This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa File: AS57043.roa (raw, json) Hash identifier: BZ4RK5ZsYN60C1j6YBjKMRXB/Dk0RmrJ9elIuQpCKAc= Subject key identifier: BA:49:A8:62:5E:D5:20:E0:1A:0E:18:F4:3A:0D:F8:7D:AB:42:3A:8D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 05E6A506EA82F3AC81F410C54A6A12473BD01B8A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa Signing time: Mon 19 Jan 2026 08:03:55 +0000 ROA not before: Mon 19 Jan 2026 07:58:55 +0000 ROA not after: Mon 18 Jan 2027 08:03:55 +0000 asID: 57043 IP address blocks: 82.21.53.0/24 maxlen: 24 82.21.114.0/24 maxlen: 24 82.21.117.0/24 maxlen: 24 82.21.150.0/24 maxlen: 24 82.22.36.0/24 maxlen: 24 82.22.38.0/24 maxlen: 24 82.22.47.0/24 maxlen: 24 82.22.50.0/24 maxlen: 24 82.22.53.0/24 maxlen: 24 82.23.138.0/24 maxlen: 24 82.23.177.0/24 maxlen: 24 82.23.249.0/24 maxlen: 24 82.24.19.0/24 maxlen: 24 82.24.110.0/24 maxlen: 24 82.24.123.0/24 maxlen: 24 82.24.174.0/24 maxlen: 24 82.24.195.0/24 maxlen: 24 82.25.20.0/24 maxlen: 24 82.26.91.0/24 maxlen: 24 82.26.94.0/24 maxlen: 24 82.26.150.0/24 maxlen: 24 82.26.151.0/24 maxlen: 24 82.26.152.0/24 maxlen: 24 82.26.171.0/24 maxlen: 24 82.26.193.0/24 maxlen: 24 82.26.198.0/24 maxlen: 24 82.27.118.0/24 maxlen: 24 82.38.64.0/24 maxlen: 24 82.38.65.0/24 maxlen: 24 82.38.66.0/24 maxlen: 24 82.38.67.0/24 maxlen: 24 82.38.70.0/24 maxlen: 24 82.38.71.0/24 maxlen: 24 82.40.37.0/24 maxlen: 24 82.40.38.0/24 maxlen: 24 82.40.49.0/24 maxlen: 24 82.40.56.0/24 maxlen: 24 82.40.57.0/24 maxlen: 24 82.40.58.0/24 maxlen: 24 82.40.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e6:a5:06:ea:82:f3:ac:81:f4:10:c5:4a:6a:12:47:3b:d0:1b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 19 07:58:55 2026 GMT Not After : Jan 18 08:03:55 2027 GMT Subject: CN=BA49A8625ED520E01A0E18F43A0DF87DAB423A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:f2:2f:ef:c2:27:3a:08:28:51:f9:d1:d2: aa:95:e7:d4:76:cd:8b:98:e4:68:e2:17:ef:b7:93: 1a:1f:f2:36:27:7c:df:cc:d6:9b:01:cd:5d:ac:f5: 53:d3:af:de:1e:d2:6d:e1:57:b6:54:c3:9f:38:b8: 6c:6e:c9:49:45:7b:bf:a3:01:fc:70:eb:d9:0e:c6: 4c:19:61:51:ea:37:11:17:34:2f:c6:60:1b:b3:fb: f1:1c:2c:f6:0e:44:cc:f3:78:ac:75:23:14:c1:98: 24:a1:9c:0c:63:6d:6c:ca:82:3a:46:73:b1:b9:92: cd:01:2e:de:a0:c1:3c:ae:fc:84:83:16:82:bd:df: b0:b6:d8:f0:80:50:02:aa:97:81:5e:ac:ca:f5:ba: c8:f0:75:30:5b:5b:38:dd:03:3d:87:87:30:9c:9e: 7a:bb:64:cf:7f:00:2e:06:6a:e9:cd:dd:5b:94:27: 6d:cd:1a:0e:cf:fe:df:a0:80:ac:9c:0f:be:73:9b: 16:8f:c8:e8:6f:a2:2a:44:9a:17:7c:98:b9:a7:e0: d4:a3:45:3f:36:70:3f:97:5c:c5:f5:57:cf:ab:2f: 3f:21:5a:1b:29:d4:81:cb:27:75:cf:e1:8a:a1:fd: 6a:75:21:8a:ec:1b:95:90:32:63:3b:db:6a:cc:00: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:49:A8:62:5E:D5:20:E0:1A:0E:18:F4:3A:0D:F8:7D:AB:42:3A:8D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.53.0/24 82.21.114.0/24 82.21.117.0/24 82.21.150.0/24 82.22.36.0/24 82.22.38.0/24 82.22.47.0/24 82.22.50.0/24 82.22.53.0/24 82.23.138.0/24 82.23.177.0/24 82.23.249.0/24 82.24.19.0/24 82.24.110.0/24 82.24.123.0/24 82.24.174.0/24 82.24.195.0/24 82.25.20.0/24 82.26.91.0/24 82.26.94.0/24 82.26.150.0-82.26.152.255 82.26.171.0/24 82.26.193.0/24 82.26.198.0/24 82.27.118.0/24 82.38.64.0/22 82.38.70.0/23 82.40.37.0-82.40.38.255 82.40.49.0/24 82.40.56.0-82.40.58.255 82.40.60.0/24 Signature Algorithm: sha256WithRSAEncryption 31:28:27:6d:62:10:0b:33:cd:1b:6f:ce:60:87:f0:bc:d5:72: 89:dc:23:9e:cc:3a:c8:07:be:63:bc:f9:fb:c3:77:2b:28:c7: 10:43:f0:c8:ce:db:ca:b0:5c:06:53:15:82:5c:e1:2e:c1:eb: 8c:66:1d:de:b9:ad:50:ca:92:f6:0f:3c:74:77:80:bd:60:7a: 8e:75:63:73:0d:51:5d:b3:9f:de:c2:d5:31:e4:b7:1a:56:34: 1e:72:57:96:a1:d5:9b:7a:c1:da:76:3e:c0:92:00:e5:be:d2: 2d:7a:49:c6:4a:fe:61:93:cf:62:1c:03:e4:08:c1:e1:c7:8a: ad:08:c7:d8:a9:76:24:6f:86:4a:11:7b:2e:66:70:9a:de:90: e4:46:d8:70:1a:db:39:88:d0:81:b8:f0:87:b0:c1:58:ef:f0: 14:50:69:a9:3e:a0:9c:64:1f:14:83:ac:72:97:fa:d7:d9:c7: 02:99:a2:92:ba:29:e0:6a:69:d0:55:da:5b:5d:5f:96:34:37: fa:ca:9e:5b:cb:7b:d9:76:29:0b:9a:4a:22:5f:cb:3d:a2:b4: 3d:84:6c:c5:18:49:86:68:8d:2f:25:39:ed:f1:16:81:55:1f: cd:90:ae:88:84:af:9b:79:90:8f:cd:e5:f2:4b:d4:4d:c6:f5: 4e:f2:80:89 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUBealBuqC86yB9BDFSmoSRzvQG4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTkwNzU4NTVaFw0yNzAxMTgwODAzNTVaMDMxMTAvBgNV BAMTKEJBNDlBODYyNUVENTIwRTAxQTBFMThGNDNBMERGODdEQUI0MjNBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbfIv78InOggoUfnR0qqV59R2 zYuY5GjiF++3kxof8jYnfN/M1psBzV2s9VPTr94e0m3hV7ZUw584uGxuyUlFe7+j Afxw69kOxkwZYVHqNxEXNC/GYBuz+/EcLPYORMzzeKx1IxTBmCShnAxjbWzKgjpG c7G5ks0BLt6gwTyu/ISDFoK937C22PCAUAKql4FerMr1usjwdTBbWzjdAz2HhzCc nnq7ZM9/AC4GaunN3VuUJ23NGg7P/t+ggKycD75zmxaPyOhvoipEmhd8mLmn4NSj RT82cD+XXMX1V8+rLz8hWhsp1IHLJ3XP4Yqh/Wp1IYrsG5WQMmM722rMAERFAgMB AAGjggLaMIIC1jAdBgNVHQ4EFgQUukmoYl7VIOAaDhj0Og34fatCOo0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTcwNDMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwge8GCCsGAQUFBwEHAQH/BIHfMIHcMIHZBAIAATCB0gME AFIVNQMEAFIVcgMEAFIVdQMEAFIVlgMEAFIWJAMEAFIWJgMEAFIWLwMEAFIWMgME AFIWNQMEAFIXigMEAFIXsQMEAFIX+QMEAFIYEwMEAFIYbgMEAFIYewMEAFIYrgME AFIYwwMEAFIZFAMEAFIaWwMEAFIaXjAMAwQBUhqWAwQAUhqYAwQAUhqrAwQAUhrB AwQAUhrGAwQAUht2AwQCUiZAAwQBUiZGMAwDBABSKCUDBABSKCYDBABSKDEwDAME A1IoOAMEAFIoOgMEAFIoPDANBgkqhkiG9w0BAQsFAAOCAQEAMSgnbWIQCzPNG2/O YIfwvNVyidwjnsw6yAe+Y7z5+8N3KyjHEEPwyM7byrBcBlMVglzhLsHrjGYd3rmt UMqS9g88dHeAvWB6jnVjcw1RXbOf3sLVMeS3GlY0HnJXlqHVm3rB2nY+wJIA5b7S LXpJxkr+YZPPYhwD5AjB4ceKrQjH2Kl2JG+GShF7LmZwmt6Q5EbYcBrbOYjQgbjw h7DBWO/wFFBpqT6gnGQfFIOscpf619nHApmikrop4Gpp0FXaW11fljQ3+sqeW8t7 2XYpC5pKIl/LPaK0PYRsxRhJhmiNLyU57fEWgVUfzZCuiISvm3mQj83l8kvUTcb1 TvKAiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:30 2026 by rpki-client