This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: knw30zgraU+4PiWH+vhJ2slQoXUJ6ST7Vu0pE4JaJVs= Subject key identifier: E6:74:98:76:82:9D:FA:BB:86:48:4D:FD:05:1E:EC:B2:F1:DB:74:3A Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3186C9A2DEC1CC7A27F7456B5BCA41C9410A8494 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa Signing time: Thu 04 Dec 2025 10:43:53 +0000 ROA not before: Thu 04 Dec 2025 10:38:53 +0000 ROA not after: Thu 03 Dec 2026 10:43:53 +0000 asID: 205886 IP address blocks: 82.23.171.0/24 maxlen: 24 82.23.249.0/24 maxlen: 24 82.24.24.0/24 maxlen: 24 82.24.110.0/24 maxlen: 24 82.24.144.0/24 maxlen: 24 82.25.200.0/24 maxlen: 24 82.26.196.0/24 maxlen: 24 82.27.3.0/24 maxlen: 24 82.27.118.0/24 maxlen: 24 82.27.132.0/24 maxlen: 24 82.29.48.0/24 maxlen: 24 82.38.9.0/24 maxlen: 24 82.38.17.0/24 maxlen: 24 82.38.19.0/24 maxlen: 24 82.38.40.0/24 maxlen: 24 82.38.121.0/24 maxlen: 24 82.39.154.0/24 maxlen: 24 82.39.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:c9:a2:de:c1:cc:7a:27:f7:45:6b:5b:ca:41:c9:41:0a:84:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 4 10:38:53 2025 GMT Not After : Dec 3 10:43:53 2026 GMT Subject: CN=E6749876829DFABB86484DFD051EECB2F1DB743A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:32:58:b7:ba:7c:f7:13:58:ab:b0:64:64: 8a:5f:2f:b8:85:71:9d:23:db:52:bf:82:bf:99:b0: 4f:a7:a5:56:a6:83:30:3f:2d:35:f7:cb:23:9a:88: 7b:4f:f2:8a:ec:c5:b1:7e:05:e8:ae:31:0f:2c:1f: 40:a5:ac:17:b1:d6:0a:ef:24:b1:c4:24:55:4e:58: db:ba:24:0c:91:76:b8:e3:da:d3:38:ee:3f:69:2f: 36:67:ff:d0:3d:68:64:7e:2d:c7:ce:87:cb:57:18: 8a:6e:11:25:37:51:d3:6c:e8:eb:ac:7c:8b:f5:a3: 9a:38:4e:1c:29:2c:96:10:c8:94:0d:11:80:3f:cd: bb:be:e0:a6:9c:8c:1f:ec:c9:e2:3f:03:9d:1a:8a: c6:ef:5d:f4:ce:42:14:c4:2a:d5:65:b8:93:d9:11: df:70:07:ec:9e:b9:89:f5:f2:ee:af:e3:52:ad:39: 61:53:c1:2b:2b:1b:31:7d:0c:2b:01:ca:1d:1d:3b: 2d:af:00:58:a6:9b:64:a1:76:08:ea:14:92:e7:7b: f1:25:1d:de:5f:23:c7:31:b8:7a:0d:85:dc:59:9a: 77:8d:1e:ad:06:7c:2f:41:4a:75:37:b9:79:fa:e4: b5:08:a9:54:02:41:87:84:7b:6c:03:d8:30:a6:5a: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:74:98:76:82:9D:FA:BB:86:48:4D:FD:05:1E:EC:B2:F1:DB:74:3A X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.23.171.0/24 82.23.249.0/24 82.24.24.0/24 82.24.110.0/24 82.24.144.0/24 82.25.200.0/24 82.26.196.0/24 82.27.3.0/24 82.27.118.0/24 82.27.132.0/24 82.29.48.0/24 82.38.9.0/24 82.38.17.0/24 82.38.19.0/24 82.38.40.0/24 82.38.121.0/24 82.39.154.0/24 82.39.205.0/24 Signature Algorithm: sha256WithRSAEncryption 65:e5:a5:20:85:39:30:87:fb:e8:ef:96:9c:e7:fb:00:d8:66: d9:8b:d7:9c:89:5d:43:dd:41:6d:52:76:3e:bd:82:b6:28:1f: 36:64:5a:8b:5a:d2:6e:a1:43:97:2b:31:df:2c:3f:6a:55:4f: bc:10:08:df:dc:e4:2f:dc:6c:84:c1:d0:96:14:a2:82:59:a5: 47:d1:a0:aa:33:50:6f:30:1b:ec:34:72:5f:39:8b:21:df:1c: 50:30:eb:96:80:7e:6d:d8:b8:34:75:cb:78:f8:fe:ef:b7:31: 46:18:c5:e1:23:75:d6:94:f4:be:08:c4:5d:75:7a:ff:15:b1: b8:64:18:ef:09:f6:cf:98:1a:63:68:2a:d8:e8:53:e0:da:28: a9:89:5a:7f:9a:1b:4f:c5:47:1b:74:fd:07:36:df:32:a3:b0: 2a:ab:b0:51:00:a2:d0:4d:92:46:50:b2:ca:51:a9:36:3d:03: cf:9b:39:6a:57:08:7a:02:c1:62:8e:dd:c2:c4:d7:4e:0b:a9: e0:52:cb:70:26:52:33:44:5e:74:d0:a4:3a:02:18:93:73:8d: 0d:c7:21:34:c1:1d:35:e2:83:0a:cd:ad:36:af:26:e2:33:15: ff:9f:7d:6e:91:0e:9b:78:72:f5:cb:e1:61:df:c7:63:9b:69: d0:3a:22:86 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUMYbJot7BzHon90VrW8pByUEKhJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDQxMDM4NTNaFw0yNjEyMDMxMDQzNTNaMDMxMTAvBgNV BAMTKEU2NzQ5ODc2ODI5REZBQkI4NjQ4NERGRDA1MUVFQ0IyRjFEQjc0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQHjJYt7p89xNYq7BkZIpfL7iF cZ0j21K/gr+ZsE+npVamgzA/LTX3yyOaiHtP8orsxbF+BeiuMQ8sH0ClrBex1grv JLHEJFVOWNu6JAyRdrjj2tM47j9pLzZn/9A9aGR+LcfOh8tXGIpuESU3UdNs6Ous fIv1o5o4ThwpLJYQyJQNEYA/zbu+4KacjB/syeI/A50aisbvXfTOQhTEKtVluJPZ Ed9wB+yeuYn18u6v41KtOWFTwSsrGzF9DCsByh0dOy2vAFimm2ShdgjqFJLne/El Hd5fI8cxuHoNhdxZmneNHq0GfC9BSnU3uXn65LUIqVQCQYeEe2wD2DCmWnTBAgMB AAGjggJxMIICbTAdBgNVHQ4EFgQU5nSYdoKd+ruGSE39BR7ssvHbdDowHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAFIX qwMEAFIX+QMEAFIYGAMEAFIYbgMEAFIYkAMEAFIZyAMEAFIaxAMEAFIbAwMEAFIb dgMEAFIbhAMEAFIdMAMEAFImCQMEAFImEQMEAFImEwMEAFImKAMEAFImeQMEAFIn mgMEAFInzTANBgkqhkiG9w0BAQsFAAOCAQEAZeWlIIU5MIf76O+WnOf7ANhm2YvX nIldQ91BbVJ2Pr2CtigfNmRai1rSbqFDlysx3yw/alVPvBAI39zkL9xshMHQlhSi glmlR9GgqjNQbzAb7DRyXzmLId8cUDDrloB+bdi4NHXLePj+77cxRhjF4SN11pT0 vgjEXXV6/xWxuGQY7wn2z5gaY2gq2OhT4NooqYlaf5obT8VHG3T9BzbfMqOwKquw UQCi0E2SRlCyylGpNj0Dz5s5alcIegLBYo7dwsTXTgup4FLLcCZSM0RedNCkOgIY k3ONDcchNMEdNeKDCs2tNq8m4jMV/599bpEOm3hy9cvhYd/HY5tp0Doihg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:23 2025 by rpki-client