This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa File: AS395839.roa (raw, json) Hash identifier: iUxP9N9DDFaX/gXeoleX51yN6JMd4hsNkaYAow7uLx4= Subject key identifier: 38:9D:EB:E0:BF:9F:E4:FE:0D:41:C9:46:47:76:9F:6C:88:42:D4:9C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 38F0E49796A9724A3BCCB07599CD4AB073F85BDA Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa Signing time: Mon 19 Jan 2026 08:03:25 +0000 ROA not before: Mon 19 Jan 2026 07:58:25 +0000 ROA not after: Mon 18 Jan 2027 08:03:25 +0000 asID: 395839 IP address blocks: 82.21.72.0/24 maxlen: 24 82.21.92.0/24 maxlen: 24 82.26.93.0/24 maxlen: 24 82.38.68.0/24 maxlen: 24 82.38.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f0:e4:97:96:a9:72:4a:3b:cc:b0:75:99:cd:4a:b0:73:f8:5b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 19 07:58:25 2026 GMT Not After : Jan 18 08:03:25 2027 GMT Subject: CN=389DEBE0BF9FE4FE0D41C94647769F6C8842D49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0b:f6:b0:63:42:e3:43:15:ab:f8:58:2c:84: f0:75:ca:ba:2b:85:da:79:b7:ad:06:cb:95:86:5d: 53:f8:32:b8:cb:7e:12:9e:d3:79:f4:2c:0e:b5:69: 23:0e:99:bc:06:e7:d2:36:48:fb:7e:29:7f:21:09: bb:fc:c8:84:52:91:c1:8f:51:d4:fa:97:97:a9:df: 76:05:46:2a:44:6d:eb:99:fe:9c:59:45:4d:0f:3d: e8:91:0b:c2:d7:ac:1d:19:2e:65:65:76:ec:7c:ed: f4:e0:98:a9:90:34:7a:45:d2:54:74:cd:63:46:09: 79:5d:11:f7:f6:28:c9:17:3f:21:c6:e3:b2:ca:ae: 27:50:ec:bf:07:92:1d:1e:5b:e2:31:9e:32:cc:0d: 2f:2c:c7:1f:b7:85:58:5e:af:02:86:c3:39:b7:8b: 81:33:ef:ee:26:0a:29:1f:31:53:99:26:5a:c9:bd: df:8f:43:01:3e:6b:aa:cb:24:97:db:08:1c:10:be: e5:79:29:96:de:70:fe:b2:2f:fd:ba:21:49:5e:82: e7:23:e5:32:96:ea:5a:88:71:26:c2:70:43:3a:46: 19:4e:09:85:9a:ba:36:e1:ed:c9:c3:a5:95:03:80: 26:e6:02:d3:06:1b:8f:8c:b1:85:cf:19:90:3a:29: a6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:EB:E0:BF:9F:E4:FE:0D:41:C9:46:47:76:9F:6C:88:42:D4:9C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.72.0/24 82.21.92.0/24 82.26.93.0/24 82.38.68.0/23 Signature Algorithm: sha256WithRSAEncryption 50:73:a8:3b:2b:f4:7d:b2:97:9e:8a:60:fc:07:b3:45:ee:66: 88:1f:cf:f2:93:d3:6c:2f:93:20:e9:01:ed:a8:90:1a:d5:d5: 69:36:e9:ed:26:b2:6f:49:f3:fb:3d:48:0c:73:47:8d:cd:64: 8c:bb:e0:a9:76:97:3f:ac:a7:ce:6b:e8:8e:ee:e9:42:13:0b: d8:1b:6f:2f:81:e3:8a:d4:17:7c:87:63:ac:cb:42:40:fc:d6: 6c:17:f0:55:15:7b:d0:f6:d5:10:a9:a7:63:21:94:16:01:17: 0b:b1:34:d4:99:65:e6:c9:d4:8d:b8:70:fd:8d:05:9b:1f:98: 3c:27:96:44:10:b0:07:45:44:28:8b:70:6c:96:96:21:ea:e1: ac:5c:8f:92:dd:73:1e:48:8e:59:65:f7:bf:9f:57:84:0c:14: 2e:4e:26:c6:ad:22:6a:7d:31:09:63:5e:85:16:f1:4a:61:b2: bf:a9:e2:b1:9f:c1:7f:ff:4e:b4:03:4b:70:00:e9:58:16:40: c6:fd:d4:12:b8:e7:78:4b:a1:59:3f:6d:f5:8b:7d:9a:22:63: 4f:ba:40:47:c2:88:df:ee:58:15:08:94:d3:f3:8f:bd:90:ec: 27:50:76:6b:1c:84:3c:1e:2e:0b:bb:e1:8a:27:33:0a:b6:f1: 02:ac:57:30 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUOPDkl5apcko7zLB1mc1KsHP4W9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTkwNzU4MjVaFw0yNzAxMTgwODAzMjVaMDMxMTAvBgNV BAMTKDM4OURFQkUwQkY5RkU0RkUwRDQxQzk0NjQ3NzY5RjZDODg0MkQ0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyC/awY0LjQxWr+FgshPB1yror hdp5t60Gy5WGXVP4MrjLfhKe03n0LA61aSMOmbwG59I2SPt+KX8hCbv8yIRSkcGP UdT6l5ep33YFRipEbeuZ/pxZRU0PPeiRC8LXrB0ZLmVldux87fTgmKmQNHpF0lR0 zWNGCXldEff2KMkXPyHG47LKridQ7L8Hkh0eW+IxnjLMDS8sxx+3hVherwKGwzm3 i4Ez7+4mCikfMVOZJlrJvd+PQwE+a6rLJJfbCBwQvuV5KZbecP6yL/26IUlegucj 5TKW6lqIcSbCcEM6RhlOCYWaujbh7cnDpZUDgCbmAtMGG4+MsYXPGZA6KaaDAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUOJ3r4L+f5P4NQclGR3afbIhC1JwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk1ODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUhVI AwQAUhVcAwQAUhpdAwQBUiZEMA0GCSqGSIb3DQEBCwUAA4IBAQBQc6g7K/R9spee imD8B7NF7maIH8/yk9NsL5Mg6QHtqJAa1dVpNuntJrJvSfP7PUgMc0eNzWSMu+Cp dpc/rKfOa+iO7ulCEwvYG28vgeOK1Bd8h2Osy0JA/NZsF/BVFXvQ9tUQqadjIZQW ARcLsTTUmWXmydSNuHD9jQWbH5g8J5ZEELAHRUQoi3BslpYh6uGsXI+S3XMeSI5Z Zfe/n1eEDBQuTibGrSJqfTEJY16FFvFKYbK/qeKxn8F//060A0twAOlYFkDG/dQS uOd4S6FZP231i32aImNPukBHwojf7lgVCJTT84+9kOwnUHZrHIQ8Hi4Lu+GKJzMK tvECrFcw -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:47 2026 by rpki-client