This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210805.roa
File: AS210805.roa (raw, json)
Hash identifier: 0N8tPyfvuakU73BS8s+cKjbfnn/GkGwYuwdMrrrJcuU=
Subject key identifier: A7:37:26:21:35:0A:E3:BD:8A:77:C4:A6:8B:6C:5D:6C:89:98:AF:CE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 467833F24C718BCAB61C405DC6EB8F6E4BD0C0F6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210805.roa
Signing time: Wed 14 Jan 2026 13:55:33 +0000
ROA not before: Wed 14 Jan 2026 13:50:33 +0000
ROA not after: Wed 13 Jan 2027 13:55:33 +0000
asID: 210805
IP address blocks: 82.22.116.0/24 maxlen: 24
82.22.117.0/24 maxlen: 24
82.22.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:78:33:f2:4c:71:8b:ca:b6:1c:40:5d:c6:eb:8f:6e:4b:d0:c0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 14 13:50:33 2026 GMT
Not After : Jan 13 13:55:33 2027 GMT
Subject: CN=A7372621350AE3BD8A77C4A68B6C5D6C8998AFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:9e:07:b4:14:9b:fa:85:07:2b:95:89:3a:
8a:5d:3e:e0:7b:84:ee:69:59:62:3d:c3:40:6c:41:
cd:7a:f3:f7:48:72:16:19:32:48:4b:22:e5:66:c4:
72:bb:65:99:4f:91:24:7e:bd:31:e8:46:ac:d9:b5:
17:74:12:68:09:16:fe:b0:63:5d:11:8f:f8:64:88:
4e:71:99:93:63:43:8f:b0:2e:d6:ec:99:be:69:51:
a6:a8:57:7b:9a:77:99:bd:35:a3:a9:e4:e2:b0:fb:
dc:4a:f6:23:8a:16:9d:46:80:c3:3f:5e:66:1b:17:
5c:a5:fc:8f:f8:e7:e7:91:86:ab:f5:b6:9d:21:80:
ab:3e:cd:9d:9e:4b:2c:2b:0e:68:66:d2:5a:70:b8:
3f:61:44:99:bc:5f:e4:3d:b4:eb:77:74:13:32:5b:
fa:b5:48:cb:ce:5b:b7:c5:0b:45:2a:84:3b:f8:a5:
fb:75:e8:8f:68:f0:92:31:43:15:68:de:98:a7:04:
ff:9f:08:fb:ea:1b:f0:3a:22:41:a1:8a:71:57:71:
3d:a7:7a:82:8e:b4:8f:d3:7a:6b:c1:a3:51:15:3f:
2a:47:72:54:82:5c:08:f6:1a:f2:ca:7f:cd:0d:24:
e4:07:d7:b5:91:14:0f:4f:05:f0:02:63:77:3b:7f:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:26:21:35:0A:E3:BD:8A:77:C4:A6:8B:6C:5D:6C:89:98:AF:CE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.116.0/23
82.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b7:cf:53:88:1b:bc:c0:07:fa:37:3a:fb:3b:c4:b4:85:e4:
a8:8b:1e:92:d9:6f:bf:02:23:cc:86:a8:f9:32:33:91:df:d7:
58:4a:02:e7:ca:55:8b:ff:6d:48:4d:2b:28:cc:7e:f4:af:52:
f8:b4:a8:50:80:10:f4:bd:d7:78:a1:54:6a:5c:92:68:2d:6a:
6e:ef:49:83:e0:05:67:96:87:7f:56:97:eb:3c:d9:38:31:2b:
af:50:49:f2:69:7f:e1:c0:2f:2c:4e:40:8e:e8:c5:38:62:3a:
12:46:75:bc:06:57:bc:da:b0:41:d0:35:87:3a:60:fa:20:c0:
b2:1f:18:32:c3:00:42:35:be:41:83:f8:b6:b7:12:6e:35:c2:
3e:61:3c:f5:09:57:ff:11:cf:07:bc:5b:ff:cf:b9:e6:e6:56:
ed:e3:6a:6b:ad:1a:88:93:21:06:c4:ca:af:07:fa:49:ee:0f:
a9:e6:1b:d9:33:45:6a:a0:f9:fd:7e:25:5c:bd:71:9a:0e:cc:
51:8e:a5:71:da:f0:36:6e:eb:01:7b:e4:98:c6:02:57:59:8d:
2c:16:80:36:46:58:a1:41:8c:43:2d:64:3a:94:2e:94:7b:57:
a3:e9:f1:19:4f:69:27:9f:f1:5f:3b:a6:6b:99:35:05:9f:a2:
7e:36:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:05:32 2026 by rpki-client