This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa File: AS22427.roa (raw, json) Hash identifier: jrUidQkQACTB5U96XHt5cee36mZSbWcg6lUh3LiLqRg= Subject key identifier: 0D:E1:FE:99:6A:25:3D:8D:DE:10:1B:D3:05:8A:DE:E9:95:08:BA:81 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7A6E05A7868C0237920A3A4D1A8C957E3AE3C014 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa Signing time: Mon 10 Nov 2025 16:01:58 +0000 ROA not before: Mon 10 Nov 2025 15:56:58 +0000 ROA not after: Mon 09 Nov 2026 16:01:58 +0000 asID: 22427 IP address blocks: 82.22.195.0/24 maxlen: 24 82.26.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6e:05:a7:86:8c:02:37:92:0a:3a:4d:1a:8c:95:7e:3a:e3:c0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 10 15:56:58 2025 GMT Not After : Nov 9 16:01:58 2026 GMT Subject: CN=0DE1FE996A253D8DDE101BD3058ADEE99508BA81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:d8:df:24:9d:a7:ba:3c:97:52:9a:79:cd: 51:42:34:a8:74:7d:48:39:19:29:5e:bf:e1:f5:80: c2:3b:ac:7a:10:54:e6:7b:54:7c:3a:f6:7d:ae:7a: db:4f:20:38:90:c7:99:46:7d:4e:fc:ea:03:77:99: 1e:8b:a3:dc:6a:3d:d2:e3:7c:e1:5a:c1:d3:f2:e1: 1d:9a:e1:03:04:74:93:76:a5:8a:76:74:8b:14:1a: 19:70:9e:a2:95:f0:13:e0:a6:c8:5f:a2:c1:4a:de: 8d:4a:db:d5:1d:1c:a1:c9:b5:4a:5a:33:d2:2c:b3: 02:37:44:8f:6a:96:b2:40:f5:35:a6:35:54:c6:aa: da:aa:75:65:24:26:c2:8e:37:31:1b:0e:d2:86:6c: c2:ac:ac:91:1e:89:88:cd:4b:12:a5:ff:c4:3a:56: 72:48:e3:f6:81:66:c4:d0:2f:58:2a:0e:89:11:a3: 9e:44:7b:ea:7a:cf:ca:3e:a5:c0:9b:07:aa:3d:c7: cd:1f:23:46:ae:a9:0d:97:3a:88:e1:95:00:ce:5e: 23:c7:4a:b1:b1:73:cc:a7:0f:31:64:f4:bc:c7:12: eb:39:a9:b8:23:ba:f3:35:9b:4a:7d:ef:17:98:72: cb:4f:15:9c:9b:28:ff:31:07:a8:a9:7a:23:63:bc: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E1:FE:99:6A:25:3D:8D:DE:10:1B:D3:05:8A:DE:E9:95:08:BA:81 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.195.0/24 82.26.131.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ce:38:2d:b1:02:7c:d5:e7:3f:24:af:9f:d7:74:ff:14:af: 32:13:0d:a1:9d:60:2c:78:d0:15:64:4c:0b:6b:b8:ab:c5:7a: 2d:ce:4f:e5:51:a9:95:6a:9f:2e:0c:f6:7d:9e:24:64:d3:72: e6:6c:20:a9:62:d1:76:d7:37:ae:9e:e6:b2:38:ea:74:dc:91: fe:d7:62:6c:b0:a8:c0:39:8e:be:0c:ca:9f:5c:39:71:f4:fe: eb:62:9f:63:ef:53:e1:df:18:a8:b6:15:c9:51:03:79:9d:25: 48:7e:29:9a:04:96:f9:94:c9:13:88:fe:37:ed:34:cf:de:1c: 69:36:ff:21:1d:b9:30:7b:12:2d:3c:41:f3:7e:84:cb:be:1d: 1f:75:b6:70:63:ec:f0:6d:a4:25:2f:dd:fe:1b:0e:4a:7f:d8: e5:23:10:bc:12:93:b7:4d:9e:00:e5:7d:fd:11:10:c7:cf:c7: 9f:4c:7b:bc:7b:d4:33:4b:a9:f6:0e:19:04:40:a6:27:b4:d9: 3b:3d:c2:ba:97:6a:c6:66:0d:53:d6:b2:07:76:6b:79:ae:eb: 01:fd:07:55:61:3e:8e:94:90:97:08:7d:79:9c:d4:66:79:35: 11:ed:d1:52:df:c9:c9:0e:08:11:b4:0d:80:d0:0c:a5:53:46: 5a:a8:ce:fd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUem4Fp4aMAjeSCjpNGoyVfjrjwBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTAxNTU2NThaFw0yNjExMDkxNjAxNThaMDMxMTAvBgNV BAMTKDBERTFGRTk5NkEyNTNEOERERTEwMUJEMzA1OEFERUU5OTUwOEJBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTdjfJJ2nujyXUpp5zVFCNKh0 fUg5GSlev+H1gMI7rHoQVOZ7VHw69n2uettPIDiQx5lGfU786gN3mR6Lo9xqPdLj fOFawdPy4R2a4QMEdJN2pYp2dIsUGhlwnqKV8BPgpshfosFK3o1K29UdHKHJtUpa M9IsswI3RI9qlrJA9TWmNVTGqtqqdWUkJsKONzEbDtKGbMKsrJEeiYjNSxKl/8Q6 VnJI4/aBZsTQL1gqDokRo55Ee+p6z8o+pcCbB6o9x80fI0auqQ2XOojhlQDOXiPH SrGxc8ynDzFk9LzHEus5qbgjuvM1m0p97xeYcstPFZybKP8xB6ipeiNjvPxJAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUDeH+mWolPY3eEBvTBYre6ZUIuoEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjI0Mjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSFsMD BABSGoMwDQYJKoZIhvcNAQELBQADggEBAFjOOC2xAnzV5z8kr5/XdP8UrzITDaGd YCx40BVkTAtruKvFei3OT+VRqZVqny4M9n2eJGTTcuZsIKli0XbXN66e5rI46nTc kf7XYmywqMA5jr4Myp9cOXH0/utin2PvU+HfGKi2FclRA3mdJUh+KZoElvmUyROI /jftNM/eHGk2/yEduTB7Ei08QfN+hMu+HR91tnBj7PBtpCUv3f4bDkp/2OUjELwS k7dNngDlff0REMfPx59Me7x71DNLqfYOGQRApie02Ts9wrqXasZmDVPWsgd2a3mu 6wH9B1VhPo6UkJcIfXmc1GZ5NRHt0VLfyckOCBG0DYDQDKVTRlqozv0= -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:45 2025 by rpki-client