This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202141.roa File: AS202141.roa (raw, json) Hash identifier: KJmu2dpACtV92RWddGAVoORlQ2nxmO232GJPNxsfyXk= Subject key identifier: 92:DC:4D:23:3F:B0:DE:8B:64:13:AC:B6:D7:EF:14:48:EB:0E:2E:80 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 16695B36B76359813796B0FBAADDACCDD62E3779 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202141.roa Signing time: Tue 20 Jan 2026 15:05:31 +0000 ROA not before: Tue 20 Jan 2026 15:00:31 +0000 ROA not after: Tue 19 Jan 2027 15:05:31 +0000 asID: 202141 IP address blocks: 82.40.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:69:5b:36:b7:63:59:81:37:96:b0:fb:aa:dd:ac:cd:d6:2e:37:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 20 15:00:31 2026 GMT Not After : Jan 19 15:05:31 2027 GMT Subject: CN=92DC4D233FB0DE8B6413ACB6D7EF1448EB0E2E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:c0:5f:09:be:07:78:4d:3a:0d:de:52:6c: f9:70:80:be:90:83:72:e5:27:4e:7c:2c:1e:75:fc: f8:bc:ca:7d:03:a8:02:9c:08:e8:2c:e3:7c:12:27: 6c:f0:73:f2:80:51:cd:58:b3:50:54:78:a2:16:de: db:51:6c:64:0c:a3:11:41:af:48:1c:93:a6:22:b5: ce:a7:92:1d:fa:61:7f:cb:57:71:b2:26:70:ef:57: 85:12:c1:80:2e:2b:f5:43:79:94:21:e8:3e:18:8d: 71:63:7a:15:78:f8:5c:49:e6:f5:78:f2:0a:72:6a: db:c6:2e:a2:7b:12:e3:5d:39:0a:59:0b:6b:0a:e3: 4b:7d:1c:7b:ac:7b:cb:f4:e7:be:3d:00:17:7d:3c: 8a:f8:3e:67:37:de:24:f2:81:0b:8c:7f:df:f4:68: b0:b1:1f:b1:5a:60:c7:6b:65:cc:54:8f:ff:27:8a: 3d:7c:08:c4:ec:e3:86:2f:6f:b4:5c:a0:45:ba:9a: c0:32:29:b9:69:a3:cc:cd:65:88:7c:3d:0d:de:db: bc:1f:e9:36:08:a4:da:26:dd:a2:40:f8:d0:9d:f7: 33:88:2f:03:d7:cc:7a:69:5f:d4:9a:55:53:6b:79: 17:9d:74:b2:db:87:e6:ea:57:00:98:3b:6e:24:57: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DC:4D:23:3F:B0:DE:8B:64:13:AC:B6:D7:EF:14:48:EB:0E:2E:80 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.40.50.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:d5:ae:41:16:4d:b5:a0:9a:1d:61:29:fe:10:34:87:e6:4c: ad:6f:37:9b:bc:53:65:a3:1b:58:88:07:47:f0:2b:6e:c9:5a: 20:f2:95:09:72:92:61:19:30:07:3d:cf:fa:3a:e5:88:f6:3c: ce:a8:6c:10:28:0f:f9:00:68:d8:84:ba:2b:b1:95:c5:01:8c: 9f:1f:04:04:4f:6e:68:33:32:b9:a4:ee:dc:7d:7d:ab:fd:df: 07:3d:68:fe:be:01:f8:fa:9c:81:ea:64:8f:a2:9c:9a:3d:35: 4e:d0:3e:1b:82:1a:32:7f:eb:db:2d:ad:f4:4a:04:85:76:cb: ea:e3:0f:a3:ae:d0:02:7a:5d:b2:09:fc:16:b1:d3:99:0d:51: 35:d8:e2:bb:8a:c1:7c:a7:65:8f:14:04:c6:91:79:b6:59:15: 28:a1:ee:86:dd:14:26:f6:d9:54:a8:f3:ad:da:5c:e7:d4:c6: 80:89:89:bd:52:42:dd:0a:de:9d:f4:a6:9e:3d:9f:f7:09:07: d5:8a:19:07:d6:ff:ae:ce:ad:44:e3:c9:1d:64:e5:08:e2:46: 5a:a6:3b:19:25:9d:84:39:b9:f1:27:15:63:a1:d5:4e:ee:6f: b1:ae:6b:79:d3:9e:89:3f:ac:51:bd:fa:69:30:43:06:b9:f7: 8b:fb:0d:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUFmlbNrdjWYE3lrD7qt2szdYuN3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMjAxNTAwMzFaFw0yNzAxMTkxNTA1MzFaMDMxMTAvBgNV BAMTKDkyREM0RDIzM0ZCMERFOEI2NDEzQUNCNkQ3RUYxNDQ4RUIwRTJFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRMBfCb4HeE06Dd5SbPlwgL6Q g3LlJ058LB51/Pi8yn0DqAKcCOgs43wSJ2zwc/KAUc1Ys1BUeKIW3ttRbGQMoxFB r0gck6Yitc6nkh36YX/LV3GyJnDvV4USwYAuK/VDeZQh6D4YjXFjehV4+FxJ5vV4 8gpyatvGLqJ7EuNdOQpZC2sK40t9HHuse8v05749ABd9PIr4Pmc33iTygQuMf9/0 aLCxH7FaYMdrZcxUj/8nij18CMTs44Yvb7RcoEW6msAyKblpo8zNZYh8PQ3e27wf 6TYIpNom3aJA+NCd9zOILwPXzHppX9SaVVNreReddLLbh+bqVwCYO24kV/7LAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUktxNIz+w3otkE6y21+8USOsOLoAwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAyMTQxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUigy MA0GCSqGSIb3DQEBCwUAA4IBAQBu1a5BFk21oJodYSn+EDSH5kytbzebvFNloxtY iAdH8CtuyVog8pUJcpJhGTAHPc/6OuWI9jzOqGwQKA/5AGjYhLorsZXFAYyfHwQE T25oMzK5pO7cfX2r/d8HPWj+vgH4+pyB6mSPopyaPTVO0D4bghoyf+vbLa30SgSF dsvq4w+jrtACel2yCfwWsdOZDVE12OK7isF8p2WPFATGkXm2WRUooe6G3RQm9tlU qPOt2lzn1MaAiYm9UkLdCt6d9KaePZ/3CQfVihkH1v+uzq1E48kdZOUI4kZapjsZ JZ2EObnxJxVjodVO7m+xrmt5056JP6xRvfppMEMGufeL+w3U -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:49 2026 by rpki-client