This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213134.roa File: AS213134.roa (raw, json) Hash identifier: a9ETBin+/uikirKneNNjgtZ5Y+uXqz+lIFw95pvlMJU= Subject key identifier: 03:9E:F1:91:FC:A2:20:10:88:5E:E0:84:19:B9:86:3A:69:C2:99:9F Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 089F400E01811647304EEF6175A03E2ECB40B61B Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213134.roa Signing time: Fri 19 Dec 2025 22:58:01 +0000 ROA not before: Fri 19 Dec 2025 22:53:01 +0000 ROA not after: Fri 18 Dec 2026 22:58:01 +0000 asID: 213134 IP address blocks: 82.39.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9f:40:0e:01:81:16:47:30:4e:ef:61:75:a0:3e:2e:cb:40:b6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 19 22:53:01 2025 GMT Not After : Dec 18 22:58:01 2026 GMT Subject: CN=039EF191FCA22010885EE08419B9863A69C2999F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:2e:a4:c7:10:af:23:15:48:9f:86:1d:fb: 90:83:23:ff:8e:38:ca:1d:bf:3f:c7:32:1a:f4:cd: ad:f7:65:05:1c:a5:1a:5e:11:25:60:be:2a:be:4c: a4:af:fb:8c:2d:f8:c1:4b:4d:97:1c:6f:15:26:3a: 9b:66:8f:4d:62:f5:b6:20:ba:f5:c3:df:ae:21:ae: 94:db:c0:82:b8:a9:84:f3:b8:74:1a:c3:f2:46:e1: 20:92:d8:98:91:39:b7:6a:1f:9c:34:52:24:0a:bb: e2:3a:fd:30:84:68:4f:7c:9c:fe:7f:c6:64:d5:fd: a9:a5:21:a4:14:6d:6b:1e:ae:a6:45:8a:83:f8:6b: 80:29:22:a2:4d:eb:fb:7d:81:7e:8e:f3:b9:09:d7: 1f:74:7d:f2:1f:97:27:13:77:5e:f5:0c:4f:12:93: b9:e0:95:ce:57:3b:3f:48:31:28:b0:54:46:4a:b4: 9f:78:71:37:18:9c:6e:ed:76:5b:91:b3:8a:f5:e5: 8d:c3:dc:cf:c0:4d:f8:2e:17:50:4c:64:11:56:0a: 1b:6c:d0:ac:5e:a0:20:26:4f:06:bb:19:aa:7f:45: 1f:5a:b8:cc:ea:ba:d4:0e:ac:ca:e2:ba:ab:9c:a8: 74:6b:68:c5:68:43:20:fd:53:fa:15:1c:50:c7:44: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:F1:91:FC:A2:20:10:88:5E:E0:84:19:B9:86:3A:69:C2:99:9F X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.190.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:c7:2e:8b:dd:77:6f:58:d3:25:14:09:a2:48:2c:1e:19:c6: 2a:34:7d:c3:bd:6a:d2:4a:9f:a3:c6:58:0a:11:33:9c:a1:e8: 55:db:b3:12:56:82:fc:0f:82:b2:30:06:cb:4e:99:9c:89:0c: 20:a9:2b:2f:85:81:66:c4:08:60:89:2b:69:2b:23:5f:77:5c: 35:07:e9:43:a9:59:4a:c8:db:c5:2b:b4:fd:be:2f:e1:48:08: f1:da:28:7d:37:47:d7:23:53:9e:c0:cd:df:40:de:dc:96:36: b8:0c:ad:7a:b3:7f:0b:7a:7c:f9:7b:5d:0b:3f:d1:40:a2:2c: a8:42:ee:cf:33:0e:8c:ea:0f:f4:4b:7e:39:34:81:0e:58:ba: 0d:85:85:40:bf:fa:62:f7:e8:cc:d7:f9:90:ee:c4:7b:5c:49: 00:6d:64:71:05:5f:aa:6f:49:91:4c:29:39:f0:83:02:85:1c: b7:86:b5:15:97:b5:89:33:7b:4c:49:61:6c:aa:a6:d1:57:e6: 1f:51:2b:3a:4f:b2:90:cd:bf:6b:19:de:11:aa:b0:56:ff:42: a3:ee:a5:e2:16:18:32:ab:17:3a:4f:d3:84:75:66:c6:fa:e1: fa:2c:7d:e8:85:77:14:5f:9c:d8:9c:ab:88:b2:21:02:f4:c7: 27:5d:1b:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCJ9ADgGBFkcwTu9hdaA+LstAthswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTkyMjUzMDFaFw0yNjEyMTgyMjU4MDFaMDMxMTAvBgNV BAMTKDAzOUVGMTkxRkNBMjIwMTA4ODVFRTA4NDE5Qjk4NjNBNjlDMjk5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoC6kxxCvIxVIn4Yd+5CDI/+O OModvz/HMhr0za33ZQUcpRpeESVgviq+TKSv+4wt+MFLTZccbxUmOptmj01i9bYg uvXD364hrpTbwIK4qYTzuHQaw/JG4SCS2JiRObdqH5w0UiQKu+I6/TCEaE98nP5/ xmTV/amlIaQUbWserqZFioP4a4ApIqJN6/t9gX6O87kJ1x90ffIflycTd171DE8S k7nglc5XOz9IMSiwVEZKtJ94cTcYnG7tdluRs4r15Y3D3M/ATfguF1BMZBFWChts 0KxeoCAmTwa7Gap/RR9auMzqutQOrMriuqucqHRraMVoQyD9U/oVHFDHRASfAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUA57xkfyiIBCIXuCEGbmGOmnCmZ8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzMTM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUie+ MA0GCSqGSIb3DQEBCwUAA4IBAQAexy6L3XdvWNMlFAmiSCweGcYqNH3DvWrSSp+j xlgKETOcoehV27MSVoL8D4KyMAbLTpmciQwgqSsvhYFmxAhgiStpKyNfd1w1B+lD qVlKyNvFK7T9vi/hSAjx2ih9N0fXI1OewM3fQN7clja4DK16s38Lenz5e10LP9FA oiyoQu7PMw6M6g/0S345NIEOWLoNhYVAv/pi9+jM1/mQ7sR7XEkAbWRxBV+qb0mR TCk58IMChRy3hrUVl7WJM3tMSWFsqqbRV+YfUSs6T7KQzb9rGd4RqrBW/0Kj7qXi Fhgyqxc6T9OEdWbG+uH6LH3ohXcUX5zYnKuIsiEC9McnXRtE -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:46 2025 by rpki-client