This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS266.roa
File: AS266.roa (raw, json)
Hash identifier: QLmr3+QIUSysz95JK6k4Y1fVQeYJMFp3j5U4v3LLLCg=
Subject key identifier: 3C:F6:FB:70:F5:7F:17:6D:8B:0C:31:B5:98:5D:04:93:B4:8B:AC:84
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BCA327720EAA3CA5078149A35E580E292E25C29
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS266.roa
Signing time: Sat 06 Dec 2025 06:43:12 +0000
ROA not before: Sat 06 Dec 2025 06:38:12 +0000
ROA not after: Sat 05 Dec 2026 06:43:12 +0000
asID: 266
IP address blocks: 82.21.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ca:32:77:20:ea:a3:ca:50:78:14:9a:35:e5:80:e2:92:e2:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 6 06:38:12 2025 GMT
Not After : Dec 5 06:43:12 2026 GMT
Subject: CN=3CF6FB70F57F176D8B0C31B5985D0493B48BAC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:1a:b4:0d:13:ad:5d:f5:f7:bb:90:4e:4f:
e3:dd:33:8f:6b:02:47:3e:fb:29:3d:67:b2:5c:80:
2f:50:7b:d5:c6:7c:69:35:e7:f4:f3:8b:bc:cc:a0:
3d:52:c8:f6:95:e3:8d:2e:04:8f:28:1a:2d:88:10:
b3:f5:37:21:b9:ea:e0:60:e7:ea:76:36:d2:47:ac:
1d:83:76:60:9f:87:99:4c:d7:7c:82:91:ed:2c:24:
ce:b7:54:07:28:95:fe:9f:b8:dd:8c:c6:70:c9:6e:
3d:09:c5:ad:a4:c3:c8:4a:a8:74:75:da:46:ce:03:
c9:93:7d:8a:7b:cd:f0:e8:a4:46:b4:32:9d:74:4c:
0f:47:06:62:f9:67:f9:e7:88:7f:5f:2d:bf:2d:1f:
5b:91:8d:8d:cd:1a:5d:17:52:ac:1f:08:58:aa:4d:
25:94:80:10:13:33:6d:fb:b4:4c:75:a5:51:b2:f7:
24:e8:d4:21:28:61:b1:6e:f3:80:b0:52:bb:e8:1e:
03:5f:47:2d:e5:34:06:3d:ca:c1:7a:16:f6:c6:46:
02:ec:80:b3:3c:c2:0f:e5:ca:62:03:65:00:4f:68:
f1:38:a4:89:9f:94:92:e7:61:05:b8:0c:b9:87:43:
26:f2:05:9b:59:0c:a3:4a:c7:9a:c3:d4:b5:5a:76:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:FB:70:F5:7F:17:6D:8B:0C:31:B5:98:5D:04:93:B4:8B:AC:84
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c3:a6:fa:5f:09:65:56:d1:de:f8:a8:67:ab:ab:bf:0a:a2:
85:b2:f9:df:27:0d:d0:bc:f9:cc:d2:48:27:ef:2f:cd:b1:9b:
cb:b8:a5:fa:ef:c4:6a:58:5b:f5:34:a4:37:31:6d:d5:44:b7:
50:ef:7f:51:92:4d:97:8c:dd:8b:20:8b:62:f3:48:42:f7:5a:
73:1f:4a:3f:6f:0c:a1:86:cd:14:e9:ee:cb:52:bb:dd:84:db:
52:2c:37:d1:e0:d3:fa:23:a9:24:af:57:c2:48:6b:26:ef:82:
d1:2f:5f:cf:b3:b9:da:d7:e5:4e:3e:34:48:b2:99:69:72:38:
40:62:40:ea:a2:5d:a6:de:c1:f4:af:12:a6:90:bf:a3:cd:ef:
5c:05:75:92:85:9a:ed:3c:89:15:d1:6f:78:01:0b:dc:e1:8e:
ef:13:fa:8a:8b:03:f7:46:49:79:55:42:40:78:a5:bd:29:ad:
e2:a9:51:e3:f7:59:51:f3:15:11:75:1a:2a:3e:4b:96:26:4f:
c8:59:0e:c3:4e:5d:1a:0e:ff:89:a8:84:7c:2f:37:83:92:f7:
f3:76:35:3f:c1:c6:21:07:88:85:9c:d8:53:92:c2:6a:c3:67:
46:cc:7e:7d:4a:3d:37:09:a5:b7:b4:48:ee:d2:ff:a8:39:17:
40:9f:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:27:40 2025 by rpki-client