This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa File: AS214024.roa (raw, json) Hash identifier: uw999UirIdyiOmra5d/mO4uHxq9tyQvW3Di9YFwcLnc= Subject key identifier: 75:58:B8:86:9C:D0:0E:54:46:7F:5D:CD:60:FF:B1:6F:37:E9:26:2F Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 01503237E7AAA5BAEAC874649E7759424B4FAFE9 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa Signing time: Mon 08 Dec 2025 13:56:11 +0000 ROA not before: Mon 08 Dec 2025 13:51:11 +0000 ROA not after: Mon 07 Dec 2026 13:56:11 +0000 asID: 214024 IP address blocks: 82.21.200.0/23 maxlen: 24 82.25.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:50:32:37:e7:aa:a5:ba:ea:c8:74:64:9e:77:59:42:4b:4f:af:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 8 13:51:11 2025 GMT Not After : Dec 7 13:56:11 2026 GMT Subject: CN=7558B8869CD00E54467F5DCD60FFB16F37E9262F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:b3:46:62:85:66:20:96:ca:74:26:43:70: 24:9e:86:f3:f3:88:f0:e0:47:6f:49:4a:ec:0d:5c: 30:c4:7d:36:92:fd:88:e1:7a:f5:64:dc:e4:7e:15: 27:0b:c8:a0:eb:c4:e5:1c:00:32:aa:92:4c:e7:22: 14:3c:fe:20:60:e1:a7:27:eb:68:af:ac:7a:1f:23: 46:40:08:66:07:a6:1a:f8:5e:5f:b6:48:58:16:20: 12:78:98:4c:e3:83:c0:5f:b8:e8:5b:cd:a7:e1:dc: 3e:2c:53:2e:d2:b1:60:75:62:cc:10:a3:76:fd:b5: 2e:83:53:f9:7d:77:06:f7:b6:90:31:60:4b:b8:45: 6a:1c:99:41:08:67:c5:91:8a:5f:5f:96:ed:d4:9b: 4f:5d:d2:70:09:17:4c:65:4f:78:e5:cd:a5:2b:f8: dd:46:66:45:dc:e2:9d:ff:39:e8:db:02:96:4c:89: 7a:1e:cf:02:73:18:80:72:5f:75:26:2d:97:e8:e9: e7:65:59:05:b4:24:85:48:ef:69:0d:87:9c:d3:a8: 9e:1c:1a:d7:48:98:81:3a:14:e7:92:2d:9c:63:37: 33:04:52:f4:29:56:3c:ef:bc:11:6c:11:1c:21:7b: b9:e1:81:5d:e2:bd:55:bc:23:96:8b:8e:87:f6:a6: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:58:B8:86:9C:D0:0E:54:46:7F:5D:CD:60:FF:B1:6F:37:E9:26:2F X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.200.0/23 82.25.37.0/24 Signature Algorithm: sha256WithRSAEncryption 96:58:a6:94:bf:92:d1:da:4d:24:8d:5c:e3:17:07:2d:f7:cc: 39:d8:26:3e:14:68:22:22:3b:89:cb:fc:3f:09:60:e0:11:5e: 3a:10:da:c7:25:ac:b0:8e:86:d7:76:52:35:ac:04:a3:a1:02: 24:74:b5:43:9e:d2:f0:d8:15:ad:c5:8e:41:d0:40:ea:11:40: 04:9c:96:b6:96:85:e0:d4:9d:6b:2e:2c:4c:1a:6f:6d:f4:7d: ed:c0:dc:24:a1:16:73:83:34:83:3d:61:0a:7b:d5:79:2a:90: e8:db:ff:85:9a:00:4e:9f:46:a9:75:14:55:f3:53:5f:b2:77: 5a:ee:17:78:08:30:c1:54:ee:6a:1d:71:82:91:d7:aa:69:f0: ba:1d:56:32:0c:5f:0f:f6:a6:d4:b7:a8:f3:49:50:1d:7a:73: 45:4d:f6:55:25:31:e5:54:d4:66:01:59:86:26:12:ec:98:c5: b8:6f:bf:31:d8:aa:f9:00:c2:33:0e:c8:cd:7d:b5:2a:67:5b: 27:3f:96:ee:f4:8b:ff:e1:94:30:5c:20:29:e3:5b:8a:fa:78: ad:b5:b1:7f:b6:ac:ca:45:a9:e2:9c:e5:7f:bc:58:f3:2f:ff: fa:43:8a:19:fa:d3:44:9f:ca:8c:ba:69:06:5a:ca:89:b5:85: cb:63:84:87 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUAVAyN+eqpbrqyHRknndZQktPr+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDgxMzUxMTFaFw0yNjEyMDcxMzU2MTFaMDMxMTAvBgNV BAMTKDc1NThCODg2OUNEMDBFNTQ0NjdGNURDRDYwRkZCMTZGMzdFOTI2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ7NGYoVmIJbKdCZDcCSehvPz iPDgR29JSuwNXDDEfTaS/YjhevVk3OR+FScLyKDrxOUcADKqkkznIhQ8/iBg4acn 62ivrHofI0ZACGYHphr4Xl+2SFgWIBJ4mEzjg8BfuOhbzafh3D4sUy7SsWB1YswQ o3b9tS6DU/l9dwb3tpAxYEu4RWocmUEIZ8WRil9flu3Um09d0nAJF0xlT3jlzaUr +N1GZkXc4p3/OejbApZMiXoezwJzGIByX3UmLZfo6edlWQW0JIVI72kNh5zTqJ4c GtdImIE6FOeSLZxjNzMEUvQpVjzvvBFsERwhe7nhgV3ivVW8I5aLjof2pm4XAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUdVi4hpzQDlRGf13NYP+xbzfpJi8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MDI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUhXI AwQAUhklMA0GCSqGSIb3DQEBCwUAA4IBAQCWWKaUv5LR2k0kjVzjFwct98w52CY+ FGgiIjuJy/w/CWDgEV46ENrHJaywjobXdlI1rASjoQIkdLVDntLw2BWtxY5B0EDq EUAEnJa2loXg1J1rLixMGm9t9H3twNwkoRZzgzSDPWEKe9V5KpDo2/+FmgBOn0ap dRRV81Nfsnda7hd4CDDBVO5qHXGCkdeqafC6HVYyDF8P9qbUt6jzSVAdenNFTfZV JTHlVNRmAVmGJhLsmMW4b78x2Kr5AMIzDsjNfbUqZ1snP5bu9Iv/4ZQwXCAp41uK +nittbF/tqzKRaninOV/vFjzL//6Q4oZ+tNEn8qMumkGWsqJtYXLY4SH -----END CERTIFICATE-----Generated at Mon Dec 15 15:30:45 2025 by rpki-client