This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396234.roa File: AS396234.roa (raw, json) Hash identifier: JXgpisdcJdVfiyYfCl9Wu1kxRGcqnJASGBKF9NXpRyk= Subject key identifier: 5A:2E:A8:6A:C7:E6:C9:1B:5C:9D:FC:91:1C:05:84:7F:55:D0:EB:05 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2FA8339F70297C66B4626AA62EE8F3F3D68F20C5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396234.roa Signing time: Thu 04 Dec 2025 13:40:58 +0000 ROA not before: Thu 04 Dec 2025 13:35:58 +0000 ROA not after: Thu 03 Dec 2026 13:40:58 +0000 asID: 396234 IP address blocks: 82.22.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a8:33:9f:70:29:7c:66:b4:62:6a:a6:2e:e8:f3:f3:d6:8f:20:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 4 13:35:58 2025 GMT Not After : Dec 3 13:40:58 2026 GMT Subject: CN=5A2EA86AC7E6C91B5C9DFC911C05847F55D0EB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:92:4a:d8:e4:3c:43:6b:5a:ce:0c:1e:06: 41:04:fb:88:8d:0a:cf:bc:10:b2:93:6f:7a:3e:b0: 6f:02:db:21:3a:91:9a:1a:4b:19:74:ec:78:64:15: 1e:64:66:6a:79:c8:39:29:6f:3b:1c:7f:9e:ad:56: 83:2f:28:34:ab:04:9a:7c:a6:22:a3:f8:b2:af:8c: 54:98:28:88:1d:33:56:05:c7:f6:9f:ce:4b:84:b6: 11:73:2c:76:07:8a:d9:4b:f5:5b:d3:52:75:08:9f: ca:b6:5c:7d:a8:f3:18:91:34:3e:d6:b7:84:c1:dc: d7:90:ef:eb:f1:ec:26:de:46:92:70:e1:c2:54:47: 28:90:3b:5c:91:37:86:19:50:7c:9a:83:e6:fb:48: c7:57:c0:77:56:54:c5:f1:8e:d2:49:8c:3a:f5:8a: db:db:98:90:94:67:43:d2:dc:58:a1:fe:db:a4:e2: fc:3e:1b:99:eb:b9:09:d9:09:2b:82:b0:14:30:87: 81:a9:73:ce:07:07:24:0a:2c:ad:ed:a2:77:06:04: 6c:9b:89:99:f6:da:f6:f0:4d:6b:36:09:0f:21:0a: 11:b8:ad:80:04:c1:3f:89:bc:ba:82:64:ba:64:9d: f5:cb:59:43:5e:43:8e:59:67:9a:25:aa:4e:d1:bc: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2E:A8:6A:C7:E6:C9:1B:5C:9D:FC:91:1C:05:84:7F:55:D0:EB:05 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.60.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:48:72:82:1f:0e:f9:47:8c:7d:a5:0e:ed:d6:1b:69:1a:3c: a0:af:17:87:be:76:92:29:02:f8:04:f6:03:84:ee:6a:fe:79: bb:f6:37:48:93:c9:b4:6f:bc:b9:4d:0d:3d:11:9f:da:08:b4: 7b:2f:8d:73:f1:42:a4:a5:35:1d:3d:2c:76:8d:ee:21:57:ab: 81:6e:68:9e:66:38:07:16:e8:c5:64:35:fe:bc:82:6f:c2:b2: 16:96:19:39:b3:00:a1:e9:ec:18:22:15:5a:3b:87:3f:64:c2: 54:45:42:f9:b0:04:7a:d4:28:89:78:62:1e:7e:a7:57:79:aa: c0:d2:8a:08:da:ef:87:ef:35:28:16:df:82:b3:ae:9c:fa:c1: 9f:c7:9e:15:b5:53:1c:e5:bd:30:e1:66:34:e1:09:c9:4c:bb: 0c:a9:cf:2a:f1:64:17:45:db:b9:21:ac:75:d8:41:fc:c7:85: d9:4c:97:2f:29:0d:68:7d:50:ba:30:fc:38:05:08:b9:cc:c1: bc:bf:17:1a:64:11:1a:4e:5e:e1:19:bd:69:8a:d3:d5:31:4a: df:2f:12:d1:6f:d4:b9:8f:b0:df:44:e8:5d:b8:3b:d8:d0:be: f1:56:2f:63:3b:be:dd:79:61:20:50:59:01:6e:fb:e4:f0:c0: c9:96:26:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUL6gzn3ApfGa0YmqmLujz89aPIMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDQxMzM1NThaFw0yNjEyMDMxMzQwNThaMDMxMTAvBgNV BAMTKDVBMkVBODZBQzdFNkM5MUI1QzlERkM5MTFDMDU4NDdGNTVEMEVCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QJJK2OQ8Q2tazgweBkEE+4iN Cs+8ELKTb3o+sG8C2yE6kZoaSxl07HhkFR5kZmp5yDkpbzscf56tVoMvKDSrBJp8 piKj+LKvjFSYKIgdM1YFx/afzkuEthFzLHYHitlL9VvTUnUIn8q2XH2o8xiRND7W t4TB3NeQ7+vx7CbeRpJw4cJURyiQO1yRN4YZUHyag+b7SMdXwHdWVMXxjtJJjDr1 itvbmJCUZ0PS3Fih/tuk4vw+G5nruQnZCSuCsBQwh4Gpc84HByQKLK3toncGBGyb iZn22vbwTWs2CQ8hChG4rYAEwT+JvLqCZLpknfXLWUNeQ45ZZ5olqk7RvJpNAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUWi6oasfmyRtcnfyRHAWEf1XQ6wUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk2MjM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhY8 MA0GCSqGSIb3DQEBCwUAA4IBAQAcSHKCHw75R4x9pQ7t1htpGjygrxeHvnaSKQL4 BPYDhO5q/nm79jdIk8m0b7y5TQ09EZ/aCLR7L41z8UKkpTUdPSx2je4hV6uBbmie ZjgHFujFZDX+vIJvwrIWlhk5swCh6ewYIhVaO4c/ZMJURUL5sAR61CiJeGIefqdX earA0ooI2u+H7zUoFt+Cs66c+sGfx54VtVMc5b0w4WY04QnJTLsMqc8q8WQXRdu5 Iax12EH8x4XZTJcvKQ1ofVC6MPw4BQi5zMG8vxcaZBEaTl7hGb1pitPVMUrfLxLR b9S5j7DfROhduDvY0L7xVi9jO77deWEgUFkBbvvk8MDJlibK -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:24 2025 by rpki-client