This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209181.roa File: AS209181.roa (raw, json) Hash identifier: f/QD8ujuBc19R94XtqhVJ9oE+69fg2XGq8D/LLElYu0= Subject key identifier: AE:18:FB:57:60:8E:02:1B:2C:F6:4B:E4:E3:16:82:B5:3A:43:44:7B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 290B94ACEF49E6D72738A1348086DC7C17182187 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209181.roa Signing time: Thu 04 Dec 2025 07:55:14 +0000 ROA not before: Thu 04 Dec 2025 07:50:14 +0000 ROA not after: Thu 03 Dec 2026 07:55:14 +0000 asID: 209181 IP address blocks: 2a13:9500:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0b:94:ac:ef:49:e6:d7:27:38:a1:34:80:86:dc:7c:17:18:21:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 4 07:50:14 2025 GMT Not After : Dec 3 07:55:14 2026 GMT Subject: CN=AE18FB57608E021B2CF64BE4E31682B53A43447B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:9b:b9:fd:56:0f:56:2b:08:65:d0:00:ef: 91:db:a1:71:dd:e5:d1:69:58:99:cf:15:42:fd:f2: 46:c0:84:bd:b0:b3:2e:fe:2b:f3:c4:de:26:9f:32: 0a:21:38:50:4c:a8:b5:b5:69:2f:28:e3:ef:58:d8: 8c:53:2b:9a:54:37:d5:7c:8e:52:7e:e3:46:48:14: c9:7e:f1:68:85:ed:ad:0f:bd:a0:6e:a2:58:5f:d3: 72:ba:04:35:03:69:8f:17:fe:ef:96:78:ec:99:ca: fa:df:2d:b7:0a:16:7f:8b:bb:fb:07:8f:cd:13:56: da:6c:4a:85:c7:bf:d0:bb:ac:63:3c:21:77:90:58: d0:e5:8a:28:3e:1f:39:86:aa:b3:3e:80:63:4c:b6: 28:e1:0b:f3:c9:5b:51:67:77:10:d1:04:e8:8a:bc: f9:95:42:2e:54:f2:45:63:d5:76:68:20:e0:40:62: 6f:2b:24:c3:31:c5:ba:36:65:0d:33:df:6c:e8:4c: f2:42:3d:19:8b:9a:00:ee:3d:76:ad:94:83:9d:5a: 6e:ff:2c:33:fb:6a:13:7a:73:a1:4c:fe:a7:ea:10: 7b:8e:1e:36:1e:c8:75:2b:6f:eb:c3:c7:c6:b3:25: 76:b0:f0:0e:52:52:60:a0:77:95:70:2a:96:6a:19: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:FB:57:60:8E:02:1B:2C:F6:4B:E4:E3:16:82:B5:3A:43:44:7B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209181.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:2d::/48 Signature Algorithm: sha256WithRSAEncryption 70:e0:ec:b6:84:3d:ee:91:37:25:5c:f4:f7:ec:05:12:f4:9d: 02:4b:d1:7a:46:f6:bd:73:98:6f:15:61:6f:ac:64:ff:3b:24: 66:4c:1a:9d:af:24:ae:21:cc:72:ed:df:a5:a0:cd:cf:bc:fa: 7a:9a:01:8a:2d:17:57:0b:3e:40:88:5d:49:49:8b:9d:b1:3f: 63:a1:cb:17:b8:fc:90:e4:a2:23:9f:0b:1a:ff:57:3f:2c:35: 4d:65:b6:22:02:fe:0d:36:0f:c3:2b:13:28:91:11:f1:7b:0f: 2f:df:5b:ab:ba:d8:5e:06:a1:f5:e6:07:dc:0c:d8:35:7e:f7: e4:45:00:a3:ca:40:68:71:ea:a5:40:32:d3:33:f0:69:79:f0: fb:25:1e:a3:64:ea:26:9f:26:e8:26:c0:a6:58:1d:82:e5:a2: 6e:f2:c1:f6:cc:34:d4:ae:53:40:ae:2f:9b:82:85:63:3e:58: 86:41:87:06:9b:bc:81:84:7f:ea:d7:28:e3:2b:93:72:a2:2a: 53:9c:dd:07:f2:98:53:d7:4f:4a:cc:8d:42:10:36:46:75:b6: 3e:23:02:c0:52:66:0e:64:db:0e:25:1a:b5:fa:de:c1:b1:81: 77:17:cb:13:c6:aa:4c:f4:b0:f2:1c:37:4a:39:13:25:5e:27: 3e:3b:eb:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUKQuUrO9J5tcnOKE0gIbcfBcYIYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDQwNzUwMTRaFw0yNjEyMDMwNzU1MTRaMDMxMTAvBgNV BAMTKEFFMThGQjU3NjA4RTAyMUIyQ0Y2NEJFNEUzMTY4MkI1M0E0MzQ0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmpu5/VYPVisIZdAA75HboXHd 5dFpWJnPFUL98kbAhL2wsy7+K/PE3iafMgohOFBMqLW1aS8o4+9Y2IxTK5pUN9V8 jlJ+40ZIFMl+8WiF7a0PvaBuolhf03K6BDUDaY8X/u+WeOyZyvrfLbcKFn+Lu/sH j80TVtpsSoXHv9C7rGM8IXeQWNDliig+HzmGqrM+gGNMtijhC/PJW1FndxDRBOiK vPmVQi5U8kVj1XZoIOBAYm8rJMMxxbo2ZQ0z32zoTPJCPRmLmgDuPXatlIOdWm7/ LDP7ahN6c6FM/qfqEHuOHjYeyHUrb+vDx8azJXaw8A5SUmCgd5VwKpZqGTe7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUrhj7V2COAhss9kvk4xaCtTpDRHswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA5MTgxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAAtMA0GCSqGSIb3DQEBCwUAA4IBAQBw4Oy2hD3ukTclXPT37AUS9J0CS9F6Rva9 c5hvFWFvrGT/OyRmTBqdrySuIcxy7d+loM3PvPp6mgGKLRdXCz5AiF1JSYudsT9j ocsXuPyQ5KIjnwsa/1c/LDVNZbYiAv4NNg/DKxMokRHxew8v31urutheBqH15gfc DNg1fvfkRQCjykBoceqlQDLTM/BpefD7JR6jZOomnyboJsCmWB2C5aJu8sH2zDTU rlNAri+bgoVjPliGQYcGm7yBhH/q1yjjK5NyoipTnN0H8phT109KzI1CEDZGdbY+ IwLAUmYOZNsOJRq1+t7BsYF3F8sTxqpM9LDyHDdKORMlXic+O+tL -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:32 2025 by rpki-client