This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206033.roa File: AS206033.roa (raw, json) Hash identifier: 7XAXwLohbeApqccRe9iG7XXbExe4WmZ300O0zkmb/Y4= Subject key identifier: 66:24:2B:B0:6D:F7:0D:80:74:47:9C:E2:90:41:A5:10:FB:2A:C4:19 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4488FA8A63BE36CAB898CFE8DE7722670F6768FD Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206033.roa Signing time: Tue 02 Dec 2025 12:33:04 +0000 ROA not before: Tue 02 Dec 2025 12:28:04 +0000 ROA not after: Tue 01 Dec 2026 12:33:04 +0000 asID: 206033 IP address blocks: 82.38.38.0/23 maxlen: 24 2a13:9500:6b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:88:fa:8a:63:be:36:ca:b8:98:cf:e8:de:77:22:67:0f:67:68:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 12:28:04 2025 GMT Not After : Dec 1 12:33:04 2026 GMT Subject: CN=66242BB06DF70D8074479CE29041A510FB2AC419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:7b:a1:be:38:30:af:05:da:a1:9b:cb:ff: 86:f3:aa:0b:3f:ac:a1:f1:7b:f2:26:4a:c6:18:c0: 57:85:a2:e3:8a:d4:b5:0d:2f:5a:0f:96:e9:cd:37: c1:3b:04:10:ce:7f:c8:c0:b3:37:5e:83:74:b8:7e: 63:1b:81:32:1c:4d:14:93:01:40:e6:cd:d9:9b:b9: ff:42:93:5d:44:b8:33:dd:40:43:7d:46:9c:9b:5d: 78:b5:a1:51:89:83:28:29:eb:e4:23:dd:28:5a:fe: 7a:b3:83:23:ea:22:14:f3:ec:ad:98:aa:57:42:87: d2:34:cc:c0:d5:17:67:f9:d2:8c:58:70:3c:77:39: 06:d7:fe:e2:71:90:f7:cf:89:aa:b0:e2:58:f3:7a: 36:8e:c6:91:0c:8a:8e:c6:33:78:36:1a:0d:00:39: 1c:1f:b3:a8:31:a4:5e:f9:2c:8f:90:c7:7a:b3:14: 28:b5:e3:2d:32:8e:fc:51:24:dd:e5:7b:3e:92:61: 22:86:85:cc:b2:7c:2d:a6:e1:bb:7b:27:9a:ef:bc: ec:3f:ee:3a:2f:c6:0a:7f:f9:27:92:c0:63:11:be: 50:d6:46:fe:40:23:18:3d:48:b7:7f:ce:61:e5:6c: 5a:34:00:dc:6e:8c:51:bb:39:a8:98:e8:b8:b5:6c: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:2B:B0:6D:F7:0D:80:74:47:9C:E2:90:41:A5:10:FB:2A:C4:19 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.38.0/23 IPv6: 2a13:9500:6b::/48 Signature Algorithm: sha256WithRSAEncryption 67:9a:a0:39:43:18:55:64:c1:6d:33:d1:03:8c:61:f7:d9:a4: 7b:e8:99:d7:11:96:18:26:ec:52:a0:14:b9:e3:69:83:2d:83: 95:4f:90:16:61:5b:30:0a:c0:b6:c5:87:5b:21:c2:28:9c:e3: f5:ee:c9:64:f3:11:92:0e:b6:62:c8:2a:21:eb:ba:78:60:dc: 02:32:b1:f3:b2:b2:38:dd:d7:46:3d:da:cb:9b:1a:3e:4f:ec: c6:2a:69:76:71:47:0b:c1:2b:3e:b2:22:dd:0a:25:ac:c0:7a: b4:c5:dc:b3:52:90:76:e2:12:a1:51:f7:f8:0c:77:2c:c7:be: ef:c0:e3:b7:2a:51:51:0f:92:70:4b:8f:2c:ac:4c:5b:77:cc: 01:6e:39:53:d4:0e:eb:d4:52:da:4e:cd:01:20:0c:54:aa:6d: e7:92:c3:8e:52:33:7f:7a:54:b1:f3:ec:29:95:76:46:48:b1: a2:19:25:63:d2:95:f8:8e:2b:2c:da:7e:d3:2e:6b:12:98:9d: bd:11:28:59:22:b4:89:61:c8:aa:ea:a4:53:8f:6a:4d:77:1a: 73:06:10:b7:44:7b:bc:32:5f:d0:53:db:0b:22:89:34:e9:12: 5e:5b:5d:0a:4f:11:cc:14:05:f5:b5:ad:15:d6:fd:45:e5:c1: c2:98:67:a9 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIURIj6imO+Nsq4mM/o3nciZw9naP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIxMjI4MDRaFw0yNjEyMDExMjMzMDRaMDMxMTAvBgNV BAMTKDY2MjQyQkIwNkRGNzBEODA3NDQ3OUNFMjkwNDFBNTEwRkIyQUM0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aHuhvjgwrwXaoZvL/4bzqgs/ rKHxe/ImSsYYwFeFouOK1LUNL1oPlunNN8E7BBDOf8jAszdeg3S4fmMbgTIcTRST AUDmzdmbuf9Ck11EuDPdQEN9RpybXXi1oVGJgygp6+Qj3Sha/nqzgyPqIhTz7K2Y qldCh9I0zMDVF2f50oxYcDx3OQbX/uJxkPfPiaqw4ljzejaOxpEMio7GM3g2Gg0A ORwfs6gxpF75LI+Qx3qzFCi14y0yjvxRJN3lez6SYSKGhcyyfC2m4bt7J5rvvOw/ 7jovxgp/+SeSwGMRvlDWRv5AIxg9SLd/zmHlbFo0ANxujFG7OaiY6Li1bFabAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUZiQrsG33DYB0R5zikEGlEPsqxBkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2MDMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBUiYm MA8EAgACMAkDBwAqE5UAAGswDQYJKoZIhvcNAQELBQADggEBAGeaoDlDGFVkwW0z 0QOMYffZpHvomdcRlhgm7FKgFLnjaYMtg5VPkBZhWzAKwLbFh1shwiic4/XuyWTz EZIOtmLIKiHrunhg3AIysfOysjjd10Y92subGj5P7MYqaXZxRwvBKz6yIt0KJazA erTF3LNSkHbiEqFR9/gMdyzHvu/A47cqUVEPknBLjyysTFt3zAFuOVPUDuvUUtpO zQEgDFSqbeeSw45SM396VLHz7CmVdkZIsaIZJWPSlfiOKyzaftMuaxKYnb0RKFki tIlhyKrqpFOPak13GnMGELdEe7wyX9BT2wsiiTTpEl5bXQpPEcwUBfW1rRXW/UXl wcKYZ6k= -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:03 2025 by rpki-client