This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153369.roa File: AS153369.roa (raw, json) Hash identifier: r9Td0bMMepcdFoDXw18DSeWvSTtOmwY4f/GFUEdNDs4= Subject key identifier: C6:0F:80:54:94:C6:AE:F2:EB:CF:6B:88:12:F8:29:5E:6C:2B:C6:FB Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0FCC9756E82DD74B622E3CC6DF4D0C7B50BA9089 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153369.roa Signing time: Wed 24 Dec 2025 14:55:32 +0000 ROA not before: Wed 24 Dec 2025 14:50:32 +0000 ROA not after: Wed 23 Dec 2026 14:55:32 +0000 asID: 153369 IP address blocks: 82.27.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cc:97:56:e8:2d:d7:4b:62:2e:3c:c6:df:4d:0c:7b:50:ba:90:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 24 14:50:32 2025 GMT Not After : Dec 23 14:55:32 2026 GMT Subject: CN=C60F805494C6AEF2EBCF6B8812F8295E6C2BC6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:5d:ef:89:09:33:a4:bd:ad:86:22:c8:b7: 94:6e:c1:e4:62:52:90:0a:45:2c:14:2f:5b:8f:ff: 7e:95:51:89:8c:d1:7e:d0:75:3f:d2:93:89:43:99: 30:af:28:0a:13:3e:a7:e1:4d:be:14:2e:91:0e:d4: 3f:e0:5b:6f:8d:2e:0d:99:50:ab:53:79:6c:b4:45: be:01:60:4e:23:41:7e:46:bf:28:3b:1e:91:dc:6f: b2:36:46:5b:77:1f:e3:9d:f3:c8:a4:ac:b3:aa:16: 59:4d:5a:50:a4:ec:19:aa:99:19:5d:d4:d1:ea:4f: 7a:13:ad:15:3a:6d:e9:fb:39:30:3a:91:eb:8f:da: f6:af:75:d0:04:68:c7:a4:00:3c:b4:bc:84:8e:98: 40:dc:95:8b:b3:a8:23:06:50:09:cd:f8:89:28:a6: dc:c4:a3:d8:98:37:9a:db:75:0c:eb:4d:1e:d2:b2: 53:42:e0:3d:8c:f7:13:4e:d4:ea:4c:4c:09:ca:2b: a5:cd:9d:f3:5b:d9:8b:b0:42:0b:4b:b6:0d:da:dc: f3:8f:e9:e2:b0:a1:15:bf:af:1c:ab:5f:5a:06:25: 3d:80:72:4d:b2:b3:d7:e1:8c:cd:01:7d:5b:e6:6e: 0a:76:bc:f3:a3:6f:e1:8f:d2:6a:c3:12:51:12:e9: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:80:54:94:C6:AE:F2:EB:CF:6B:88:12:F8:29:5E:6C:2B:C6:FB X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.27.0.0/24 Signature Algorithm: sha256WithRSAEncryption 78:4c:a0:a1:d6:d4:73:2c:02:f1:77:e2:f3:5e:f2:e8:5f:1a: 75:61:fd:2c:7e:4d:22:23:5b:82:0c:ce:3d:d9:0e:40:45:8f: 79:b9:2c:e2:f7:a9:77:02:2f:12:77:17:3a:b3:00:55:a6:bd: 28:47:69:06:03:49:28:c3:ce:ec:c6:73:81:c7:61:69:73:2a: 43:af:39:3b:3f:4e:d4:f1:6c:c5:bc:76:cd:ce:03:9d:0f:a0: 92:1c:d8:89:22:0c:92:b2:12:41:2d:72:94:1c:e9:c2:14:d3: 55:84:7a:59:95:89:1b:09:98:bd:e4:8c:71:b7:b2:f4:c3:ba: 3f:cf:a5:02:61:ce:c6:3b:68:d3:29:03:d8:06:31:d4:c6:e6: 04:82:1d:77:0a:06:6d:46:e2:37:2a:f5:e9:dc:d1:f1:70:83: fc:3a:da:80:df:2f:a0:2e:6d:bb:69:d7:04:f5:b6:8e:2c:88: 19:49:9a:43:57:64:4f:1e:bd:5f:8e:22:9c:b7:63:2a:86:98: 30:6e:4e:11:d0:5d:81:d8:69:bb:9d:11:a9:5e:78:1e:ed:da: 3d:ee:54:04:a3:9c:e5:cb:9d:04:a5:e2:15:ae:dd:57:bd:f4: 57:f6:26:54:f7:1a:49:72:64:36:be:98:b5:ac:05:73:d6:56: 88:7f:53:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUD8yXVugt10tiLjzG300Me1C6kIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjQxNDUwMzJaFw0yNjEyMjMxNDU1MzJaMDMxMTAvBgNV BAMTKEM2MEY4MDU0OTRDNkFFRjJFQkNGNkI4ODEyRjgyOTVFNkMyQkM2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfF3viQkzpL2thiLIt5RuweRi UpAKRSwUL1uP/36VUYmM0X7QdT/Sk4lDmTCvKAoTPqfhTb4ULpEO1D/gW2+NLg2Z UKtTeWy0Rb4BYE4jQX5Gvyg7HpHcb7I2Rlt3H+Od88ikrLOqFllNWlCk7BmqmRld 1NHqT3oTrRU6ben7OTA6keuP2vavddAEaMekADy0vISOmEDclYuzqCMGUAnN+Iko ptzEo9iYN5rbdQzrTR7SslNC4D2M9xNO1OpMTAnKK6XNnfNb2YuwQgtLtg3a3POP 6eKwoRW/rxyrX1oGJT2Ack2ys9fhjM0BfVvmbgp2vPOjb+GP0mrDElES6QsPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUxg+AVJTGrvLrz2uIEvgpXmwrxvswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUzMzY5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhsA MA0GCSqGSIb3DQEBCwUAA4IBAQB4TKCh1tRzLALxd+LzXvLoXxp1Yf0sfk0iI1uC DM492Q5ARY95uSzi96l3Ai8Sdxc6swBVpr0oR2kGA0kow87sxnOBx2FpcypDrzk7 P07U8WzFvHbNzgOdD6CSHNiJIgySshJBLXKUHOnCFNNVhHpZlYkbCZi95Ixxt7L0 w7o/z6UCYc7GO2jTKQPYBjHUxuYEgh13CgZtRuI3KvXp3NHxcIP8OtqA3y+gLm27 adcE9baOLIgZSZpDV2RPHr1fjiKct2Mqhpgwbk4R0F2B2Gm7nRGpXnge7do97lQE o5zly50EpeIVrt1XvfRX9iZU9xpJcmQ2vpi1rAVz1laIf1Pc -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:36 2026 by rpki-client