This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa File: AS137235.roa (raw, json) Hash identifier: S4S5bCq3v/lv/7bsYTp1tDUxR3Wl0nws/9XOYkOk/6k= Subject key identifier: 1F:28:03:A5:9E:94:93:3D:23:8C:5E:90:92:02:6F:1C:02:79:70:09 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 693BA13AFA369AC7ECE21EF4094C1958BEE4567A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa Signing time: Mon 01 Dec 2025 03:06:02 +0000 ROA not before: Mon 01 Dec 2025 03:01:02 +0000 ROA not after: Mon 30 Nov 2026 03:06:02 +0000 asID: 137235 IP address blocks: 82.22.34.0/24 maxlen: 24 82.24.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3b:a1:3a:fa:36:9a:c7:ec:e2:1e:f4:09:4c:19:58:be:e4:56:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 1 03:01:02 2025 GMT Not After : Nov 30 03:06:02 2026 GMT Subject: CN=1F2803A59E94933D238C5E9092026F1C02797009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:4d:66:a2:cc:c1:b7:70:eb:8a:bc:41:b8: 47:a0:a6:e2:f6:40:87:c8:8f:4e:4e:26:6b:32:0b: c9:e3:5c:b8:39:30:1a:b5:a4:d7:1f:87:43:24:92: 57:b1:80:83:49:f8:21:fb:f7:92:52:b7:d2:b2:46: d8:8b:0e:80:c9:7a:6a:12:17:19:e6:bd:6b:01:62: 7f:c9:ff:96:32:6e:ea:77:b0:f4:e0:4d:16:a7:03: 92:e5:dd:e0:fd:1c:8e:0c:58:41:6b:fd:b1:e0:54: 09:b4:c8:53:65:b9:b1:a7:57:1b:f9:24:9f:4e:ad: 16:68:75:02:43:42:96:ba:59:72:38:7f:e1:c8:16: ef:69:6f:30:91:08:37:df:94:aa:a5:83:a6:36:4b: 24:5c:e7:e6:b1:38:ac:4a:93:99:db:b6:10:c8:83: 18:f8:1d:b4:a7:6f:b7:62:7e:71:17:3b:a1:bc:cc: 41:4f:72:a5:66:f5:c8:d2:a1:d5:0a:f6:fc:db:2a: e4:1b:35:29:fb:da:c1:a2:79:f9:21:e2:ba:8d:3e: 49:ea:d8:52:fd:c3:ee:fa:d8:29:50:f3:6a:39:d9: c9:f0:ea:e8:c0:07:82:2b:b0:d1:5c:ef:2a:2d:bf: 8e:54:22:95:01:20:26:1a:62:83:e7:81:3c:42:73: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:28:03:A5:9E:94:93:3D:23:8C:5E:90:92:02:6F:1C:02:79:70:09 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.34.0/24 82.24.122.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:57:82:d3:4d:6b:1d:43:7c:d5:b0:62:c1:11:92:ae:2e:24: e0:e4:bd:8d:5f:59:88:9a:fe:09:1d:9c:d1:15:b0:3e:18:08: 14:5a:44:cc:a7:bb:0c:1d:55:65:5b:f9:fd:73:e6:cb:00:68: 5c:5b:45:89:b6:d4:b5:c3:d3:b0:3e:2b:5f:b0:af:e2:57:22: 16:ae:32:c8:57:0b:bb:9c:53:00:b0:ca:92:d6:eb:fb:ff:9c: 1e:d1:ea:36:0e:5d:df:db:23:6d:41:70:1a:74:cb:52:9d:51: f1:25:c3:ec:b5:00:05:f1:ba:b0:f5:cd:4b:7d:67:72:15:68: de:96:f0:06:5f:61:79:2f:ca:13:52:b1:e4:35:44:94:d3:4f: 79:5e:ca:88:cf:2d:66:6e:a9:4a:fd:c6:17:f5:61:90:d8:0f: 81:4a:5c:db:e4:0c:8e:95:94:96:cf:3c:d3:52:30:1a:58:43: 86:e1:80:e3:51:9d:02:a8:e1:ab:ad:f3:a8:1b:64:57:a6:d6: 17:a0:c2:19:a1:1f:f1:85:44:7d:51:cd:ee:a2:1e:9a:e9:af: 30:ff:df:0f:f8:a7:11:40:ad:2a:75:22:38:34:ec:f9:79:1e: 25:13:97:e1:21:3b:38:b5:38:ff:35:19:15:24:be:45:f0:c9: d7:93:9a:f8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUaTuhOvo2msfs4h70CUwZWL7kVnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDEwMzAxMDJaFw0yNjExMzAwMzA2MDJaMDMxMTAvBgNV BAMTKDFGMjgwM0E1OUU5NDkzM0QyMzhDNUU5MDkyMDI2RjFDMDI3OTcwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aE1moszBt3DrirxBuEegpuL2 QIfIj05OJmsyC8njXLg5MBq1pNcfh0MkklexgINJ+CH795JSt9KyRtiLDoDJemoS FxnmvWsBYn/J/5Yybup3sPTgTRanA5Ll3eD9HI4MWEFr/bHgVAm0yFNlubGnVxv5 JJ9OrRZodQJDQpa6WXI4f+HIFu9pbzCRCDfflKqlg6Y2SyRc5+axOKxKk5nbthDI gxj4HbSnb7difnEXO6G8zEFPcqVm9cjSodUK9vzbKuQbNSn72sGiefkh4rqNPknq 2FL9w+762ClQ82o52cnw6ujAB4IrsNFc7yotv45UIpUBICYaYoPngTxCc6/vAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUHygDpZ6Ukz0jjF6QkgJvHAJ5cAkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3MjM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYi AwQAUhh6MA0GCSqGSIb3DQEBCwUAA4IBAQAPV4LTTWsdQ3zVsGLBEZKuLiTg5L2N X1mImv4JHZzRFbA+GAgUWkTMp7sMHVVlW/n9c+bLAGhcW0WJttS1w9OwPitfsK/i VyIWrjLIVwu7nFMAsMqS1uv7/5we0eo2Dl3f2yNtQXAadMtSnVHxJcPstQAF8bqw 9c1LfWdyFWjelvAGX2F5L8oTUrHkNUSU0095XsqIzy1mbqlK/cYX9WGQ2A+BSlzb 5AyOlZSWzzzTUjAaWEOG4YDjUZ0CqOGrrfOoG2RXptYXoMIZoR/xhUR9Uc3uoh6a 6a8w/98P+KcRQK0qdSI4NOz5eR4lE5fhITs4tTj/NRkVJL5F8MnXk5r4 -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:24 2025 by rpki-client