This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203253.roa File: AS203253.roa (raw, json) Hash identifier: 00c2o9aVN0LosgtOrRc4Pju1d9VKM/4WmVqEI+e5UTM= Subject key identifier: BE:72:6F:8D:0D:76:9C:31:6B:35:B1:E4:2B:36:85:B7:4C:29:EB:EE Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 69C41BE5FF1A272BD0BEA38757DFF2394341466D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203253.roa Signing time: Fri 05 Dec 2025 14:48:01 +0000 ROA not before: Fri 05 Dec 2025 14:43:01 +0000 ROA not after: Fri 04 Dec 2026 14:48:01 +0000 asID: 203253 IP address blocks: 82.38.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c4:1b:e5:ff:1a:27:2b:d0:be:a3:87:57:df:f2:39:43:41:46:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 5 14:43:01 2025 GMT Not After : Dec 4 14:48:01 2026 GMT Subject: CN=BE726F8D0D769C316B35B1E42B3685B74C29EBEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:db:35:53:bd:af:51:b9:1e:4b:3e:d6:f7: 44:13:b0:07:8f:c1:12:4f:83:79:8b:d2:aa:75:ec: 06:eb:7d:6a:2b:e1:d7:51:9a:60:9e:c7:7b:fb:ee: 00:69:58:13:ae:0e:87:58:17:ab:35:32:1d:a7:1c: c1:91:b0:c8:a0:db:d6:da:f0:a7:c1:4c:32:75:cf: 6f:95:17:73:e1:e7:6d:1a:10:c9:e8:4e:50:c0:a6: 8b:6b:7d:47:4a:5c:de:b7:15:c5:63:1d:5f:c4:0d: 94:89:7a:f2:56:92:bb:b0:0a:e2:9e:39:9b:5c:39: 8b:ce:b0:73:56:79:63:5a:cf:33:ea:19:28:5e:e9: 29:dd:1b:66:19:ba:ed:ea:cb:25:ac:67:8b:c6:25: a3:e0:64:2b:83:78:b4:52:00:92:56:1c:5f:00:1b: 49:76:7a:15:8f:8e:41:a7:a1:9f:ca:ae:89:85:de: fa:7c:42:eb:8a:9a:d8:d4:f7:c9:e5:5d:f3:e3:5d: 64:3a:7b:ec:1e:78:82:e6:dc:41:3d:01:6c:3d:55: 40:26:68:23:ea:83:0d:48:92:6f:eb:ab:10:78:fe: b0:4c:90:1a:cf:07:29:be:4d:63:73:14:c2:a1:8c: 4e:be:19:8d:19:5e:fb:d1:13:17:31:ea:1e:94:b0: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:6F:8D:0D:76:9C:31:6B:35:B1:E4:2B:36:85:B7:4C:29:EB:EE X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.41.0/24 Signature Algorithm: sha256WithRSAEncryption 22:35:01:28:26:58:30:1a:21:32:4c:bc:5c:87:f8:be:36:0a: 8e:75:1f:76:0e:13:ea:c9:73:1a:2a:e7:fb:5d:0b:a5:49:e6: 22:5f:5f:1e:22:c7:27:67:c5:38:a1:f7:0a:56:1a:d9:cc:b6: b3:05:66:da:c6:b2:dd:08:0b:1f:7e:c6:bf:ab:6b:90:ee:70: 5a:91:76:d0:03:c9:16:6a:84:b9:49:01:9e:7c:55:74:c7:ca: 22:17:7e:67:82:5a:10:57:c6:4b:21:70:26:88:a5:be:63:2f: 7a:10:d0:50:c6:b5:41:42:82:c4:60:82:a0:3a:f9:d3:6a:1c: 2c:a7:f7:9e:c1:f8:d7:5b:a3:2a:5a:e8:0e:3a:db:90:c1:f3: cd:1a:3f:34:a6:36:96:4b:99:69:03:e0:d1:90:25:03:68:2f: 0e:6c:70:36:c6:23:0e:7c:3c:c8:46:69:0b:54:8d:bb:96:13: 03:1c:1d:e8:e6:eb:c9:fe:ee:70:91:81:d7:54:49:5b:ef:12: 24:5e:55:40:48:8c:f8:93:86:bc:58:26:49:a9:d9:9b:cc:4e: ed:dd:6e:1f:e7:b0:24:ed:13:cc:2b:23:9d:94:e5:81:77:c1: 4d:a6:cb:f5:68:75:d3:a9:44:a6:82:b1:c3:ed:b5:84:48:e2: e2:99:ab:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUacQb5f8aJyvQvqOHV9/yOUNBRm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDUxNDQzMDFaFw0yNjEyMDQxNDQ4MDFaMDMxMTAvBgNV BAMTKEJFNzI2RjhEMEQ3NjlDMzE2QjM1QjFFNDJCMzY4NUI3NEMyOUVCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycts1U72vUbkeSz7W90QTsAeP wRJPg3mL0qp17AbrfWor4ddRmmCex3v77gBpWBOuDodYF6s1Mh2nHMGRsMig29ba 8KfBTDJ1z2+VF3Ph520aEMnoTlDApotrfUdKXN63FcVjHV/EDZSJevJWkruwCuKe OZtcOYvOsHNWeWNazzPqGShe6SndG2YZuu3qyyWsZ4vGJaPgZCuDeLRSAJJWHF8A G0l2ehWPjkGnoZ/KromF3vp8QuuKmtjU98nlXfPjXWQ6e+weeILm3EE9AWw9VUAm aCPqgw1Ikm/rqxB4/rBMkBrPBym+TWNzFMKhjE6+GY0ZXvvRExcx6h6UsBBPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUvnJvjQ12nDFrNbHkKzaFt0wp6+4wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzMjUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiYp MA0GCSqGSIb3DQEBCwUAA4IBAQAiNQEoJlgwGiEyTLxch/i+NgqOdR92DhPqyXMa Kuf7XQulSeYiX18eIscnZ8U4ofcKVhrZzLazBWbaxrLdCAsffsa/q2uQ7nBakXbQ A8kWaoS5SQGefFV0x8oiF35ngloQV8ZLIXAmiKW+Yy96ENBQxrVBQoLEYIKgOvnT ahwsp/eewfjXW6MqWugOOtuQwfPNGj80pjaWS5lpA+DRkCUDaC8ObHA2xiMOfDzI RmkLVI27lhMDHB3o5uvJ/u5wkYHXVElb7xIkXlVASIz4k4a8WCZJqdmbzE7t3W4f 57Ak7RPMKyOdlOWBd8FNpsv1aHXTqUSmgrHD7bWESOLimasL -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:08 2025 by rpki-client