This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS27176.roa File: AS27176.roa (raw, json) Hash identifier: Pur0KcqcvdCBmAqhqbkoMIy8MtUUsKj+1Z27cp+BuOU= Subject key identifier: CB:0B:1D:E9:3D:46:8D:6F:77:B8:7D:0E:34:66:D7:84:E9:2F:15:3B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0862025ABE1C5324F5BC2152A2880B77EA6F0973 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS27176.roa Signing time: Thu 25 Dec 2025 16:55:32 +0000 ROA not before: Thu 25 Dec 2025 16:50:32 +0000 ROA not after: Thu 24 Dec 2026 16:55:32 +0000 asID: 27176 IP address blocks: 82.21.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:62:02:5a:be:1c:53:24:f5:bc:21:52:a2:88:0b:77:ea:6f:09:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 25 16:50:32 2025 GMT Not After : Dec 24 16:55:32 2026 GMT Subject: CN=CB0B1DE93D468D6F77B87D0E3466D784E92F153B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:86:88:a6:97:bf:85:f0:02:4b:ec:7e:69: 86:74:82:63:b3:5b:15:7e:4d:52:95:ed:e8:16:36: 1a:68:bc:c9:41:0f:6c:9d:01:f8:98:70:b2:d4:95: 86:8a:a0:c1:9f:d6:24:7b:af:40:f5:9b:a2:a8:75: f7:4f:0c:6c:7c:58:6a:74:84:dc:8a:44:b8:38:2a: 22:e4:e9:1c:e6:68:db:05:4f:49:b8:c0:74:62:8c: 78:4a:78:1a:c8:f3:3f:d0:d6:32:29:8e:f7:db:e3: 0d:77:de:1e:3e:fc:ee:4f:9f:bc:17:85:6a:53:b5: 8b:81:e3:19:a3:a5:dc:75:2c:10:2c:a8:10:bf:9b: d4:24:66:34:e9:aa:b6:ea:b0:21:64:4a:bc:de:60: 24:67:17:0f:59:1c:d9:a8:e6:b8:08:07:eb:6b:06: bc:e2:fa:39:7b:c4:5d:88:d2:c4:94:af:eb:97:cb: 3b:67:10:ad:5b:1c:2f:ea:59:75:ad:c0:b1:b0:e8: 38:fd:ff:d6:40:f1:38:af:07:f7:eb:88:1f:d0:ba: 19:4e:84:67:4a:83:07:d4:b3:27:b3:b4:94:47:b0: 99:f6:8c:69:33:69:dc:05:04:b8:e4:56:a1:12:b4: 5d:c6:8b:1e:63:4f:50:dd:4a:57:78:1a:95:01:d6: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0B:1D:E9:3D:46:8D:6F:77:B8:7D:0E:34:66:D7:84:E9:2F:15:3B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS27176.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.185.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:44:d1:b1:15:6a:ee:68:e0:f8:b5:12:6e:98:73:60:05:dd: 6c:6b:cc:c7:04:8d:43:05:cc:84:10:45:3e:fb:db:76:97:99: cc:17:52:54:7e:e1:de:b6:62:01:0a:22:5f:be:95:e6:92:2c: 97:cf:51:28:67:11:b0:6d:99:8e:42:1d:97:12:12:07:86:6b: ff:f2:b3:2f:87:91:f8:55:48:06:4c:b9:bb:50:87:da:0e:c3: de:93:8c:c1:76:cb:9e:7a:0f:bb:6a:78:1c:39:c9:29:09:6a: 23:17:51:ac:94:e3:cb:96:3d:a1:a7:b7:90:de:b9:6c:0a:db: 00:cb:2b:49:53:54:bd:ba:73:3e:82:fa:0c:a1:f4:06:66:2b: da:e4:74:5b:b6:ea:2f:fb:0f:84:fb:83:4a:7f:c7:69:78:c1: 66:ea:be:52:39:bf:0a:1f:1f:a6:3f:69:d2:99:e6:4c:50:ed: c5:3e:dd:c8:9f:72:eb:de:4b:42:d1:e3:7a:20:7e:89:5d:2e: f3:ea:3a:a8:e5:b9:32:90:5d:53:7a:ae:da:80:cf:4a:c1:81: 74:c0:d7:1b:49:64:77:9d:19:55:c5:0f:22:b4:19:32:66:3c: 44:1c:b0:fe:2b:cd:07:dc:96:6a:98:b4:02:b4:aa:dd:b0:de: 4a:6c:66:2e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUCGICWr4cUyT1vCFSoogLd+pvCXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjUxNjUwMzJaFw0yNjEyMjQxNjU1MzJaMDMxMTAvBgNV BAMTKENCMEIxREU5M0Q0NjhENkY3N0I4N0QwRTM0NjZENzg0RTkyRjE1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRYaIppe/hfACS+x+aYZ0gmOz WxV+TVKV7egWNhpovMlBD2ydAfiYcLLUlYaKoMGf1iR7r0D1m6KodfdPDGx8WGp0 hNyKRLg4KiLk6RzmaNsFT0m4wHRijHhKeBrI8z/Q1jIpjvfb4w133h4+/O5Pn7wX hWpTtYuB4xmjpdx1LBAsqBC/m9QkZjTpqrbqsCFkSrzeYCRnFw9ZHNmo5rgIB+tr Brzi+jl7xF2I0sSUr+uXyztnEK1bHC/qWXWtwLGw6Dj9/9ZA8TivB/friB/QuhlO hGdKgwfUsyeztJRHsJn2jGkzadwFBLjkVqEStF3Gix5jT1DdSld4GpUB1vQHAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUywsd6T1GjW93uH0ONGbXhOkvFTswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjcxNzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSFbkw DQYJKoZIhvcNAQELBQADggEBAF9E0bEVau5o4Pi1Em6Yc2AF3WxrzMcEjUMFzIQQ RT7723aXmcwXUlR+4d62YgEKIl++leaSLJfPUShnEbBtmY5CHZcSEgeGa//ysy+H kfhVSAZMubtQh9oOw96TjMF2y556D7tqeBw5ySkJaiMXUayU48uWPaGnt5DeuWwK 2wDLK0lTVL26cz6C+gyh9AZmK9rkdFu26i/7D4T7g0p/x2l4wWbqvlI5vwofH6Y/ adKZ5kxQ7cU+3cifcuveS0LR43ogfoldLvPqOqjluTKQXVN6rtqAz0rBgXTA1xtJ ZHedGVXFDyK0GTJmPEQcsP4rzQfclmqYtAK0qt2w3kpsZi4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:35 2026 by rpki-client