This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136744.roa File: AS136744.roa (raw, json) Hash identifier: S77tAeclmJVX3gJ0qHhE6ExeCxned9bIsTb3s3LA7RM= Subject key identifier: F2:8B:27:FC:E9:1A:8A:CE:CD:BB:6F:41:F1:0D:12:03:F1:D6:78:8E Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7555BB17C683AB217CD15177FB81946BB2257261 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136744.roa Signing time: Fri 05 Dec 2025 09:02:22 +0000 ROA not before: Fri 05 Dec 2025 08:57:22 +0000 ROA not after: Fri 04 Dec 2026 09:02:22 +0000 asID: 136744 IP address blocks: 82.22.8.0/24 maxlen: 24 82.23.143.0/24 maxlen: 24 82.24.127.0/24 maxlen: 24 82.26.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:55:bb:17:c6:83:ab:21:7c:d1:51:77:fb:81:94:6b:b2:25:72:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 5 08:57:22 2025 GMT Not After : Dec 4 09:02:22 2026 GMT Subject: CN=F28B27FCE91A8ACECDBB6F41F10D1203F1D6788E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:51:1a:dc:25:65:58:6d:78:c0:05:02:7e: 8b:61:0f:77:c3:e7:9b:5b:8a:9e:a7:3f:02:e1:25: 7c:cf:b0:2d:71:0c:9f:45:bc:5e:34:c6:b6:6e:a7: 36:5a:51:84:7c:64:c5:a0:0d:97:84:1a:0c:6d:5e: 52:da:ba:e2:0a:88:98:f8:89:64:ea:e0:e6:f9:95: 6e:99:1f:a1:08:3c:d6:68:35:a5:7d:b0:1f:14:98: b6:b3:53:b2:39:6f:de:56:80:22:20:f7:be:19:af: f6:ce:b1:4d:13:49:31:1e:3c:70:f9:5b:6a:a3:d5: 01:50:3d:c7:f4:dd:95:0f:5f:85:2f:91:84:2b:f2: 39:b4:8e:04:56:10:51:6e:e6:fd:86:5c:14:c1:98: 51:20:fa:9b:04:68:e4:c2:f5:83:be:76:a3:fd:ac: f7:b9:7e:b2:7c:73:ae:27:f4:4f:73:13:28:65:cf: df:50:f4:50:9c:8a:a1:bb:5f:81:e1:ff:4b:09:a4: 52:e2:3a:ef:47:cf:ad:03:14:94:cc:7c:d3:72:90: 72:21:3e:bf:8e:2a:8b:3d:f8:59:b5:21:9a:22:c8: 69:90:e9:4d:66:36:53:f4:b1:3c:d4:a4:62:9b:e1: c8:30:8a:be:a4:6b:88:3d:ca:d1:c4:34:61:bf:b2: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:27:FC:E9:1A:8A:CE:CD:BB:6F:41:F1:0D:12:03:F1:D6:78:8E X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136744.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.8.0/24 82.23.143.0/24 82.24.127.0/24 82.26.174.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e4:d0:79:3b:4f:31:d1:88:0a:b8:1a:2a:10:ae:f9:ba:db: ca:dc:b4:2b:09:c1:19:7d:c3:02:08:27:f7:83:2e:f3:2f:59: 2b:35:b2:0c:56:92:59:e6:bf:b1:5f:04:ae:7d:98:39:8d:09: cf:e0:f5:92:52:dd:40:7a:56:36:39:ef:31:83:38:b0:99:aa: 51:30:50:57:a0:3a:b8:21:39:90:06:70:17:38:df:95:24:f8: e0:2f:ee:97:df:05:cc:16:23:e2:8d:f8:0a:5f:52:ca:f2:33: 58:26:9b:b9:f9:e8:7e:c1:1e:77:a7:9b:01:58:67:f6:54:5f: 3d:37:15:20:50:21:6d:94:5d:a7:8d:2f:e5:1c:d4:f6:77:59: a7:89:2b:25:90:7f:c9:dd:35:06:ff:e6:ed:3e:2b:92:75:89: 37:d0:85:44:f5:38:8a:6a:d7:d2:c8:04:c8:62:f2:71:39:d1: 80:8a:66:f8:6a:22:b6:b8:50:6d:52:b6:d6:3c:c9:01:76:33: d8:56:3b:59:8c:7b:d4:41:91:cc:55:ff:8f:b0:44:3e:62:e5: ae:c5:fc:b9:f6:ef:cf:d3:be:bf:ed:c0:eb:54:ba:11:8f:84: c2:3c:1d:f0:57:77:db:24:8d:30:cc:4d:10:08:c6:e5:9a:82: 45:b2:a9:58 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUdVW7F8aDqyF80VF3+4GUa7IlcmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDUwODU3MjJaFw0yNjEyMDQwOTAyMjJaMDMxMTAvBgNV BAMTKEYyOEIyN0ZDRTkxQThBQ0VDREJCNkY0MUYxMEQxMjAzRjFENjc4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8lEa3CVlWG14wAUCfothD3fD 55tbip6nPwLhJXzPsC1xDJ9FvF40xrZupzZaUYR8ZMWgDZeEGgxtXlLauuIKiJj4 iWTq4Ob5lW6ZH6EIPNZoNaV9sB8UmLazU7I5b95WgCIg974Zr/bOsU0TSTEePHD5 W2qj1QFQPcf03ZUPX4UvkYQr8jm0jgRWEFFu5v2GXBTBmFEg+psEaOTC9YO+dqP9 rPe5frJ8c64n9E9zEyhlz99Q9FCciqG7X4Hh/0sJpFLiOu9Hz60DFJTMfNNykHIh Pr+OKos9+Fm1IZoiyGmQ6U1mNlP0sTzUpGKb4cgwir6ka4g9ytHENGG/sr6BAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQU8osn/Okais7Nu29B8Q0SA/HWeI4wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM2NzQ0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUhYI AwQAUhePAwQAUhh/AwQAUhquMA0GCSqGSIb3DQEBCwUAA4IBAQB75NB5O08x0YgK uBoqEK75utvK3LQrCcEZfcMCCCf3gy7zL1krNbIMVpJZ5r+xXwSufZg5jQnP4PWS Ut1AelY2Oe8xgziwmapRMFBXoDq4ITmQBnAXON+VJPjgL+6X3wXMFiPijfgKX1LK 8jNYJpu5+eh+wR53p5sBWGf2VF89NxUgUCFtlF2njS/lHNT2d1mniSslkH/J3TUG /+btPiuSdYk30IVE9TiKatfSyATIYvJxOdGAimb4aiK2uFBtUrbWPMkBdjPYVjtZ jHvUQZHMVf+PsEQ+YuWuxfy59u/P076/7cDrVLoRj4TCPB3wV3fbJI0wzE0QCMbl moJFsqlY -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:29 2025 by rpki-client