This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa File: AS213482.roa (raw, json) Hash identifier: HK33ivH790cgWf5VQMrWh/vkuvTpWfsIK7IOb0maa/M= Subject key identifier: 83:A6:A2:A6:A2:46:54:19:24:46:9E:E8:A6:38:9D:0E:28:74:82:2D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1F45EA049FD71D89B8BECC8FAC3F4EABEE1BB5E0 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa Signing time: Wed 03 Dec 2025 15:17:06 +0000 ROA not before: Wed 03 Dec 2025 15:12:06 +0000 ROA not after: Wed 02 Dec 2026 15:17:06 +0000 asID: 213482 IP address blocks: 82.22.119.0/24 maxlen: 24 82.22.200.0/24 maxlen: 24 82.23.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:45:ea:04:9f:d7:1d:89:b8:be:cc:8f:ac:3f:4e:ab:ee:1b:b5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 3 15:12:06 2025 GMT Not After : Dec 2 15:17:06 2026 GMT Subject: CN=83A6A2A6A246541924469EE8A6389D0E2874822D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:05:96:54:b8:98:4b:ca:a1:d3:dd:bb:a1: 74:20:09:8b:d0:13:8c:21:53:42:9f:d2:73:be:d3: 64:dc:59:e6:5f:47:89:ed:3c:d4:a8:d9:8b:c4:dd: 52:c8:87:6e:8e:b2:95:34:fd:4e:68:5a:7c:fd:91: 61:a2:be:9c:19:fd:ef:17:24:2f:60:95:46:f1:db: 03:3b:b0:9d:f9:6c:b0:5a:c5:16:bf:4d:3a:bf:9c: 73:80:b0:b8:43:0a:76:a7:0b:8f:e4:ee:30:60:78: 7a:cd:32:aa:b7:85:c7:e9:3d:20:5f:84:5e:ef:b2: de:f8:0c:47:5a:c9:b1:a2:98:76:ce:94:c8:43:d2: 7c:f5:98:39:0e:a0:be:0d:c6:8c:15:55:2e:40:1a: 5c:00:3c:d3:a5:91:cf:aa:e3:1a:0d:d6:4b:e3:63: dc:c5:84:0f:c7:49:eb:a2:51:de:36:c5:b2:c9:be: a8:9e:d9:a7:38:a8:31:48:13:d7:42:53:44:54:92: f7:a2:b6:c9:6d:e3:7a:25:74:00:2e:ba:b5:50:4a: 0f:2e:f1:5c:bf:b5:e1:68:52:a3:c2:28:8e:71:6a: dc:b7:25:59:77:8d:02:71:3d:51:b2:0d:7a:60:d9: 7c:d7:1b:64:eb:91:6c:79:56:33:78:39:06:cd:de: dc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A6:A2:A6:A2:46:54:19:24:46:9E:E8:A6:38:9D:0E:28:74:82:2D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.119.0/24 82.22.200.0/24 82.23.170.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:a9:ef:f3:64:81:53:49:58:4e:38:fe:82:cf:6b:54:eb:07: a7:11:20:e6:56:17:a3:64:93:07:c6:36:79:c9:be:b4:77:8d: 44:15:ac:9c:88:cf:e8:c7:07:80:df:63:f0:f9:6f:a7:93:6f: 6f:71:05:1e:c2:4e:ab:e2:07:bc:59:e4:a7:c2:b5:b4:0c:6b: 70:10:cc:b8:65:e8:d9:ae:a7:55:4b:5a:d3:48:bd:75:26:b4: cd:2f:b5:36:a4:cb:42:66:28:e3:75:3a:c0:1a:ab:b7:cf:d3: a8:32:4c:d0:48:f3:8e:53:4c:57:be:ef:fb:1b:7b:4c:3b:0a: 7f:33:51:35:e0:05:7c:ee:99:b4:d9:68:3e:6d:e0:0f:a1:d7: eb:9d:91:fd:2d:e7:f2:cc:f6:47:06:fb:80:fb:14:10:30:57: a0:54:83:a4:a3:38:37:53:1f:6f:cf:90:ce:67:d1:d8:74:f9: e4:bd:2e:12:64:70:56:13:f8:b8:ae:eb:2b:ec:83:de:20:81: d4:73:e5:1a:bb:c7:c8:68:08:dc:26:1a:f6:80:0a:ee:70:ec: 4f:61:7f:9a:9c:5c:98:f6:75:2c:97:e2:31:42:4c:35:c9:ea: 6c:dd:39:a9:c9:cb:f2:d0:e0:09:e7:e6:52:90:bb:8b:56:d2: ab:b7:f4:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUH0XqBJ/XHYm4vsyPrD9Oq+4bteAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDMxNTEyMDZaFw0yNjEyMDIxNTE3MDZaMDMxMTAvBgNV BAMTKDgzQTZBMkE2QTI0NjU0MTkyNDQ2OUVFOEE2Mzg5RDBFMjg3NDgyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+wWWVLiYS8qh0927oXQgCYvQ E4whU0Kf0nO+02TcWeZfR4ntPNSo2YvE3VLIh26OspU0/U5oWnz9kWGivpwZ/e8X JC9glUbx2wM7sJ35bLBaxRa/TTq/nHOAsLhDCnanC4/k7jBgeHrNMqq3hcfpPSBf hF7vst74DEdaybGimHbOlMhD0nz1mDkOoL4NxowVVS5AGlwAPNOlkc+q4xoN1kvj Y9zFhA/HSeuiUd42xbLJvqie2ac4qDFIE9dCU0RUkveitslt43oldAAuurVQSg8u 8Vy/teFoUqPCKI5xaty3JVl3jQJxPVGyDXpg2XzXG2TrkWx5VjN4OQbN3txTAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUg6aipqJGVBkkRp7opjidDih0gi0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDgyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhZ3 AwQAUhbIAwQAUheqMA0GCSqGSIb3DQEBCwUAA4IBAQArqe/zZIFTSVhOOP6Cz2tU 6wenESDmVhejZJMHxjZ5yb60d41EFayciM/oxweA32Pw+W+nk29vcQUewk6r4ge8 WeSnwrW0DGtwEMy4ZejZrqdVS1rTSL11JrTNL7U2pMtCZijjdTrAGqu3z9OoMkzQ SPOOU0xXvu/7G3tMOwp/M1E14AV87pm02Wg+beAPodfrnZH9LefyzPZHBvuA+xQQ MFegVIOkozg3Ux9vz5DOZ9HYdPnkvS4SZHBWE/i4rusr7IPeIIHUc+Uau8fIaAjc Jhr2gArucOxPYX+anFyY9nUsl+IxQkw1yeps3Tmpycvy0OAJ5+ZSkLuLVtKrt/Ql -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:13 2025 by rpki-client