This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203758.roa File: AS203758.roa (raw, json) Hash identifier: xf6bN2vNKDdT/UKaUhhOLkoyOeN+89tugugW046/ICE= Subject key identifier: E2:6D:B0:9E:4F:72:3D:C9:3F:DC:51:89:13:EA:F2:CA:42:A3:1A:9A Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4CC7B0615AF59555BB96B2E169F5F47C7C3289A0 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203758.roa Signing time: Thu 04 Dec 2025 13:31:09 +0000 ROA not before: Thu 04 Dec 2025 13:26:09 +0000 ROA not after: Thu 03 Dec 2026 13:31:09 +0000 asID: 203758 IP address blocks: 82.39.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c7:b0:61:5a:f5:95:55:bb:96:b2:e1:69:f5:f4:7c:7c:32:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 4 13:26:09 2025 GMT Not After : Dec 3 13:31:09 2026 GMT Subject: CN=E26DB09E4F723DC93FDC518913EAF2CA42A31A9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:e9:3f:d8:8a:5e:a6:db:6d:40:0d:67:23: a4:6e:68:54:b8:7e:13:15:f9:f6:16:9c:b5:40:14: ae:e6:5a:8c:41:5d:88:5d:83:24:15:b0:c8:e9:e6: 82:6b:23:f1:72:ce:a0:99:75:2c:05:29:42:e9:d3: a9:18:65:f4:a2:fd:ed:d0:4f:13:9c:35:00:02:f4: e9:a5:0d:aa:0c:f8:95:24:5f:35:c7:01:e0:3e:a9: 97:15:a2:f4:92:16:2d:43:55:a9:26:f4:3f:39:30: d4:5d:52:ec:6f:60:f7:7c:8d:eb:bc:3d:91:85:e3: 5e:52:88:e3:75:05:4a:11:7a:79:0c:a5:4e:ae:e5: f6:88:79:de:7c:8f:0a:15:99:ab:1e:07:e5:9c:08: f7:1e:80:5f:a9:c3:af:8f:50:3e:32:82:34:55:3a: 0a:51:78:d9:7f:0c:0a:6d:b5:9c:2a:67:c9:98:91: 21:8a:f5:78:94:d4:e9:b0:a1:02:14:d1:37:96:84: 0e:f7:20:36:a0:58:34:fe:dc:d6:e8:7a:bf:dd:a9: 98:80:e6:c4:9f:30:c7:35:49:8e:97:8b:e1:31:4d: 7f:fc:2e:40:c7:e1:15:2d:9f:16:6a:c3:ad:d6:10: ec:d7:c3:4d:7f:b6:af:c3:6e:ba:60:66:99:32:d0: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6D:B0:9E:4F:72:3D:C9:3F:DC:51:89:13:EA:F2:CA:42:A3:1A:9A X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203758.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.146.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:fc:a4:09:9b:8c:53:02:d0:2f:2b:98:85:4e:33:ad:f8:c8: 08:38:22:4e:e7:d4:82:f6:f7:63:d1:97:28:1b:6d:17:6d:3a: d0:7a:23:9b:22:23:06:0d:15:e8:9e:9a:e7:e7:26:22:0f:3d: 3d:6a:36:e6:e4:5a:54:84:29:4c:b6:f1:c1:04:9d:0c:e3:8b: 1d:dc:51:f6:5c:28:9f:2b:51:74:68:c4:af:3f:50:ad:bc:32: 09:5c:cf:3b:cc:08:0c:3a:9d:a0:32:62:34:28:f7:a9:89:a1: 68:e8:43:b2:36:eb:00:58:c5:28:dc:5c:c7:ba:4f:4a:bf:15: dc:06:96:21:76:0c:ec:94:06:b8:ad:91:c1:91:f4:e5:75:e4: d9:89:96:de:ab:a8:bc:f9:42:f3:1f:58:cc:15:15:41:29:e6: 7b:b5:3c:e3:f8:cf:44:68:a6:44:51:96:48:f2:25:cb:02:a3: 0f:2c:0e:50:72:4a:88:54:cf:da:eb:d7:f0:53:6f:d2:00:c6: f4:50:a0:0d:75:f6:89:5a:df:24:fb:83:e1:fd:70:cc:4d:a7: e4:ba:47:6a:1d:70:e1:ce:70:3c:e4:55:82:fa:63:e0:77:27: e8:45:22:14:5b:2e:c6:42:4e:26:05:2e:c2:d2:e6:05:cb:5c: db:8f:c2:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTMewYVr1lVW7lrLhafX0fHwyiaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDQxMzI2MDlaFw0yNjEyMDMxMzMxMDlaMDMxMTAvBgNV BAMTKEUyNkRCMDlFNEY3MjNEQzkzRkRDNTE4OTEzRUFGMkNBNDJBMzFBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrOk/2IpeptttQA1nI6RuaFS4 fhMV+fYWnLVAFK7mWoxBXYhdgyQVsMjp5oJrI/FyzqCZdSwFKULp06kYZfSi/e3Q TxOcNQAC9OmlDaoM+JUkXzXHAeA+qZcVovSSFi1DVakm9D85MNRdUuxvYPd8jeu8 PZGF415SiON1BUoRenkMpU6u5faIed58jwoVmaseB+WcCPcegF+pw6+PUD4ygjRV OgpReNl/DApttZwqZ8mYkSGK9XiU1OmwoQIU0TeWhA73IDagWDT+3Nboer/dqZiA 5sSfMMc1SY6Xi+ExTX/8LkDH4RUtnxZqw63WEOzXw01/tq/DbrpgZpky0AcBAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU4m2wnk9yPck/3FGJE+ryykKjGpowHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNzU4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUieS MA0GCSqGSIb3DQEBCwUAA4IBAQBq/KQJm4xTAtAvK5iFTjOt+MgIOCJO59SC9vdj 0ZcoG20XbTrQeiObIiMGDRXonprn5yYiDz09ajbm5FpUhClMtvHBBJ0M44sd3FH2 XCifK1F0aMSvP1CtvDIJXM87zAgMOp2gMmI0KPepiaFo6EOyNusAWMUo3FzHuk9K vxXcBpYhdgzslAa4rZHBkfTldeTZiZbeq6i8+ULzH1jMFRVBKeZ7tTzj+M9EaKZE UZZI8iXLAqMPLA5QckqIVM/a69fwU2/SAMb0UKANdfaJWt8k+4Ph/XDMTafkukdq HXDhznA85FWC+mPgdyfoRSIUWy7GQk4mBS7C0uYFy1zbj8Iw -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:10 2025 by rpki-client