This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134729.roa File: AS134729.roa (raw, json) Hash identifier: HzRj/ulVlkEqnhKkXpXPWDwuC/rwhj0lICrSy705MXs= Subject key identifier: A5:C0:BF:7B:A5:DB:42:06:E9:65:AF:5E:55:BC:B1:94:69:70:80:0B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 5F5FF635851362056BC5A87A0726449839880EAD Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134729.roa Signing time: Mon 19 Jan 2026 09:55:33 +0000 ROA not before: Mon 19 Jan 2026 09:50:33 +0000 ROA not after: Mon 18 Jan 2027 09:55:33 +0000 asID: 134729 IP address blocks: 82.27.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5f:f6:35:85:13:62:05:6b:c5:a8:7a:07:26:44:98:39:88:0e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 19 09:50:33 2026 GMT Not After : Jan 18 09:55:33 2027 GMT Subject: CN=A5C0BF7BA5DB4206E965AF5E55BCB1946970800B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:5d:21:f1:f4:ef:c2:6e:1b:31:0c:67:b6: 72:3b:89:3e:7d:5a:49:e6:7d:cf:85:24:f2:4e:46: aa:01:e6:23:f1:6c:7e:c4:99:51:1d:fd:1c:68:e0: 3c:7c:c9:92:6f:ef:49:c9:04:e8:f8:bc:4b:22:ec: 49:13:3d:d7:97:dc:48:65:96:20:b2:d8:63:b6:40: d3:ba:46:04:8a:d2:99:cf:79:f1:b8:af:8d:ad:6a: 61:cb:82:6c:0c:99:bb:0b:7c:11:c5:3f:10:76:37: 1a:8a:3e:12:5a:fd:68:49:b8:71:6f:d1:88:55:c2: 01:55:b5:3f:ed:98:c8:5c:8c:65:38:c8:49:99:1d: 78:60:ae:33:38:c9:94:a7:75:a7:f6:7c:2e:31:9b: d4:15:c9:f8:ed:3e:49:28:73:34:1c:c8:53:cb:44: cc:df:53:b1:3a:cc:59:20:75:c9:c9:e0:08:fa:51: 6a:fb:64:17:97:22:67:4a:75:22:7a:9e:dc:27:1a: 11:8f:7c:9b:61:27:17:57:32:7f:3c:d3:70:cf:31: 36:4c:1b:33:96:6b:5e:59:92:e4:6d:08:18:80:a5: 44:39:20:8d:5a:7d:a3:f7:0f:d9:d7:4d:d3:c0:95: 5a:3d:58:13:e7:28:33:f1:a7:58:d8:1c:5d:6f:c3: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:BF:7B:A5:DB:42:06:E9:65:AF:5E:55:BC:B1:94:69:70:80:0B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.27.160.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:4f:ce:1f:c9:d3:76:b7:4a:78:84:03:62:45:c2:59:e8:f3: 7c:62:4c:e4:2f:af:38:6f:94:79:ed:17:bb:09:5c:f9:aa:f1: 0c:ba:05:a0:9d:d8:fb:6f:ea:69:81:c8:ec:cf:35:cf:f7:f8: 9f:c1:f2:b2:6c:19:c3:44:58:b5:11:99:67:9a:26:29:cd:31: ab:ab:49:32:0c:45:f9:a6:11:ee:8a:fc:36:4c:c3:55:52:2e: 1b:e2:8c:77:11:07:fc:81:43:16:9f:b9:32:fb:fe:f6:67:bb: 4e:18:68:b9:e2:2a:a4:58:99:03:52:b1:6d:ad:b7:8a:21:93: 3a:72:ab:07:32:05:90:7d:cb:53:96:9e:d6:d2:06:bb:68:72: c0:e6:94:d0:73:9c:f6:33:ae:89:df:83:58:c4:cc:36:a1:7f: 0a:6f:6b:04:72:f9:cb:b2:99:67:6c:b9:74:8b:32:92:10:e7: f9:d0:cc:05:f2:19:e2:9a:02:0d:f7:52:fa:9f:ea:04:69:d1: c6:a6:95:cf:13:55:78:e0:55:59:92:28:f4:42:0c:ef:30:8a: 54:ea:03:74:bb:04:7d:52:d7:dc:f0:be:d6:82:b6:a2:0a:36: 67:b1:43:2b:83:94:45:03:7b:51:d9:51:4a:d3:4b:b9:19:1d: 0c:9a:95:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUX1/2NYUTYgVrxah6ByZEmDmIDq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTkwOTUwMzNaFw0yNzAxMTgwOTU1MzNaMDMxMTAvBgNV BAMTKEE1QzBCRjdCQTVEQjQyMDZFOTY1QUY1RTU1QkNCMTk0Njk3MDgwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDV0h8fTvwm4bMQxntnI7iT59 Wknmfc+FJPJORqoB5iPxbH7EmVEd/Rxo4Dx8yZJv70nJBOj4vEsi7EkTPdeX3Ehl liCy2GO2QNO6RgSK0pnPefG4r42tamHLgmwMmbsLfBHFPxB2NxqKPhJa/WhJuHFv 0YhVwgFVtT/tmMhcjGU4yEmZHXhgrjM4yZSndaf2fC4xm9QVyfjtPkkoczQcyFPL RMzfU7E6zFkgdcnJ4Aj6UWr7ZBeXImdKdSJ6ntwnGhGPfJthJxdXMn8803DPMTZM GzOWa15ZkuRtCBiApUQ5II1afaP3D9nXTdPAlVo9WBPnKDPxp1jYHF1vwzbtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUpcC/e6XbQgbpZa9eVbyxlGlwgAswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM0NzI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUhug MA0GCSqGSIb3DQEBCwUAA4IBAQBqT84fydN2t0p4hANiRcJZ6PN8YkzkL684b5R5 7Re7CVz5qvEMugWgndj7b+ppgcjszzXP9/ifwfKybBnDRFi1EZlnmiYpzTGrq0ky DEX5phHuivw2TMNVUi4b4ox3EQf8gUMWn7ky+/72Z7tOGGi54iqkWJkDUrFtrbeK IZM6cqsHMgWQfctTlp7W0ga7aHLA5pTQc5z2M66J34NYxMw2oX8Kb2sEcvnLspln bLl0izKSEOf50MwF8hnimgIN91L6n+oEadHGppXPE1V44FVZkij0QgzvMIpU6gN0 uwR9Utfc8L7WgraiCjZnsUMrg5RFA3tR2VFK00u5GR0MmpXD -----END CERTIFICATE-----Generated at Sun Jan 25 11:50:31 2026 by rpki-client