This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa
File: AS203057.roa (raw, json)
Hash identifier: 3pYQPaehLMw5AMaZHuAdu43uTC2YzbYK36hFIYmwS0Q=
Subject key identifier: 89:EE:F7:82:18:4E:C5:AA:38:44:43:77:DB:C0:2B:41:F0:8E:0C:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 11D14439975AF6EB9EA4E603138F4A49A87F0430
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa
Signing time: Fri 16 Jan 2026 10:38:31 +0000
ROA not before: Fri 16 Jan 2026 10:33:31 +0000
ROA not after: Fri 15 Jan 2027 10:38:31 +0000
asID: 203057
IP address blocks: 82.22.167.0/24 maxlen: 24
82.26.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d1:44:39:97:5a:f6:eb:9e:a4:e6:03:13:8f:4a:49:a8:7f:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 16 10:33:31 2026 GMT
Not After : Jan 15 10:38:31 2027 GMT
Subject: CN=89EEF782184EC5AA38444377DBC02B41F08E0C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:cc:08:57:2a:15:66:79:bc:cc:4d:a0:db:
dd:45:fe:a0:70:4d:ec:b9:63:01:66:29:9b:fa:f6:
a3:a0:3d:de:80:c4:93:b3:b8:57:c7:c6:c1:80:a0:
fb:2d:08:4c:e2:01:b4:14:ba:c3:fc:d7:72:3d:c4:
7e:dc:3a:27:28:79:62:46:69:9b:15:1f:8a:b0:22:
12:38:d5:33:7e:59:90:e3:d0:b5:91:47:1a:63:5c:
6d:ed:75:49:bd:67:0f:48:6a:2d:ce:14:25:a3:cd:
18:76:7e:12:fe:dc:51:a7:0a:74:b9:97:8e:38:0e:
34:df:4d:6e:ff:cc:44:d3:fa:ab:61:b1:00:0b:0f:
ec:72:45:24:00:69:9c:7e:34:a6:1e:59:68:d9:e8:
26:74:83:ae:75:4f:2f:b4:c3:bf:7b:6c:9c:ec:b1:
b2:c6:0a:b9:2d:a6:fa:e2:01:5b:14:70:31:35:ee:
ed:28:bb:5c:b8:47:8e:64:30:09:34:85:b9:14:1b:
a9:02:37:fc:49:04:fe:e4:0d:4c:c7:9c:71:33:50:
1b:94:57:40:e8:7f:9c:2d:4d:7c:ae:c8:68:13:af:
72:bc:dd:0d:b7:54:de:2e:14:33:3e:b7:7b:fe:47:
fa:9e:5e:df:f8:13:f8:78:fb:1e:6f:d9:0a:bc:3a:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:F7:82:18:4E:C5:AA:38:44:43:77:DB:C0:2B:41:F0:8E:0C:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.167.0/24
82.26.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:da:7f:e5:f2:52:2c:09:14:a2:e1:d1:bb:81:5f:bc:5d:29:
48:45:e3:ed:e0:56:ab:f4:e1:60:c1:e9:07:ce:97:a4:b9:7f:
ef:95:d1:8f:f8:be:59:12:23:bf:f3:76:1f:09:e1:1e:29:a2:
06:b6:cb:22:f6:c2:b9:c9:3b:14:70:8a:03:bb:d3:73:9b:59:
c0:5a:dd:a1:3c:ba:d5:06:19:43:05:2c:fe:d8:9e:48:af:63:
4b:78:22:59:2d:32:d7:f6:4c:de:a7:4f:99:ae:92:56:7c:8c:
9a:9d:d6:7f:7d:98:1a:72:72:c1:bf:b3:3c:46:02:46:65:0e:
39:74:a4:e3:6c:51:57:37:4f:26:d3:9d:c3:44:b7:8d:b6:ea:
1a:14:a1:84:9d:22:19:0a:a6:b9:90:79:c9:5b:9e:67:a9:ed:
d0:03:2e:36:db:0d:c3:65:54:22:c6:b4:e7:26:af:2f:db:96:
a7:e2:09:59:4f:2b:6a:c9:f4:c2:1f:14:89:67:53:3f:e9:0d:
36:29:85:e9:df:1e:68:39:7e:c4:48:66:bf:fb:af:63:d0:48:
98:0d:51:1c:69:f3:67:8a:6e:dd:98:c0:2b:26:08:67:65:e1:
26:c3:bf:76:0f:ef:ca:3c:2f:4b:ef:f5:82:41:15:d9:dc:81:
8d:15:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:08 2026 by rpki-client