This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: MiSdHLLpgPHK+VVsWxSD57OkCfZX9Kca/gqaqOalPIM= Subject key identifier: 45:24:5B:D0:13:33:44:55:99:CF:5D:58:DE:F0:33:CC:92:D5:AE:06 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0D1D241FE13C6F4AA25CA549CEB26C0881CFA6B1 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa Signing time: Fri 07 Nov 2025 06:58:26 +0000 ROA not before: Fri 07 Nov 2025 06:53:26 +0000 ROA not after: Fri 06 Nov 2026 06:58:26 +0000 asID: 197537 IP address blocks: 82.21.77.0/24 maxlen: 24 82.22.176.0/24 maxlen: 24 82.23.148.0/24 maxlen: 24 82.24.84.0/24 maxlen: 24 82.39.196.0/22 maxlen: 24 82.39.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1d:24:1f:e1:3c:6f:4a:a2:5c:a5:49:ce:b2:6c:08:81:cf:a6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 7 06:53:26 2025 GMT Not After : Nov 6 06:58:26 2026 GMT Subject: CN=45245BD01333445599CF5D58DEF033CC92D5AE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:b8:77:c4:ed:9f:2a:10:a1:eb:c5:c7:a7: dc:11:09:d6:ff:84:ef:e8:9b:c2:55:da:3e:57:6f: 8d:d5:b4:35:99:3a:13:21:97:a2:7a:1a:8e:5f:8f: 63:2d:64:9c:44:1a:06:37:b6:44:6a:ad:ad:0c:21: 40:c5:b3:26:a9:60:b4:c8:02:1c:89:4f:99:65:69: f6:95:28:b7:83:9d:66:1d:f8:5b:bb:a8:87:a1:bf: f6:ba:3e:f9:63:f9:46:33:ef:67:72:11:c7:51:3a: d9:76:56:6e:62:33:d3:26:51:f7:ca:98:cc:38:b6: db:65:b7:6c:fe:27:67:67:2f:27:b3:50:0b:53:81: f6:c6:58:d1:16:7c:02:c4:47:1f:99:7d:df:ef:75: 6b:81:b8:d1:e7:c7:6a:29:9b:7f:2e:d3:f7:e9:0a: 97:44:62:8d:4d:1a:59:b4:5e:c2:93:d5:d0:a0:7b: e5:c1:0d:a0:b5:4f:65:c7:03:a8:67:d8:cc:de:ff: 30:dc:9f:41:bc:5e:61:8c:df:e8:4a:a5:9b:50:ac: 67:74:9c:f3:88:a4:bb:fd:38:33:3b:ca:34:18:08: bb:fc:1e:80:ff:d4:ec:e4:a0:f6:c7:16:7a:61:f6: c1:f1:54:03:d1:04:36:71:f8:97:33:67:16:98:dd: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:24:5B:D0:13:33:44:55:99:CF:5D:58:DE:F0:33:CC:92:D5:AE:06 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.77.0/24 82.22.176.0/24 82.23.148.0/24 82.24.84.0/24 82.39.196.0/22 82.39.248.0/23 Signature Algorithm: sha256WithRSAEncryption 17:54:76:42:c0:d8:3e:9a:5b:c6:21:94:94:20:c3:eb:5d:6c: 41:11:48:4d:ac:f2:18:79:8a:e4:aa:81:3f:ce:1f:c2:7b:fb: 74:fc:33:c7:22:4d:8e:5f:83:90:87:cb:8f:eb:4c:36:2e:d7: 17:6b:83:d1:5e:e8:ae:c9:b9:be:81:b1:b6:5a:82:57:84:55: 00:18:6c:e1:ba:a5:62:10:1c:f8:15:69:b6:52:b8:cb:ea:7d: c1:b7:87:b6:dc:5c:be:0e:9f:4f:c7:5e:dc:94:0d:4d:bc:9e: 0d:7f:c1:07:ba:bf:9e:f2:17:c0:f9:7b:22:5d:21:29:d1:97: c4:7b:c2:7e:04:8f:0d:26:41:91:29:84:4a:df:bc:72:f5:31: 1b:61:1d:8a:31:ce:77:30:0b:b7:bd:14:bf:06:39:55:99:e5: 01:1f:a3:de:fa:80:3b:08:ef:90:4d:81:a2:24:cd:07:07:d6: bc:0a:87:7a:f6:eb:7a:e8:c0:80:ee:aa:8f:1a:fc:76:b1:e2: 83:78:af:0e:f0:e1:f9:1d:d4:f0:e7:d5:fd:cb:8d:da:4e:fd: d4:ac:f7:5d:99:aa:92:a8:48:2a:47:5c:d5:7f:ce:d7:48:2b: d1:8a:ab:ca:8b:7d:d0:7b:71:71:56:92:53:c4:ba:5d:7a:69: 3c:2d:33:dc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUDR0kH+E8b0qiXKVJzrJsCIHPprEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDcwNjUzMjZaFw0yNjExMDYwNjU4MjZaMDMxMTAvBgNV BAMTKDQ1MjQ1QkQwMTMzMzQ0NTU5OUNGNUQ1OERFRjAzM0NDOTJENUFFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqbh3xO2fKhCh68XHp9wRCdb/ hO/om8JV2j5Xb43VtDWZOhMhl6J6Go5fj2MtZJxEGgY3tkRqra0MIUDFsyapYLTI AhyJT5llafaVKLeDnWYd+Fu7qIehv/a6Pvlj+UYz72dyEcdROtl2Vm5iM9MmUffK mMw4tttlt2z+J2dnLyezUAtTgfbGWNEWfALERx+Zfd/vdWuBuNHnx2opm38u0/fp CpdEYo1NGlm0XsKT1dCge+XBDaC1T2XHA6hn2Mze/zDcn0G8XmGM3+hKpZtQrGd0 nPOIpLv9ODM7yjQYCLv8HoD/1OzkoPbHFnph9sHxVAPRBDZx+JczZxaY3bntAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQURSRb0BMzRFWZz11Y3vAzzJLVrgYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk3NTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUhVN AwQAUhawAwQAUheUAwQAUhhUAwQCUifEAwQBUif4MA0GCSqGSIb3DQEBCwUAA4IB AQAXVHZCwNg+mlvGIZSUIMPrXWxBEUhNrPIYeYrkqoE/zh/Ce/t0/DPHIk2OX4OQ h8uP60w2LtcXa4PRXuiuybm+gbG2WoJXhFUAGGzhuqViEBz4FWm2UrjL6n3Bt4e2 3Fy+Dp9Px17clA1NvJ4Nf8EHur+e8hfA+XsiXSEp0ZfEe8J+BI8NJkGRKYRK37xy 9TEbYR2KMc53MAu3vRS/BjlVmeUBH6Pe+oA7CO+QTYGiJM0HB9a8Cod69ut66MCA 7qqPGvx2seKDeK8O8OH5HdTw59X9y43aTv3UrPddmaqSqEgqR1zVf87XSCvRiqvK i33Qe3FxVpJTxLpdemk8LTPc -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:19 2025 by rpki-client