This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215638.roa File: AS215638.roa (raw, json) Hash identifier: 3kg1NI3h2YKbFautEOoLF4SPMrrzFqa8WgBlSWe4WwQ= Subject key identifier: 35:A1:3F:8D:FC:12:38:2E:85:83:19:23:1E:E9:2C:AC:98:60:E6:BC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7FAEF20804F88E0E7D5F2EB148D2776172662807 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215638.roa Signing time: Fri 07 Nov 2025 10:52:15 +0000 ROA not before: Fri 07 Nov 2025 10:47:15 +0000 ROA not after: Fri 06 Nov 2026 10:52:15 +0000 asID: 215638 IP address blocks: 82.27.23.0/24 maxlen: 24 82.39.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ae:f2:08:04:f8:8e:0e:7d:5f:2e:b1:48:d2:77:61:72:66:28:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 7 10:47:15 2025 GMT Not After : Nov 6 10:52:15 2026 GMT Subject: CN=35A13F8DFC12382E858319231EE92CAC9860E6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:66:08:9e:ca:79:04:70:d8:ef:a2:40:c4: a5:1f:0e:ac:9a:d9:5d:6d:58:81:ab:fc:2e:5e:4d: ff:16:4f:80:6b:fe:0a:d9:84:92:d8:50:61:59:48: 36:49:ce:66:be:f6:8f:1f:2c:b9:56:9b:de:47:99: b2:87:b6:db:bf:98:60:d0:f3:12:9b:b4:17:a7:e8: 99:52:64:da:42:19:55:79:4d:2a:e8:7c:b5:ee:7c: 1a:e6:4f:0b:47:38:0b:97:96:e8:b0:3d:b2:93:ee: fd:4d:23:f9:73:69:dd:c0:05:2c:80:e8:fc:3e:58: 8f:0a:7d:52:4d:5e:b6:d2:53:40:43:bc:9a:7d:b2: 0f:94:1a:57:01:b1:45:f5:b7:70:6f:62:bb:19:1b: d4:47:4b:f5:63:7d:72:b0:f4:21:89:70:27:a0:1d: 24:40:55:50:7d:c0:d2:33:5a:9e:19:bf:20:21:98: e7:07:c1:73:af:3c:2e:c4:2a:8a:52:f3:3b:29:75: 2f:88:4c:55:1e:ae:cc:0f:e7:9d:a1:08:b1:50:27: f0:06:40:31:49:55:6a:1f:39:e9:b9:95:d5:56:d5: ee:d3:82:fb:b7:eb:23:d2:ad:82:8b:75:ce:19:d7: bf:08:d5:e2:f0:f8:10:92:a6:b1:7d:c8:74:18:1c: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:3F:8D:FC:12:38:2E:85:83:19:23:1E:E9:2C:AC:98:60:E6:BC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.27.23.0/24 82.39.98.0/24 Signature Algorithm: sha256WithRSAEncryption 96:15:70:95:4e:19:ee:8e:9e:ec:f5:e0:c8:a8:90:e2:d2:52: c5:d9:a6:f7:80:21:eb:22:f3:6a:cc:c6:bf:ad:1d:53:79:07: 22:28:b0:42:53:db:6f:cb:1c:4e:6d:ac:f2:46:2f:d5:16:c0: bc:e8:38:ce:5b:ba:7b:f1:e1:ec:b9:ca:0a:3b:ea:bc:76:06: 8d:82:8f:f8:7e:14:ec:c1:6f:92:e4:94:90:83:a2:1c:2f:bf: 8e:f1:d6:15:f1:e4:e4:c7:4c:5e:e1:1d:8c:78:04:76:20:9e: 61:03:10:0b:f0:af:24:9b:48:1d:6c:a6:e8:ee:ba:8a:8d:fd: 28:6f:79:76:80:a2:fc:b6:a4:cf:27:83:c9:6e:6a:4e:42:98: 41:7d:f3:cd:db:83:58:fc:4a:80:28:20:a1:57:01:01:86:ab: 0e:d1:c0:4f:7e:6e:e8:46:1d:2e:1e:72:67:88:a6:10:70:a5: ce:40:92:46:f6:d0:c2:fd:cd:8a:54:68:1a:c2:c0:94:33:02: 50:07:59:a5:18:70:79:2e:2d:b9:89:a6:71:0a:cb:35:01:85: 26:d2:4c:8a:25:67:67:50:dd:50:ba:75:53:be:c7:45:04:f7: 98:6e:4d:18:21:dd:1f:06:99:66:94:84:4f:e7:83:66:96:d9: e1:12:06:17 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUf67yCAT4jg59Xy6xSNJ3YXJmKAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDcxMDQ3MTVaFw0yNjExMDYxMDUyMTVaMDMxMTAvBgNV BAMTKDM1QTEzRjhERkMxMjM4MkU4NTgzMTkyMzFFRTkyQ0FDOTg2MEU2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjmYInsp5BHDY76JAxKUfDqya 2V1tWIGr/C5eTf8WT4Br/grZhJLYUGFZSDZJzma+9o8fLLlWm95HmbKHttu/mGDQ 8xKbtBen6JlSZNpCGVV5TSrofLXufBrmTwtHOAuXluiwPbKT7v1NI/lzad3ABSyA 6Pw+WI8KfVJNXrbSU0BDvJp9sg+UGlcBsUX1t3BvYrsZG9RHS/VjfXKw9CGJcCeg HSRAVVB9wNIzWp4ZvyAhmOcHwXOvPC7EKopS8zspdS+ITFUerswP552hCLFQJ/AG QDFJVWofOem5ldVW1e7Tgvu36yPSrYKLdc4Z178I1eLw+BCSprF9yHQYHAhxAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUNaE/jfwSOC6FgxkjHuksrJhg5rwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhsX AwQAUidiMA0GCSqGSIb3DQEBCwUAA4IBAQCWFXCVThnujp7s9eDIqJDi0lLF2ab3 gCHrIvNqzMa/rR1TeQciKLBCU9tvyxxObazyRi/VFsC86DjOW7p78eHsucoKO+q8 dgaNgo/4fhTswW+S5JSQg6IcL7+O8dYV8eTkx0xe4R2MeAR2IJ5hAxAL8K8km0gd bKbo7rqKjf0ob3l2gKL8tqTPJ4PJbmpOQphBffPN24NY/EqAKCChVwEBhqsO0cBP fm7oRh0uHnJniKYQcKXOQJJG9tDC/c2KVGgawsCUMwJQB1mlGHB5Li25iaZxCss1 AYUm0kyKJWdnUN1QunVTvsdFBPeYbk0YId0fBplmlIRP54NmltnhEgYX -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:42 2025 by rpki-client