This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa File: AS18345.roa (raw, json) Hash identifier: d2av75/WVkjPfHPuaOq/+U07vGuMG2VJ++xSDZ35bQ4= Subject key identifier: 29:5C:BC:8B:92:16:09:04:89:7C:8E:13:E3:70:F4:71:E0:1B:0F:87 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 21D65791461379FCAED306EE1F0E2A0E15C4831E Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 18345 IP address blocks: 181.214.23.0/24 maxlen: 24 181.214.51.0/24 maxlen: 24 181.214.104.0/24 maxlen: 24 181.214.199.0/24 maxlen: 24 181.214.215.0/24 maxlen: 24 191.101.210.0/24 maxlen: 24 191.101.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:57:91:46:13:79:fc:ae:d3:06:ee:1f:0e:2a:0e:15:c4:83:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=295CBC8B92160904897C8E13E370F471E01B0F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:37:d2:9e:93:dc:93:45:0d:7b:8b:81:ba: ad:6c:c3:3b:7e:d8:e7:02:0a:76:c4:77:4f:06:e7: 95:c9:d1:5f:9b:83:36:d8:a8:7e:8a:28:63:e1:17: 19:67:9e:23:3e:ee:c0:24:f2:18:f9:67:c4:13:47: 0d:44:95:f7:c7:49:0f:4c:18:1b:66:81:e2:14:4f: ea:c6:85:17:bc:c1:b4:be:0f:8c:42:12:bb:45:4b: 39:10:31:42:02:3b:d1:3a:e0:6f:4a:60:47:ca:b8: 36:5a:92:27:55:d3:7a:0d:13:ae:f2:2f:8f:27:7a: 3e:0d:77:94:f5:fa:38:cb:56:ba:14:9b:9b:41:b4: b2:f2:51:08:f3:93:ee:ff:8b:fe:b2:40:b7:2b:99: 03:73:f6:83:f8:c9:47:84:70:38:ea:0e:57:98:3a: 78:ec:c5:7d:c3:15:75:41:9c:9f:52:50:49:54:f2: 15:c9:16:e1:17:b0:84:d4:1c:35:5e:8e:54:6c:fe: 12:49:fd:26:e6:df:3c:13:e7:d8:f9:d5:3c:20:95: 72:37:cd:05:89:4c:10:49:7d:83:a3:be:fc:45:66: 52:d7:8c:ac:03:db:25:c7:5c:35:3f:81:35:27:f5: 14:74:ce:7a:91:b3:f7:06:98:ec:46:1c:6b:2d:da: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5C:BC:8B:92:16:09:04:89:7C:8E:13:E3:70:F4:71:E0:1B:0F:87 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18345.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.23.0/24 181.214.51.0/24 181.214.104.0/24 181.214.199.0/24 181.214.215.0/24 191.101.210.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:6b:9a:9e:20:83:10:32:d0:c8:4b:eb:b4:7a:c3:b1:fb:9b: 89:b1:56:f4:1e:cd:94:ce:85:b8:8c:35:28:ea:63:38:78:54: a8:9f:53:c2:8c:91:04:67:5d:7c:11:0e:26:59:41:f0:a6:57: 36:f1:93:8d:5a:3f:55:9a:ba:aa:a6:4a:5d:f4:95:9f:27:bc: 3c:35:a5:d1:9f:8f:36:11:2b:bc:f7:65:b1:eb:72:d9:4b:8c: b1:9c:4e:6d:8a:23:cc:8f:0d:5e:36:3e:21:5f:29:93:cb:fa: ef:82:99:a5:17:c7:19:ca:05:b4:ef:21:2c:4e:bc:04:07:bd: cd:e1:7b:7a:98:6a:69:82:f8:15:f6:7c:1e:67:af:05:b6:e2: fd:d4:18:ce:f5:8a:b0:6c:9d:3f:bb:24:0e:18:3d:74:0c:40: 40:34:01:2c:89:2c:85:bc:fb:b2:50:20:61:47:79:2b:60:b8: 9f:1e:64:90:c8:3c:4a:88:0e:ec:a1:d3:a4:a2:f0:f5:7c:99: cb:27:0e:7c:06:87:72:74:7a:f5:e1:91:16:a2:b0:89:2a:54: c2:ba:5f:e9:ea:72:ce:82:a4:44:28:9f:75:be:76:6e:af:3c: 96:71:d8:c9:e3:ea:ec:a0:e9:a0:a4:a9:62:5f:e7:51:be:f2: f2:af:1d:e0 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUIdZXkUYTefyu0wbuHw4qDhXEgx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDI5NUNCQzhCOTIxNjA5MDQ4OTdDOEUxM0UzNzBGNDcxRTAxQjBGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzzfSnpPck0UNe4uBuq1swzt+ 2OcCCnbEd08G55XJ0V+bgzbYqH6KKGPhFxlnniM+7sAk8hj5Z8QTRw1ElffHSQ9M GBtmgeIUT+rGhRe8wbS+D4xCErtFSzkQMUICO9E64G9KYEfKuDZakidV03oNE67y L48nej4Nd5T1+jjLVroUm5tBtLLyUQjzk+7/i/6yQLcrmQNz9oP4yUeEcDjqDleY OnjsxX3DFXVBnJ9SUElU8hXJFuEXsITUHDVejlRs/hJJ/Sbm3zwT59j51TwglXI3 zQWJTBBJfYOjvvxFZlLXjKwD2yXHXDU/gTUn9RR0znqRs/cGmOxGHGst2lxBAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUKVy8i5IWCQSJfI4T43D0ceAbD4cwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTgzNDUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAC11hcD BAC11jMDBAC11mgDBAC11scDBAC11tcDBAG/ZdIwDQYJKoZIhvcNAQELBQADggEB ACxrmp4ggxAy0MhL67R6w7H7m4mxVvQezZTOhbiMNSjqYzh4VKifU8KMkQRnXXwR DiZZQfCmVzbxk41aP1WauqqmSl30lZ8nvDw1pdGfjzYRK7z3ZbHrctlLjLGcTm2K I8yPDV42PiFfKZPL+u+CmaUXxxnKBbTvISxOvAQHvc3he3qYammC+BX2fB5nrwW2 4v3UGM71irBsnT+7JA4YPXQMQEA0ASyJLIW8+7JQIGFHeStguJ8eZJDIPEqIDuyh 06Si8PV8mcsnDnwGh3J0evXhkRaisIkqVMK6X+nqcs6CpEQon3W+dm6vPJZx2Mnj 6uyg6aCkqWJf51G+8vKvHeA= -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:44 2025 by rpki-client