW2NBpAk/wKY6mgP53qKM8sf9F8u42Lz5DVeCoYHTwqxkU5ia DY1Z0EOluvLqkIKNDG6KIHkSO7h2Ak3u+bxAV2RcSqz4TmhT -----END CERTIFICATE-----Generated at Fri Dec 19 15:41:54 2025 by rpki-client