This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215172.roa File: AS215172.roa (raw, json) Hash identifier: UJ4i8cRmPfFVJxmDm2ELx6hX9QjrMbYHluLTFzjne6s= Subject key identifier: 7F:4D:02:1D:AF:13:48:73:2A:64:E0:FF:14:C1:06:38:B9:A9:05:5B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2A1F674BD5F45F07105A9F58D29A575460AC165D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215172.roa Signing time: Sun 07 Dec 2025 18:03:44 +0000 ROA not before: Sun 07 Dec 2025 17:58:44 +0000 ROA not after: Sun 06 Dec 2026 18:03:44 +0000 asID: 215172 IP address blocks: 82.39.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1f:67:4b:d5:f4:5f:07:10:5a:9f:58:d2:9a:57:54:60:ac:16:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 7 17:58:44 2025 GMT Not After : Dec 6 18:03:44 2026 GMT Subject: CN=7F4D021DAF1348732A64E0FF14C10638B9A9055B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:e1:5a:29:3d:09:d4:4e:71:ec:2d:0d:46: 65:11:80:e3:68:e0:20:2b:e5:23:50:74:fe:52:a6: 84:3a:d9:43:53:c8:10:39:9f:67:41:52:f1:07:76: f8:4a:a1:bc:1f:09:9a:3d:80:53:87:44:14:58:7c: dc:5a:ff:9d:e1:0d:bd:a6:78:40:e9:5a:2b:a8:b3: 8c:41:27:13:9e:5a:32:b8:c0:4b:ba:23:10:1f:8b: a5:83:47:a2:46:db:c9:c3:d5:fb:8f:d6:6d:bd:c5: 69:3f:c4:65:b0:50:92:92:9b:83:6f:74:3f:2d:e2: 7f:13:36:9e:b0:60:01:e0:54:16:4d:5c:d7:8d:22: 9e:e0:05:bd:8e:70:e9:85:0d:92:f0:27:f7:f1:01: da:7c:c6:36:f7:50:ee:56:b5:ac:a5:2f:7c:e2:0b: 69:46:35:ee:03:de:2a:eb:e0:b1:8b:2f:c3:3a:c0: a2:35:dd:5e:2e:3a:c2:18:14:17:e8:a2:11:18:d7: 55:0b:b1:1a:73:f9:59:f5:de:4a:e7:42:27:67:4c: 20:29:4b:3a:12:aa:bc:d2:af:70:23:2e:ba:9e:11: 7d:bb:30:ed:1d:37:4b:9d:21:c1:b6:75:d0:b9:6d: 2e:36:c1:08:ce:84:42:a0:df:bb:7d:9c:fa:60:16: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4D:02:1D:AF:13:48:73:2A:64:E0:FF:14:C1:06:38:B9:A9:05:5B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.145.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:7c:36:8f:3b:cb:fd:aa:e6:fe:cf:0e:85:df:9e:67:cc:88: ef:40:ad:ca:5a:e1:23:4a:ea:ad:8e:10:79:41:0a:6c:ce:8c: b0:30:09:af:b1:87:d3:38:37:62:28:2e:b0:ff:9b:1d:d6:14: 2a:fc:f7:f8:4f:a8:a7:9a:b1:05:8f:08:20:51:cc:9d:34:d2: b8:39:a9:08:c2:6e:33:b4:86:e7:8f:49:f1:04:43:bd:a9:fd: b1:ca:d6:e0:69:86:64:79:06:e2:31:4e:37:62:42:38:a2:74: 49:b8:bb:29:a2:c9:b4:2e:79:6d:7e:51:26:8e:b8:7e:2a:0d: f0:25:5b:cf:c6:03:f3:cc:da:59:7f:a5:e3:5c:7d:71:20:db: 5e:87:67:43:9a:e8:d6:63:f7:d4:14:7e:e3:21:a0:2d:3b:e6: b6:da:73:12:f8:61:36:1b:6a:6e:94:48:a7:67:93:57:84:b7: 1d:4b:0e:e4:54:4c:a6:96:c1:46:7b:05:6e:02:f2:07:a0:12: 7d:fa:5c:d2:0b:bb:44:ef:34:bf:ed:62:f7:b3:62:4d:12:ca: fb:98:65:c5:b4:52:d7:f7:c2:8a:9e:20:b2:8d:56:88:cb:3a: 37:90:02:a9:3f:6b:87:98:56:3a:53:8b:1f:a4:d8:e6:6e:89: 3f:ab:8e:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKh9nS9X0XwcQWp9Y0ppXVGCsFl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDcxNzU4NDRaFw0yNjEyMDYxODAzNDRaMDMxMTAvBgNV BAMTKDdGNEQwMjFEQUYxMzQ4NzMyQTY0RTBGRjE0QzEwNjM4QjlBOTA1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcOFaKT0J1E5x7C0NRmURgONo 4CAr5SNQdP5SpoQ62UNTyBA5n2dBUvEHdvhKobwfCZo9gFOHRBRYfNxa/53hDb2m eEDpWiuos4xBJxOeWjK4wEu6IxAfi6WDR6JG28nD1fuP1m29xWk/xGWwUJKSm4Nv dD8t4n8TNp6wYAHgVBZNXNeNIp7gBb2OcOmFDZLwJ/fxAdp8xjb3UO5WtaylL3zi C2lGNe4D3irr4LGLL8M6wKI13V4uOsIYFBfoohEY11ULsRpz+Vn13krnQidnTCAp SzoSqrzSr3AjLrqeEX27MO0dN0udIcG2ddC5bS42wQjOhEKg37t9nPpgFkKvAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUf00CHa8TSHMqZOD/FMEGOLmpBVswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1MTcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUieR MA0GCSqGSIb3DQEBCwUAA4IBAQB6fDaPO8v9qub+zw6F355nzIjvQK3KWuEjSuqt jhB5QQpszoywMAmvsYfTODdiKC6w/5sd1hQq/Pf4T6inmrEFjwggUcydNNK4OakI wm4ztIbnj0nxBEO9qf2xytbgaYZkeQbiMU43YkI4onRJuLsposm0LnltflEmjrh+ Kg3wJVvPxgPzzNpZf6XjXH1xINteh2dDmujWY/fUFH7jIaAtO+a22nMS+GE2G2pu lEinZ5NXhLcdSw7kVEymlsFGewVuAvIHoBJ9+lzSC7tE7zS/7WL3s2JNEsr7mGXF tFLX98KKniCyjVaIyzo3kAKpP2uHmFY6U4sfpNjmbok/q479 -----END CERTIFICATE-----Generated at Fri Dec 19 15:41:50 2025 by rpki-client