This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215523.roa File: AS215523.roa (raw, json) Hash identifier: 9HoOciEOPH0OIzCayjRwpokKGJIWGPiPQdSPp56mTAo= Subject key identifier: AA:F0:B3:D1:D4:3E:96:DD:6F:04:D4:75:D9:66:79:F0:35:51:B5:5D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4B0E7FFC82FDE4A7C39A128676DFB845B5C82EF5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215523.roa Signing time: Mon 08 Dec 2025 16:55:14 +0000 ROA not before: Mon 08 Dec 2025 16:50:14 +0000 ROA not after: Mon 07 Dec 2026 16:55:14 +0000 asID: 215523 IP address blocks: 82.29.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0e:7f:fc:82:fd:e4:a7:c3:9a:12:86:76:df:b8:45:b5:c8:2e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 8 16:50:14 2025 GMT Not After : Dec 7 16:55:14 2026 GMT Subject: CN=AAF0B3D1D43E96DD6F04D475D96679F03551B55D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:c7:cd:5e:d9:af:05:bf:c7:12:eb:01:4d: 5f:74:6f:fe:64:a8:7a:74:a9:7d:9b:53:6c:db:ed: ac:7b:cb:f7:60:7b:c7:68:95:1e:f9:45:d3:d9:10: 01:64:7f:b5:83:bd:66:8f:a7:00:15:42:e3:22:d7: e2:64:93:33:c1:e4:dd:86:88:2e:4e:40:2d:6f:70: 71:ba:45:95:37:0e:aa:d1:8f:ef:32:a1:15:40:03: 8a:0b:65:81:f1:87:1f:ae:26:f7:f7:d3:61:ae:70: 87:b4:41:e7:d2:f1:59:85:6e:90:20:a3:af:27:95: b1:95:99:f6:10:25:9f:82:ff:ef:0e:a9:74:d5:56: 31:2c:f2:20:1e:ed:08:99:c7:b6:38:23:70:3f:c5: 5c:17:ed:dd:32:28:cf:ce:ef:3d:8e:8b:fb:86:2f: 0d:bf:f5:69:f3:a7:4c:12:5c:2e:4c:94:27:20:8d: aa:63:35:bf:a6:5b:22:ad:a1:84:7c:b0:83:20:b7: 4c:98:fe:62:b1:13:e1:59:d2:1a:54:02:02:a3:c8: e0:0c:42:a6:b1:36:35:ba:ed:5d:b1:5f:84:a2:6f: 39:04:59:b2:29:c8:97:75:a8:12:e4:62:48:48:c0: b2:af:32:8b:1f:df:2b:60:e5:91:3a:84:87:dd:c8: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:B3:D1:D4:3E:96:DD:6F:04:D4:75:D9:66:79:F0:35:51:B5:5D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215523.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.29.8.0/21 Signature Algorithm: sha256WithRSAEncryption 73:a3:74:64:e3:90:0a:9b:12:a3:93:71:4e:a4:d4:ae:b3:ea: 34:b0:f9:19:eb:09:8c:9b:85:56:db:57:11:a5:0a:83:ec:27: 2c:6e:f9:82:f3:94:04:21:b9:f6:cc:8f:1a:4a:10:bd:e7:3b: 78:fa:e6:b9:7b:54:a3:4d:4c:a3:5c:5d:3b:89:13:01:38:26: 28:6b:f0:c5:96:ed:54:42:d6:cc:d5:04:b9:a7:8c:e5:ae:26: b4:ca:f4:f2:b9:a9:a4:df:a0:b6:9c:0e:6e:21:a8:b8:43:6a: 1d:52:3d:21:e7:65:97:f0:de:56:a1:bb:03:86:e8:9c:3c:55: 42:46:e5:20:ce:92:e3:b1:8a:51:40:95:67:64:c4:cd:59:20: 67:46:d3:e7:ff:bb:a3:d9:6e:aa:c1:52:3b:c6:57:55:ed:6f: 73:78:75:32:85:ce:04:61:40:21:5c:67:1f:24:fc:0b:0e:e6: f4:07:f9:f1:35:bb:9f:90:55:e4:96:da:f3:48:07:81:ce:07: db:30:b7:4c:a0:d1:09:96:30:4f:b9:74:98:8f:3f:70:b4:6d: cf:96:ee:e5:c6:fb:7b:1d:d6:02:36:c2:cf:9f:ce:96:f8:63: 93:84:39:90:56:22:b7:94:fe:01:1d:96:5a:d0:cd:af:73:76: 95:dd:5e:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSw5//IL95KfDmhKGdt+4RbXILvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDgxNjUwMTRaFw0yNjEyMDcxNjU1MTRaMDMxMTAvBgNV BAMTKEFBRjBCM0QxRDQzRTk2REQ2RjA0RDQ3NUQ5NjY3OUYwMzU1MUI1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF2sfNXtmvBb/HEusBTV90b/5k qHp0qX2bU2zb7ax7y/dge8dolR75RdPZEAFkf7WDvWaPpwAVQuMi1+JkkzPB5N2G iC5OQC1vcHG6RZU3DqrRj+8yoRVAA4oLZYHxhx+uJvf302GucIe0QefS8VmFbpAg o68nlbGVmfYQJZ+C/+8OqXTVVjEs8iAe7QiZx7Y4I3A/xVwX7d0yKM/O7z2Oi/uG Lw2/9Wnzp0wSXC5MlCcgjapjNb+mWyKtoYR8sIMgt0yY/mKxE+FZ0hpUAgKjyOAM QqaxNjW67V2xX4SibzkEWbIpyJd1qBLkYkhIwLKvMosf3ytg5ZE6hIfdyOoxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUqvCz0dQ+lt1vBNR12WZ58DVRtV0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NTIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUh0I MA0GCSqGSIb3DQEBCwUAA4IBAQBzo3Rk45AKmxKjk3FOpNSus+o0sPkZ6wmMm4VW 21cRpQqD7CcsbvmC85QEIbn2zI8aShC95zt4+ua5e1SjTUyjXF07iRMBOCYoa/DF lu1UQtbM1QS5p4zlria0yvTyuamk36C2nA5uIai4Q2odUj0h52WX8N5WobsDhuic PFVCRuUgzpLjsYpRQJVnZMTNWSBnRtPn/7uj2W6qwVI7xldV7W9zeHUyhc4EYUAh XGcfJPwLDub0B/nxNbufkFXkltrzSAeBzgfbMLdMoNEJljBPuXSYjz9wtG3Plu7l xvt7HdYCNsLPn86W+GOThDmQViK3lP4BHZZa0M2vc3aV3V5A -----END CERTIFICATE-----Generated at Mon Dec 15 15:29:10 2025 by rpki-client