This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207994.roa File: AS207994.roa (raw, json) Hash identifier: hRYWpg+suP23dE152HtONGN5lHohgdxRgONc4rbR1ac= Subject key identifier: 66:24:63:9A:D1:FD:6F:47:83:41:57:96:F6:6D:63:B9:5A:21:C2:5F Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6D872FEBF757453E87DCC7580303B43173846B2C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207994.roa Signing time: Sun 18 Jan 2026 17:02:07 +0000 ROA not before: Sun 18 Jan 2026 16:57:07 +0000 ROA not after: Sun 17 Jan 2027 17:02:07 +0000 asID: 207994 IP address blocks: 82.38.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:87:2f:eb:f7:57:45:3e:87:dc:c7:58:03:03:b4:31:73:84:6b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 18 16:57:07 2026 GMT Not After : Jan 17 17:02:07 2027 GMT Subject: CN=6624639AD1FD6F4783415796F66D63B95A21C25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:f0:e6:3f:e8:e4:0b:1c:31:73:ea:4b:e0: e4:03:4b:9f:41:be:37:c7:99:07:33:31:6d:2c:1b: f1:a3:aa:eb:c5:c4:e8:58:96:c3:60:22:fe:92:c9: 7f:df:e5:16:4c:62:2c:96:7e:7e:28:95:88:bd:8e: b1:bc:22:38:5d:77:12:91:de:a2:f9:43:d7:24:cf: 43:24:b9:36:48:41:5c:d6:ee:a0:52:41:85:d2:4a: 20:bb:63:2a:51:2c:57:8a:28:22:8d:b8:34:75:81: 15:92:b7:c5:6d:75:f6:54:56:c6:6c:8f:f8:cd:90: 9f:2b:fc:d9:a1:3f:9e:c9:56:b7:a1:f5:c4:78:b2: 5b:99:30:23:5b:8e:f1:f1:a9:89:93:cc:71:ef:54: bb:87:b3:ae:8a:a8:6d:d7:5b:01:38:ba:52:d6:ce: a1:7b:50:5b:38:86:c4:3d:e8:64:ee:38:2c:2b:d3: 17:ff:fc:0b:0b:ff:d3:69:6d:21:94:4c:a5:09:fa: 57:ea:18:3a:05:2b:74:0f:d1:ac:45:90:a0:dc:d1: 05:c3:35:11:0d:13:02:5c:69:54:de:65:35:dc:8b: db:44:7d:96:06:67:82:2e:a7:00:d5:4c:bd:72:b3: b1:06:a9:03:f4:f6:c1:61:3c:d2:31:4a:ac:64:c5: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:63:9A:D1:FD:6F:47:83:41:57:96:F6:6D:63:B9:5A:21:C2:5F X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.96.0/24 Signature Algorithm: sha256WithRSAEncryption 66:05:4e:71:13:49:0e:f2:0b:84:3d:e1:86:7a:01:2c:63:c5: 68:3f:71:4c:bf:78:d6:b9:12:19:3c:22:37:9c:26:e0:c4:91: 2f:8e:e7:12:b7:37:74:15:33:0d:e4:6f:e0:73:87:90:f8:57: 61:24:1e:68:66:f4:db:b7:9e:3d:ce:c6:42:7e:2e:8b:65:51: db:34:f4:d5:33:22:41:a8:af:09:23:58:f7:f9:c2:d7:21:ec: 9d:e6:82:4a:12:8f:d3:f7:76:56:e7:30:ba:47:e6:da:b9:43: 7f:c4:99:ee:56:ff:43:d5:03:52:b8:cb:82:8a:1d:74:bb:60: 08:9b:18:40:3d:18:84:a4:6b:d7:09:e7:4b:54:bb:78:97:63: bf:24:20:b4:03:a7:5b:e5:1a:1c:8e:17:61:f1:1c:f2:fb:b0: 17:1f:03:12:a0:9e:35:c7:f0:29:ba:f2:a7:6d:9e:ac:73:9c: ce:84:59:b0:17:15:6b:d0:d2:4a:51:6b:df:c1:8a:00:a4:0b: ba:a0:b7:10:fc:9e:51:89:bc:73:a0:5d:d0:6e:d5:09:c9:93: 15:ea:98:37:8d:4c:f1:4a:f7:ea:6a:69:24:aa:8f:54:8e:e7: 13:de:cc:7d:d1:48:ce:66:1f:b5:f9:6d:ab:c1:2a:13:01:f8: 6d:df:27:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbYcv6/dXRT6H3MdYAwO0MXOEaywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTgxNjU3MDdaFw0yNzAxMTcxNzAyMDdaMDMxMTAvBgNV BAMTKDY2MjQ2MzlBRDFGRDZGNDc4MzQxNTc5NkY2NkQ2M0I5NUEyMUMyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZ/DmP+jkCxwxc+pL4OQDS59B vjfHmQczMW0sG/GjquvFxOhYlsNgIv6SyX/f5RZMYiyWfn4olYi9jrG8IjhddxKR 3qL5Q9ckz0MkuTZIQVzW7qBSQYXSSiC7YypRLFeKKCKNuDR1gRWSt8VtdfZUVsZs j/jNkJ8r/NmhP57JVreh9cR4sluZMCNbjvHxqYmTzHHvVLuHs66KqG3XWwE4ulLW zqF7UFs4hsQ96GTuOCwr0xf//AsL/9NpbSGUTKUJ+lfqGDoFK3QP0axFkKDc0QXD NRENEwJcaVTeZTXci9tEfZYGZ4IupwDVTL1ys7EGqQP09sFhPNIxSqxkxZBHAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZiRjmtH9b0eDQVeW9m1juVohwl8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA3OTk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiZg MA0GCSqGSIb3DQEBCwUAA4IBAQBmBU5xE0kO8guEPeGGegEsY8VoP3FMv3jWuRIZ PCI3nCbgxJEvjucStzd0FTMN5G/gc4eQ+FdhJB5oZvTbt549zsZCfi6LZVHbNPTV MyJBqK8JI1j3+cLXIeyd5oJKEo/T93ZW5zC6R+bauUN/xJnuVv9D1QNSuMuCih10 u2AImxhAPRiEpGvXCedLVLt4l2O/JCC0A6db5Rocjhdh8Rzy+7AXHwMSoJ41x/Ap uvKnbZ6sc5zOhFmwFxVr0NJKUWvfwYoApAu6oLcQ/J5RibxzoF3QbtUJyZMV6pg3 jUzxSvfqamkkqo9UjucT3sx90UjOZh+1+W2rwSoTAfht3yeE -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:04 2026 by rpki-client