This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215294.roa File: AS215294.roa (raw, json) Hash identifier: pGgTenEk5+LwCu7BQaR+K7Iw4f0LPzRzbdmzHDEZXis= Subject key identifier: E1:97:21:13:51:F1:E0:11:02:8B:70:DF:DC:99:ED:B2:A3:0F:3C:2B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 525419FEAEE95A3584D27DF77C0604AD5DD57234 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215294.roa Signing time: Fri 21 Nov 2025 08:39:26 +0000 ROA not before: Fri 21 Nov 2025 08:34:26 +0000 ROA not after: Fri 20 Nov 2026 08:39:26 +0000 asID: 215294 IP address blocks: 82.39.66.0/24 maxlen: 24 82.39.67.0/24 maxlen: 24 82.39.68.0/24 maxlen: 24 82.39.69.0/24 maxlen: 24 82.39.70.0/24 maxlen: 24 82.39.71.0/24 maxlen: 24 82.39.72.0/24 maxlen: 24 82.39.73.0/24 maxlen: 24 82.39.74.0/24 maxlen: 24 82.39.75.0/24 maxlen: 24 82.39.76.0/24 maxlen: 24 82.39.77.0/24 maxlen: 24 82.39.78.0/24 maxlen: 24 82.39.79.0/24 maxlen: 24 82.39.80.0/24 maxlen: 24 82.41.246.0/24 maxlen: 24 82.41.247.0/24 maxlen: 24 82.41.248.0/24 maxlen: 24 82.41.249.0/24 maxlen: 24 82.41.250.0/24 maxlen: 24 82.41.251.0/24 maxlen: 24 82.41.252.0/24 maxlen: 24 82.41.253.0/24 maxlen: 24 82.41.254.0/24 maxlen: 24 82.41.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:54:19:fe:ae:e9:5a:35:84:d2:7d:f7:7c:06:04:ad:5d:d5:72:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 21 08:34:26 2025 GMT Not After : Nov 20 08:39:26 2026 GMT Subject: CN=E197211351F1E011028B70DFDC99EDB2A30F3C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:1f:6f:d1:85:c8:e2:7b:04:42:22:5a:5d: e6:ea:fa:e1:f3:33:6f:b5:1c:03:df:d6:bf:a7:cd: ee:da:44:28:a5:4e:c6:44:9e:56:6c:e2:53:58:da: 36:28:c7:8d:11:1b:7b:ad:31:5b:13:fa:ee:a0:bc: 1f:b6:0e:20:1c:51:b7:58:63:74:f5:5e:a8:5a:b1: e4:57:7f:81:d2:39:95:c2:22:f1:9b:6f:98:42:26: 5a:5e:90:41:c8:98:73:e7:51:9b:8b:2f:7e:21:0d: 55:75:df:99:6e:b4:43:14:aa:ec:42:f9:dd:75:e4: 7c:c6:c2:4e:e5:97:9f:bd:be:e1:01:7b:df:6d:95: 67:94:d6:07:75:90:2d:5f:f6:23:9b:7f:7f:42:c3: a7:ad:ca:aa:c9:dd:49:04:59:f4:74:0e:ab:24:53: 36:df:cb:7d:49:e7:af:fc:b3:3a:1f:2b:b9:ea:d4: 9b:8b:11:93:83:eb:5f:24:90:56:06:d0:83:d1:fb: 45:ce:2a:e2:e2:5a:11:01:bd:a7:4e:ed:d8:70:8f: 2d:77:a1:6b:c5:58:26:0f:c1:c0:1e:41:b4:7d:27: d6:a8:77:72:f3:54:41:cb:ec:30:e5:06:85:01:e5: 1b:38:a8:af:b2:96:44:94:4e:d0:bf:d0:83:55:7a: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:21:13:51:F1:E0:11:02:8B:70:DF:DC:99:ED:B2:A3:0F:3C:2B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.66.0-82.39.80.255 82.41.246.0-82.41.255.255 Signature Algorithm: sha256WithRSAEncryption 5f:7d:2c:c6:2e:5e:a6:0b:87:d8:91:bf:13:99:12:95:fc:c7: ba:16:94:48:b1:83:0f:a0:c9:54:2a:7f:4b:ec:f0:6c:07:f4: 15:8b:3d:17:f2:0e:4f:c9:0b:82:28:ad:58:01:aa:ee:3c:95: 0e:72:5d:71:09:0d:a0:d4:f0:c1:a7:25:f8:8a:1f:23:45:94: 3d:f5:dc:4f:d5:8f:4c:a2:5e:72:af:39:44:4e:38:7c:57:64: 43:41:5b:67:43:52:6f:b0:91:29:6a:82:a0:18:d0:e3:d0:75: 67:62:d0:4c:09:a2:1d:3f:99:ce:44:4f:de:1b:c0:b3:c7:be: e8:17:6e:a8:33:1c:8e:91:ae:ff:17:03:4e:0b:59:7d:14:5c: ee:76:e9:48:95:1c:2b:07:94:35:46:a9:97:6e:c6:43:14:54: 28:f3:12:2a:ec:48:1a:e9:94:37:f6:19:c7:36:b7:94:74:c0: 92:8a:20:9f:0d:7f:de:55:28:19:9a:d2:80:d4:2a:65:ee:09: 0b:ec:9d:d8:11:07:85:30:b0:8d:37:46:7b:f3:cc:a6:ba:c3: ce:e9:fa:fd:d2:08:23:9d:97:32:66:75:7f:77:e1:7c:d2:f9: a7:d8:ad:e5:84:d4:2d:d8:d3:96:ba:7d:bd:78:f9:75:5a:c3: 85:5b:67:bc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUUlQZ/q7pWjWE0n33fAYErV3VcjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjEwODM0MjZaFw0yNjExMjAwODM5MjZaMDMxMTAvBgNV BAMTKEUxOTcyMTEzNTFGMUUwMTEwMjhCNzBERkRDOTlFREIyQTMwRjNDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYx9v0YXI4nsEQiJaXebq+uHz M2+1HAPf1r+nze7aRCilTsZEnlZs4lNY2jYox40RG3utMVsT+u6gvB+2DiAcUbdY Y3T1XqhaseRXf4HSOZXCIvGbb5hCJlpekEHImHPnUZuLL34hDVV135lutEMUquxC +d115HzGwk7ll5+9vuEBe99tlWeU1gd1kC1f9iObf39Cw6etyqrJ3UkEWfR0Dqsk Uzbfy31J56/8szofK7nq1JuLEZOD618kkFYG0IPR+0XOKuLiWhEBvadO7dhwjy13 oWvFWCYPwcAeQbR9J9aod3LzVEHL7DDlBoUB5Rs4qK+ylkSUTtC/0INVelFXAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQU4ZchE1Hx4BECi3Df3JntsqMPPCswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAFS J0IDBABSJ1AwCwMEAVIp9gMDAVIoMA0GCSqGSIb3DQEBCwUAA4IBAQBffSzGLl6m C4fYkb8TmRKV/Me6FpRIsYMPoMlUKn9L7PBsB/QViz0X8g5PyQuCKK1YAaruPJUO cl1xCQ2g1PDBpyX4ih8jRZQ99dxP1Y9Mol5yrzlETjh8V2RDQVtnQ1JvsJEpaoKg GNDj0HVnYtBMCaIdP5nORE/eG8Czx77oF26oMxyOka7/FwNOC1l9FFzudulIlRwr B5Q1RqmXbsZDFFQo8xIq7Ega6ZQ39hnHNreUdMCSiiCfDX/eVSgZmtKA1Cpl7gkL 7J3YEQeFMLCNN0Z788ymusPO6fr90ggjnZcyZnV/d+F80vmn2K3lhNQt2NOWun29 ePl1WsOFW2e8 -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:11 2025 by rpki-client