This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32613.roa
File: AS32613.roa (raw, json)
Hash identifier: GpdJMOswq2dlMpPDDXixcTduya123YPQIVHhFOxKGdg=
Subject key identifier: 14:9E:75:E2:B2:51:13:AD:4C:12:0A:BF:16:92:47:2B:86:A8:49:FC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7B17B54012BC15D4B0056B43BB98BB97A15E15E8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32613.roa
Signing time: Mon 12 Jan 2026 16:55:33 +0000
ROA not before: Mon 12 Jan 2026 16:50:33 +0000
ROA not after: Mon 11 Jan 2027 16:55:33 +0000
asID: 32613
IP address blocks: 82.21.232.0/24 maxlen: 24
82.22.228.0/24 maxlen: 24
82.23.176.0/24 maxlen: 24
82.23.179.0/24 maxlen: 24
82.23.180.0/24 maxlen: 24
82.23.182.0/24 maxlen: 24
82.23.213.0/24 maxlen: 24
82.23.220.0/24 maxlen: 24
82.25.221.0/24 maxlen: 24
82.26.209.0/24 maxlen: 24
82.26.215.0/24 maxlen: 24
82.26.227.0/24 maxlen: 24
82.27.209.0/24 maxlen: 24
82.27.211.0/24 maxlen: 24
82.27.224.0/24 maxlen: 24
82.29.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:17:b5:40:12:bc:15:d4:b0:05:6b:43:bb:98:bb:97:a1:5e:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 12 16:50:33 2026 GMT
Not After : Jan 11 16:55:33 2027 GMT
Subject: CN=149E75E2B25113AD4C120ABF1692472B86A849FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3c:fc:6d:c3:e3:b0:db:ba:98:06:5c:06:66:
80:2d:0e:39:58:5a:26:73:a4:5b:75:eb:f6:94:95:
13:76:27:b7:6b:1b:49:61:12:5a:89:c8:a0:c2:90:
99:19:07:1c:de:34:bd:e8:04:5b:9e:ae:89:9d:56:
dd:15:85:1f:6e:63:a2:d6:94:e2:db:10:76:e5:54:
8e:bc:a0:e6:ff:91:09:28:1e:2a:1b:2b:33:b0:8c:
0c:1f:41:44:bc:cf:a4:7b:cc:8d:ae:8d:7c:1e:12:
5b:5d:b6:1f:19:ac:76:a3:69:6f:1d:a9:d6:3c:40:
34:53:ca:e8:97:01:a8:a7:5d:76:d7:25:5d:2a:e4:
9e:7b:dc:76:14:51:25:a6:e5:e3:bd:94:d9:46:a7:
53:b5:5d:f8:4d:1d:e6:03:ef:d1:6a:0d:c6:56:9c:
9b:a2:62:41:94:c7:02:00:de:55:45:7b:ad:10:90:
93:d3:5b:be:15:f9:f3:64:ee:a0:3a:fb:a9:48:8f:
7b:f1:cc:90:4c:76:72:ab:6d:ea:77:dd:7e:5c:d0:
a0:74:94:bb:56:5a:45:15:ce:b6:ac:f2:4f:89:7b:
1e:3f:45:73:f5:6d:c5:e9:f6:0b:92:0a:10:33:4c:
ca:32:48:71:dc:0e:f8:55:c6:1f:e7:bd:3e:e2:e6:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9E:75:E2:B2:51:13:AD:4C:12:0A:BF:16:92:47:2B:86:A8:49:FC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.232.0/24
82.22.228.0/24
82.23.176.0/24
82.23.179.0-82.23.180.255
82.23.182.0/24
82.23.213.0/24
82.23.220.0/24
82.25.221.0/24
82.26.209.0/24
82.26.215.0/24
82.26.227.0/24
82.27.209.0/24
82.27.211.0/24
82.27.224.0/24
82.29.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:77:ae:62:a9:f1:4e:2e:49:95:41:11:08:2f:a8:02:29:2c:
fc:13:29:e7:e4:70:dc:2b:f4:4c:02:ae:94:e4:81:63:94:c4:
95:d5:8b:a3:3b:ef:f9:8f:90:dd:8f:fd:38:51:6b:95:89:12:
39:4f:9a:09:87:6d:9b:83:68:1c:39:35:d8:58:75:ae:af:f4:
f1:0d:76:9e:9c:be:94:7a:93:b7:3b:4c:db:33:62:98:ac:ce:
5e:e2:15:33:9b:54:67:95:f1:4b:3b:0c:b1:78:f5:a3:7d:93:
a4:ac:00:b7:c0:59:df:5b:ef:7a:6d:20:06:b7:e1:b1:7b:3d:
ce:dc:33:5b:a5:e0:b9:9f:c0:62:be:d6:cb:60:70:0b:90:a0:
e7:b8:cb:75:85:55:33:47:f2:69:82:a3:b1:94:45:ef:9f:51:
41:77:74:28:78:6a:d3:99:c3:d8:46:92:21:5e:d7:8c:e4:cc:
05:84:d8:ad:57:34:dc:76:a6:5f:bc:36:56:52:f2:87:10:50:
da:4a:15:d7:83:8f:f1:2b:7d:48:f9:71:ae:4e:bf:c3:a4:48:
f1:87:e2:d4:c2:65:62:2a:6e:f6:f8:93:b6:4e:29:51:46:7c:
70:50:93:99:8e:26:9f:a4:f6:02:37:8b:df:65:81:25:b0:5c:
ec:e0:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:05:39 2026 by rpki-client