This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213200.roa
File: AS213200.roa (raw, json)
Hash identifier: RoMhhFOFvKMexPqFw/tFiEbiqzj90A0NM+EU7eduINo=
Subject key identifier: B6:9A:CC:32:A1:B9:9B:95:E8:C0:7F:2F:44:19:77:E1:8B:E9:CB:1E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2DC9A21A9DE7E98319A9712B8D8B7A7B2D615212
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213200.roa
Signing time: Thu 04 Dec 2025 06:56:49 +0000
ROA not before: Thu 04 Dec 2025 06:51:49 +0000
ROA not after: Thu 03 Dec 2026 06:56:49 +0000
asID: 213200
IP address blocks: 82.22.62.0/24 maxlen: 24
82.26.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c9:a2:1a:9d:e7:e9:83:19:a9:71:2b:8d:8b:7a:7b:2d:61:52:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 4 06:51:49 2025 GMT
Not After : Dec 3 06:56:49 2026 GMT
Subject: CN=B69ACC32A1B99B95E8C07F2F441977E18BE9CB1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:eb:26:ce:de:a5:c6:1d:e6:ca:35:ca:c8:
3a:d1:e8:e7:f9:e4:63:81:d2:de:3b:39:7f:0d:86:
47:82:21:90:e0:19:4c:37:bf:5d:e3:05:07:b1:68:
6f:ab:c9:99:71:aa:a0:44:a7:a6:af:5e:81:d8:aa:
65:46:ed:f4:f0:15:54:44:21:cb:bf:55:04:63:0e:
69:73:2a:d1:f1:57:f0:4b:85:9f:41:16:1e:0f:b6:
98:24:4d:9a:54:80:77:70:a1:7b:e7:0c:8e:80:f1:
e4:26:f3:d9:e1:ed:58:9b:bd:cc:d7:f8:31:3f:ff:
c5:c2:1b:46:8f:ee:6a:2d:76:e8:c0:9f:29:cb:df:
e4:78:c4:20:a8:f2:fd:86:a6:33:33:ef:5b:bf:9a:
cb:88:31:fc:25:fe:ac:76:82:90:0e:f8:cd:ee:cc:
e5:3e:dc:56:8e:32:9f:47:94:28:66:cf:1c:16:61:
3f:fd:83:ab:c4:cc:d1:a8:17:ad:66:3c:b4:60:4f:
71:b2:1b:6e:f9:5f:37:d1:ce:27:ee:a8:5a:24:bf:
0b:1c:4e:3f:94:1c:36:e6:e0:11:c9:95:50:5c:ba:
e4:8d:b6:68:9e:bd:32:6a:59:5c:07:b4:a2:39:dc:
ed:0d:85:90:df:98:bb:c6:1e:39:79:1c:97:f7:e5:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:CC:32:A1:B9:9B:95:E8:C0:7F:2F:44:19:77:E1:8B:E9:CB:1E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.62.0/24
82.26.74.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2a:2a:96:1c:94:4b:2b:fc:44:79:5b:12:28:8b:70:9f:19:
3c:b3:1c:b7:38:8e:f9:94:f2:69:21:87:61:aa:7c:6e:a1:80:
b6:87:0c:d6:aa:eb:d7:b2:18:b0:cb:54:a7:7f:96:85:07:bd:
48:7b:97:4b:4c:63:e5:e0:1a:74:d7:c8:bc:3f:36:03:02:c7:
84:3a:e1:fd:64:99:9c:ea:1d:34:55:78:c2:79:10:af:87:a4:
2e:1c:2e:79:dd:81:eb:6d:a9:ee:03:3c:ae:54:97:8b:42:59:
48:e7:8a:89:5f:1f:e3:bb:38:8a:11:05:2b:61:19:db:24:e8:
5b:10:d2:8d:ef:92:da:99:90:83:7a:96:01:37:13:9b:ad:b3:
bc:97:8b:25:7c:3e:67:31:6f:4e:96:f0:b2:78:4d:54:58:69:
35:b7:96:0e:a9:86:d8:9e:29:ee:91:59:a0:92:e6:46:b4:58:
67:53:af:9e:ff:5f:3e:c5:d4:5a:2b:24:fe:a7:cc:15:b1:6b:
f5:b7:9e:d8:41:d3:9d:6e:2d:ce:16:c8:ce:69:36:ab:4a:ae:
c0:ad:90:00:ab:f3:0e:d1:56:93:69:e6:4a:26:57:71:01:d1:
50:5a:60:0d:75:fb:00:0d:52:ff:89:b0:62:3a:7b:e0:01:12:
58:9c:7f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:33:31 2025 by rpki-client