This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140641.roa File: AS140641.roa (raw, json) Hash identifier: xeB1+FmBHiMMsykXgxFY9nRsy+B+jfGw+sy2PTu9fQs= Subject key identifier: E0:0E:5C:58:98:34:0C:68:B0:A0:52:17:33:89:01:49:2C:53:B0:75 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1358752A5F284188DF4F3D716C584E1654F1915E Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140641.roa Signing time: Fri 05 Dec 2025 15:15:20 +0000 ROA not before: Fri 05 Dec 2025 15:10:20 +0000 ROA not after: Fri 04 Dec 2026 15:15:20 +0000 asID: 140641 IP address blocks: 82.27.1.0/24 maxlen: 24 82.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:58:75:2a:5f:28:41:88:df:4f:3d:71:6c:58:4e:16:54:f1:91:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 5 15:10:20 2025 GMT Not After : Dec 4 15:15:20 2026 GMT Subject: CN=E00E5C5898340C68B0A05217338901492C53B075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:79:45:f3:bf:9f:57:51:49:0b:30:9a:cb: 23:3d:70:2c:23:6b:10:74:85:c3:b9:05:e4:57:11: cc:92:21:f0:9a:2d:41:e8:80:3b:d2:92:ab:90:db: 8d:9b:2b:93:8f:b2:80:7d:10:bb:3e:34:01:4d:44: 29:8b:85:df:b2:4f:8f:b2:52:53:8d:a4:ad:8b:48: e7:27:67:0d:69:ba:53:5b:49:b3:36:ef:de:9d:a8: 0d:17:b2:9c:b7:c7:39:d8:ae:80:c7:23:45:34:5f: 7b:ff:d1:5d:60:a9:2e:9e:41:9c:70:7c:6b:f2:4f: 0f:1d:21:a9:97:f2:7c:14:a7:da:63:c9:08:34:a5: 19:e0:1a:0c:52:cb:40:17:cd:e8:6e:f1:b9:95:26: b9:3b:14:64:61:ad:16:a8:59:1e:14:23:f4:64:ad: 46:60:65:9a:cd:8e:c1:10:e8:41:2a:52:68:81:8a: 67:80:1c:36:5b:5b:3e:67:80:81:8e:01:d7:fe:36: 20:35:24:1e:82:6c:3c:8f:7f:0a:c3:60:7c:7e:a7: 84:4c:4b:16:a8:3b:69:37:90:0e:0c:4b:c7:37:fa: 8d:c0:80:53:77:3f:da:cb:99:66:03:6b:b7:39:d3: 83:36:f3:dd:48:3c:a2:36:9b:b1:e1:4c:39:74:02: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0E:5C:58:98:34:0C:68:B0:A0:52:17:33:89:01:49:2C:53:B0:75 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.27.1.0/24 82.39.161.0/24 Signature Algorithm: sha256WithRSAEncryption a6:cd:55:45:24:9d:39:40:76:36:b6:f3:78:44:90:bc:99:de: 18:3c:f5:2a:6e:80:00:97:72:09:be:5c:59:0f:f6:fc:23:b8: ba:9a:1f:22:8a:30:60:56:1a:08:b4:43:b5:30:61:66:a2:2d: 79:dd:ab:34:fb:98:d2:d2:17:e7:62:b2:41:79:98:57:08:69: cd:2a:d3:84:97:79:d2:9e:36:d9:85:fd:a6:b6:7f:78:d8:fb: 93:6b:46:bf:b8:d3:b1:f4:48:87:90:a2:ab:5f:3d:ee:d8:55: b0:84:9b:1e:ed:ff:51:86:47:e9:35:7d:45:93:6c:05:4a:4b: b5:f4:71:08:e7:4a:e9:dc:80:f5:d9:a6:2e:89:3e:07:30:2e: d1:45:ec:f4:45:dd:7d:78:96:c0:7a:e0:f6:b8:43:ec:ad:2b: 0a:ab:e9:2e:d7:e4:e1:59:11:f4:76:15:36:bf:a6:53:a2:7d: 40:2a:f1:c7:aa:df:04:39:16:c6:e1:42:ee:80:73:7d:16:e6: dd:44:c2:cb:3c:34:41:dc:12:8a:ee:7e:95:1f:15:95:84:54: 15:3d:59:da:30:5c:d5:36:7f:5c:b9:a8:43:5e:ee:92:b8:63: 43:f8:b9:3b:1f:ae:58:0b:df:66:e5:40:05:ff:c3:1d:16:a2: fb:0a:df:6c -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUE1h1Kl8oQYjfTz1xbFhOFlTxkV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDUxNTEwMjBaFw0yNjEyMDQxNTE1MjBaMDMxMTAvBgNV BAMTKEUwMEU1QzU4OTgzNDBDNjhCMEEwNTIxNzMzODkwMTQ5MkM1M0IwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZlHlF87+fV1FJCzCayyM9cCwj axB0hcO5BeRXEcySIfCaLUHogDvSkquQ242bK5OPsoB9ELs+NAFNRCmLhd+yT4+y UlONpK2LSOcnZw1pulNbSbM2796dqA0Xspy3xznYroDHI0U0X3v/0V1gqS6eQZxw fGvyTw8dIamX8nwUp9pjyQg0pRngGgxSy0AXzehu8bmVJrk7FGRhrRaoWR4UI/Rk rUZgZZrNjsEQ6EEqUmiBimeAHDZbWz5ngIGOAdf+NiA1JB6CbDyPfwrDYHx+p4RM SxaoO2k3kA4MS8c3+o3AgFN3P9rLmWYDa7c504M2891IPKI2m7HhTDl0AunPAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU4A5cWJg0DGiwoFIXM4kBSSxTsHUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQwNjQxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhsB AwQAUiehMA0GCSqGSIb3DQEBCwUAA4IBAQCmzVVFJJ05QHY2tvN4RJC8md4YPPUq boAAl3IJvlxZD/b8I7i6mh8iijBgVhoItEO1MGFmoi153as0+5jS0hfnYrJBeZhX CGnNKtOEl3nSnjbZhf2mtn942PuTa0a/uNOx9EiHkKKrXz3u2FWwhJse7f9Rhkfp NX1Fk2wFSku19HEI50rp3ID12aYuiT4HMC7RRez0Rd19eJbAeuD2uEPsrSsKq+ku 1+ThWRH0dhU2v6ZTon1AKvHHqt8EORbG4ULugHN9FubdRMLLPDRB3BKK7n6VHxWV hFQVPVnaMFzVNn9cuahDXu6SuGND+Lk7H65YC99m5UAF/8MdFqL7Ct9s -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:21 2025 by rpki-client