This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
File: AS214979.roa (raw, json)
Hash identifier: EnKwNHMSJtUdiaTp5/enyPcA8eYvTf5HTwzvcYaff8w=
Subject key identifier: E1:63:DB:9C:50:33:BD:B5:98:B1:DF:6F:E5:D9:11:0E:5A:CC:73:5B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 36FF412E4372BBCA9C4C64F3F872902BA8B42B41
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
Signing time: Thu 13 Nov 2025 15:25:31 +0000
ROA not before: Thu 13 Nov 2025 15:20:31 +0000
ROA not after: Thu 12 Nov 2026 15:25:31 +0000
asID: 214979
IP address blocks: 82.26.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ff:41:2e:43:72:bb:ca:9c:4c:64:f3:f8:72:90:2b:a8:b4:2b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 13 15:20:31 2025 GMT
Not After : Nov 12 15:25:31 2026 GMT
Subject: CN=E163DB9C5033BDB598B1DF6FE5D9110E5ACC735B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:a4:15:a4:91:02:bf:5d:62:e1:52:bf:c4:
48:44:4c:c4:61:f8:10:35:8a:24:f8:fe:74:8f:37:
a7:3f:56:22:f2:ee:cf:76:3f:25:d5:bf:b8:0a:28:
d3:d7:9d:30:68:7a:a7:6c:f3:03:ea:6a:a6:7a:c0:
30:b4:58:0a:8c:95:dc:5d:ab:01:cb:cc:e6:87:31:
59:67:b9:a2:f0:e6:72:9f:5e:ec:e0:4e:bd:0b:82:
6b:99:71:ce:4f:48:2c:ef:97:24:99:1e:a9:37:c0:
c2:59:4e:d0:31:39:de:e4:e6:7d:bd:80:a2:8c:4e:
d9:49:7e:a6:bc:e6:aa:07:8d:b2:6b:d1:e2:38:75:
eb:4b:ee:2b:ce:87:ee:6c:c7:78:d7:db:f1:47:2f:
94:7f:41:00:c8:25:3e:5d:8e:3a:a0:61:73:86:c6:
47:cf:3e:24:ec:59:2e:56:53:fd:40:d8:c9:24:d6:
ac:fc:eb:d0:d7:82:cb:b2:dd:b4:4e:7d:78:50:3b:
07:52:f3:ba:29:fb:24:db:61:83:d6:c8:98:7d:1d:
76:f6:30:05:71:f0:39:e7:49:e9:a5:8f:4d:16:b8:
80:0b:32:d1:4b:5b:c0:53:5c:63:45:db:4b:09:69:
d6:f9:c9:55:e3:49:ed:9a:f8:f1:9a:12:d5:cf:a9:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:DB:9C:50:33:BD:B5:98:B1:DF:6F:E5:D9:11:0E:5A:CC:73:5B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.67.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8c:b7:bd:32:39:bb:9a:f3:50:e2:f2:91:da:fd:3d:a7:b2:
e0:91:70:83:28:41:75:2e:c2:f8:4f:2f:3c:57:88:86:61:87:
92:c5:64:13:fc:b7:91:9e:72:c2:82:7c:dc:51:99:e3:5a:4a:
bb:11:93:04:e1:07:5e:fd:1f:57:93:50:88:08:36:2f:12:40:
c9:84:36:8f:b2:ee:a8:62:da:69:d5:83:b0:e7:19:e2:ce:25:
5c:a2:03:5c:42:f0:48:b7:08:c5:ae:7b:77:b6:6d:4a:ca:35:
bf:3f:2f:5a:db:d1:8b:67:e7:19:79:12:bb:54:a5:99:16:0d:
1b:1a:0f:5b:9d:ad:81:84:a0:3c:73:b3:4d:bf:92:1d:55:12:
23:9a:03:1c:3f:0e:b6:84:3f:c0:14:4d:22:21:44:2b:3c:96:
1b:7c:61:f8:ba:41:fc:b3:bf:28:7c:bd:e1:62:6b:cc:3b:49:
89:7c:7e:c1:83:3a:62:67:12:ca:1d:8d:09:a9:6d:9c:3e:07:
68:92:4f:58:e0:85:41:86:68:c3:02:9f:ef:43:83:9d:e1:6e:
5a:e6:12:91:bc:01:e2:52:43:c3:69:80:88:6e:7e:0c:f9:aa:
45:fe:eb:4b:6b:af:46:ed:93:b4:34:ac:b3:19:d5:e7:2c:ef:
8e:11:ce:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:36:11 2025 by rpki-client