This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211091.roa File: AS211091.roa (raw, json) Hash identifier: Lv4O3Flc4F22PJqWk+PYJg/jDfiWgnwf/H6vFwfwlbM= Subject key identifier: 03:51:4E:D2:09:2C:86:5C:41:CD:9E:7B:30:5A:FA:83:0E:5C:9F:31 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 36603AA7297DFE03B9FB2D817D196012B9B5CE57 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211091.roa Signing time: Mon 29 Dec 2025 11:55:33 +0000 ROA not before: Mon 29 Dec 2025 11:50:33 +0000 ROA not after: Mon 28 Dec 2026 11:55:33 +0000 asID: 211091 IP address blocks: 82.23.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:60:3a:a7:29:7d:fe:03:b9:fb:2d:81:7d:19:60:12:b9:b5:ce:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 29 11:50:33 2025 GMT Not After : Dec 28 11:55:33 2026 GMT Subject: CN=03514ED2092C865C41CD9E7B305AFA830E5C9F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:fe:16:ba:20:bc:54:20:3b:39:9e:29:b9: 0a:ec:36:35:f9:bf:42:15:40:f1:40:b6:f5:52:a5: 7f:58:08:90:0f:5b:3e:f3:e1:9a:51:57:7d:cf:3d: a4:16:83:a5:48:a2:1f:d6:0a:37:28:b4:e9:a7:b7: 3c:7b:33:30:aa:38:9d:92:1c:ae:6f:31:ab:2c:29: 6e:ab:ab:02:57:1e:09:e9:eb:5b:76:62:ea:53:ab: 73:4a:76:20:48:73:17:cf:35:e6:e6:a5:80:96:cb: 58:65:11:17:80:5e:91:9f:26:39:db:64:90:da:6e: 65:31:04:35:bc:9b:69:43:2f:92:e2:1c:d8:be:4c: c0:0a:e7:c0:f6:43:85:25:be:dc:e3:e5:4d:69:56: e9:34:6e:5a:33:e8:20:7a:b0:88:ce:e8:a3:86:c6: 4a:7d:2a:aa:e6:eb:52:21:62:ef:71:f1:5d:04:b7: b6:fb:69:04:ad:68:42:60:20:a6:1f:ec:d5:1d:3c: 55:19:b3:ae:d6:1f:fb:14:8a:52:40:8c:a0:ae:e2: 90:fe:bb:37:cd:64:bb:38:80:8f:88:09:b2:67:6e: b6:f7:26:90:7b:3f:59:1a:b5:93:6c:9f:ce:df:ed: 2b:0b:e2:84:eb:f6:0f:23:ff:82:06:e1:b0:fe:e8: c3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:51:4E:D2:09:2C:86:5C:41:CD:9E:7B:30:5A:FA:83:0E:5C:9F:31 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.23.194.0/24 Signature Algorithm: sha256WithRSAEncryption 46:8a:da:b8:19:7f:9c:5f:b6:12:95:1a:df:94:3d:5c:c2:1c: 94:61:81:c4:be:40:4a:05:c5:98:27:22:ac:18:5f:24:a6:4b: 5e:1d:8c:62:5a:31:2f:39:14:6a:99:bb:6d:39:70:39:6c:3f: 36:a7:a3:6a:c0:6d:51:ac:32:de:87:25:e5:80:cd:f7:c1:6c: da:1f:05:86:98:75:0f:c4:61:b9:05:9b:c6:3c:52:1e:20:8f: 7a:cb:bc:ad:7f:45:ab:7a:c4:04:3d:bb:7e:d8:75:72:5f:21: f9:cf:6a:d2:b0:8e:a5:fc:27:4a:4b:d9:11:1e:bf:31:8c:83: 7d:94:7f:a0:b1:46:5b:d4:94:dc:9c:f9:80:90:5d:2d:8d:3e: 0f:1c:0d:af:8b:b5:48:fb:6f:90:2b:07:21:67:51:07:ab:2e: a1:26:4a:73:24:22:91:2c:4d:1b:2a:52:ca:2b:89:64:c0:c4: 08:c2:b9:fb:d8:ab:ff:fb:fe:10:b7:b1:b3:d3:e9:f0:92:0c: 56:7b:b9:35:6f:a4:98:ff:50:ab:61:5c:ba:86:07:f5:19:b6: 78:50:c8:ff:6e:c3:f6:5d:2a:c9:92:34:e7:47:c5:f4:78:b6: dd:f7:3d:01:75:cd:07:db:7c:fb:06:1d:3a:11:13:fb:d9:3f: 46:59:7f:6b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUNmA6pyl9/gO5+y2BfRlgErm1zlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjkxMTUwMzNaFw0yNjEyMjgxMTU1MzNaMDMxMTAvBgNV BAMTKDAzNTE0RUQyMDkyQzg2NUM0MUNEOUU3QjMwNUFGQTgzMEU1QzlGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4v4WuiC8VCA7OZ4puQrsNjX5 v0IVQPFAtvVSpX9YCJAPWz7z4ZpRV33PPaQWg6VIoh/WCjcotOmntzx7MzCqOJ2S HK5vMassKW6rqwJXHgnp61t2YupTq3NKdiBIcxfPNebmpYCWy1hlEReAXpGfJjnb ZJDabmUxBDW8m2lDL5LiHNi+TMAK58D2Q4Ulvtzj5U1pVuk0bloz6CB6sIjO6KOG xkp9Kqrm61IhYu9x8V0Et7b7aQStaEJgIKYf7NUdPFUZs67WH/sUilJAjKCu4pD+ uzfNZLs4gI+ICbJnbrb3JpB7P1katZNsn87f7SsL4oTr9g8j/4IG4bD+6MOhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUA1FO0gkshlxBzZ57MFr6gw5cnzEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExMDkxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhfC MA0GCSqGSIb3DQEBCwUAA4IBAQBGitq4GX+cX7YSlRrflD1cwhyUYYHEvkBKBcWY JyKsGF8kpkteHYxiWjEvORRqmbttOXA5bD82p6NqwG1RrDLehyXlgM33wWzaHwWG mHUPxGG5BZvGPFIeII96y7ytf0WresQEPbt+2HVyXyH5z2rSsI6l/CdKS9kRHr8x jIN9lH+gsUZb1JTcnPmAkF0tjT4PHA2vi7VI+2+QKwchZ1EHqy6hJkpzJCKRLE0b KlLKK4lkwMQIwrn72Kv/+/4Qt7Gz0+nwkgxWe7k1b6SY/1CrYVy6hgf1GbZ4UMj/ bsP2XSrJkjTnR8X0eLbd9z0Bdc0H23z7Bh06ERP72T9GWX9r -----END CERTIFICATE-----Generated at Sun Jan 25 11:05:29 2026 by rpki-client