This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205247.roa
File: AS205247.roa (raw, json)
Hash identifier: ++BFGNoKoG8fFdNVfcE80Ap/v71RB7Gu8NmSvilC1CQ=
Subject key identifier: 75:EF:37:17:C5:64:32:F8:A6:ED:C3:CC:A2:ED:04:5B:E2:78:D8:D8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05D2A59BC9667787BB829A12970FD6A8D028F344
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205247.roa
Signing time: Tue 13 Jan 2026 11:59:00 +0000
ROA not before: Tue 13 Jan 2026 11:54:00 +0000
ROA not after: Tue 12 Jan 2027 11:59:00 +0000
asID: 205247
IP address blocks: 82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d2:a5:9b:c9:66:77:87:bb:82:9a:12:97:0f:d6:a8:d0:28:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 13 11:54:00 2026 GMT
Not After : Jan 12 11:59:00 2027 GMT
Subject: CN=75EF3717C56432F8A6EDC3CCA2ED045BE278D8D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:c0:d7:ea:5e:7e:e1:6f:4d:f8:c2:71:0e:
60:74:f0:b0:1a:e8:6a:ba:4f:00:99:af:43:86:d4:
a9:0d:c9:e9:4c:95:6d:14:1a:71:65:c6:b4:09:51:
56:01:24:43:61:d4:bd:e8:63:1c:08:51:4b:bb:2b:
cc:fe:eb:6a:d7:2a:40:08:ff:7f:51:37:48:c6:2f:
f5:cd:95:26:e3:1f:7f:e5:d4:e2:20:d0:19:a6:74:
f7:47:c8:81:da:e5:0c:1a:96:6e:35:d2:aa:c1:b9:
5f:90:20:e9:db:af:72:e5:ec:39:5c:2d:eb:98:06:
80:b3:01:0e:1e:20:ba:61:a3:db:30:f0:7a:d8:40:
a7:33:ec:6f:df:ff:66:60:3f:8d:8d:83:f1:d5:d3:
54:85:4f:e1:3c:91:1a:e6:b2:b5:92:2b:c3:03:ca:
a8:eb:34:bd:19:a4:98:eb:ed:67:e8:73:4f:52:c9:
80:79:3e:b2:32:38:ed:2e:a7:7d:06:39:24:95:5a:
e2:18:ab:50:04:e4:7d:a8:72:8d:80:35:d5:91:7e:
68:d0:3f:2a:c8:5e:ec:51:d6:16:5b:64:a4:48:0b:
92:ae:e8:cc:ea:e2:22:96:34:85:2e:ec:8f:47:44:
cc:28:49:67:89:da:90:a6:6b:56:ab:48:a9:9f:fe:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EF:37:17:C5:64:32:F8:A6:ED:C3:CC:A2:ED:04:5B:E2:78:D8:D8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205247.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.162.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:7b:d4:49:2c:ec:0f:5b:0a:a4:e9:72:e1:a2:7e:85:47:66:
a5:66:2b:c1:48:7c:a4:ba:3b:d5:29:3a:61:3d:22:c9:cf:e8:
93:4d:36:98:a0:bd:b6:e8:03:29:ad:4b:84:dc:37:f6:7f:89:
23:dc:e4:80:2a:8e:94:84:a0:c6:f1:f7:98:0c:e1:35:56:bf:
d4:ad:01:ec:25:36:52:c4:09:f8:16:7b:3b:e3:e6:44:87:8a:
38:72:08:24:ed:96:13:cb:d3:37:ac:00:43:00:3e:31:da:48:
2f:75:f5:bb:7e:63:2c:76:ee:ae:49:a2:b2:ec:a1:ef:db:b3:
8f:cc:f4:83:f1:e6:84:51:dd:f4:f2:e9:f4:3a:69:40:42:73:
32:64:3f:92:d8:a7:81:c7:a2:59:18:54:a7:4c:f8:ff:29:14:
05:f4:38:1a:0a:dd:d8:51:74:98:87:fe:03:0d:4e:b3:0f:d3:
c1:2a:aa:ae:4d:db:ad:21:a9:7f:bf:16:5d:fb:12:a9:07:1c:
7b:9b:cd:3d:ff:2e:ce:79:e4:71:39:ff:6a:67:15:00:12:95:
14:08:2a:0b:95:08:4e:3a:5b:0c:9b:c8:aa:af:23:17:09:15:
6b:69:fc:84:64:2c:67:0d:1b:05:ee:8b:0d:b2:9c:78:da:4a:
02:95:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:50 2026 by rpki-client