This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: JRu3l22OSSsHat49hybjiCkRgVLaMybD3UYCUokEDTo= Subject key identifier: 90:34:FA:56:91:CC:4A:56:A4:35:8A:8F:EE:9F:EA:15:3B:A0:D0:3D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 163450EC9873DD59DC94351CF203B17E00D88F66 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa Signing time: Thu 04 Dec 2025 10:08:43 +0000 ROA not before: Thu 04 Dec 2025 10:03:43 +0000 ROA not after: Thu 03 Dec 2026 10:08:43 +0000 asID: 397423 IP address blocks: 82.22.204.0/24 maxlen: 24 82.24.82.0/24 maxlen: 24 82.24.200.0/24 maxlen: 24 82.25.23.0/24 maxlen: 24 82.25.24.0/24 maxlen: 24 82.25.25.0/24 maxlen: 24 82.25.26.0/24 maxlen: 24 82.25.28.0/24 maxlen: 24 82.25.29.0/24 maxlen: 24 82.25.30.0/24 maxlen: 24 82.25.31.0/24 maxlen: 24 82.26.200.0/24 maxlen: 24 82.41.60.0/22 maxlen: 24 82.41.76.0/22 maxlen: 24 82.41.84.0/22 maxlen: 24 82.41.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:34:50:ec:98:73:dd:59:dc:94:35:1c:f2:03:b1:7e:00:d8:8f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 4 10:03:43 2025 GMT Not After : Dec 3 10:08:43 2026 GMT Subject: CN=9034FA5691CC4A56A4358A8FEE9FEA153BA0D03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:15:a4:fe:78:4c:0b:cf:b2:57:a2:11:1e: 5d:e6:34:c3:81:fd:b2:8e:8d:e7:63:38:8b:44:b0: 5f:0c:30:44:69:0a:ec:2e:41:68:e9:40:05:c6:10: aa:7d:35:1d:5e:8e:5d:34:0e:64:4c:07:51:12:bf: 4c:d8:4d:70:97:ea:03:a0:7a:32:f8:9b:6c:20:c6: 88:0d:1a:8f:73:2d:b8:ed:fc:cc:4d:f4:ee:e8:46: 41:1a:0a:4e:24:f1:71:1f:2b:fb:a4:23:0f:aa:5e: 70:f4:9e:e3:81:ff:83:25:1f:5e:eb:de:c7:f2:99: 7c:4d:04:4a:17:7e:24:95:b2:fa:ee:d2:f7:39:f3: d6:cc:0d:de:da:aa:9c:cf:18:fa:cd:15:29:c0:05: 64:1b:22:d3:17:80:c9:96:97:6b:05:e4:d9:79:cb: 3d:7a:16:57:e7:34:10:09:a2:47:b6:c3:30:03:c4: 87:f1:e5:d0:18:5e:90:d1:88:e5:ef:49:2d:ea:f1: ea:a0:56:41:9d:f6:6f:66:93:0e:83:e3:df:54:07: c4:fb:73:df:62:c7:13:6e:c2:3c:51:f2:a1:11:8d: 51:94:b7:50:60:32:ed:43:8c:b5:3f:9c:23:0e:57: da:44:79:ad:7f:9d:75:64:ec:65:7d:4d:e7:b9:ce: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:FA:56:91:CC:4A:56:A4:35:8A:8F:EE:9F:EA:15:3B:A0:D0:3D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.204.0/24 82.24.82.0/24 82.24.200.0/24 82.25.23.0-82.25.26.255 82.25.28.0/22 82.26.200.0/24 82.41.60.0/22 82.41.76.0/22 82.41.84.0/22 82.41.92.0/22 Signature Algorithm: sha256WithRSAEncryption 97:26:e5:87:68:d6:5a:1c:22:fe:55:bc:ec:d4:16:4e:e2:b1: f1:f2:98:7c:57:b9:39:a5:9a:af:9f:aa:e2:61:a2:0e:1a:ca: c6:91:d9:a2:11:2d:5c:40:ac:12:a8:6e:27:d0:22:ad:05:b3: 05:0f:d8:95:16:fe:ee:36:6a:72:18:a1:85:7f:60:4b:f3:e4: fc:5a:28:57:40:db:19:5d:41:0e:bd:8e:6b:ba:6b:2d:e0:83: bc:25:41:75:dd:90:a1:8a:10:a5:86:eb:1e:30:e3:d6:cd:28: 04:35:41:85:30:36:bb:59:73:f4:bf:b7:75:95:79:d1:ec:bb: 3e:0f:ae:9d:10:3b:0b:09:47:45:9b:01:fe:1e:66:26:0f:cb: bc:b1:17:4d:9b:23:20:83:6d:0a:1c:a6:14:ae:a6:85:c8:6e: a8:12:c0:b6:f1:70:11:41:df:63:ae:28:25:39:60:83:e7:45: fd:95:e8:9b:27:1c:f8:fe:0d:bf:2c:56:f1:35:41:d4:ca:8e: 93:90:d8:71:b6:1d:d7:ad:cf:d1:92:8b:ad:e3:ad:60:fb:6c: ba:44:d0:48:d6:84:f6:c6:ee:0d:17:c2:8e:cd:58:43:57:cd: c8:04:a3:6f:0b:ec:8a:3a:e7:d6:93:35:f5:7c:27:dd:cd:cd: b3:a6:ca:79 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUFjRQ7Jhz3VnclDUc8gOxfgDYj2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDQxMDAzNDNaFw0yNjEyMDMxMDA4NDNaMDMxMTAvBgNV BAMTKDkwMzRGQTU2OTFDQzRBNTZBNDM1OEE4RkVFOUZFQTE1M0JBMEQwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6xWk/nhMC8+yV6IRHl3mNMOB /bKOjedjOItEsF8MMERpCuwuQWjpQAXGEKp9NR1ejl00DmRMB1ESv0zYTXCX6gOg ejL4m2wgxogNGo9zLbjt/MxN9O7oRkEaCk4k8XEfK/ukIw+qXnD0nuOB/4MlH17r 3sfymXxNBEoXfiSVsvru0vc589bMDd7aqpzPGPrNFSnABWQbItMXgMmWl2sF5Nl5 yz16FlfnNBAJoke2wzADxIfx5dAYXpDRiOXvSS3q8eqgVkGd9m9mkw6D499UB8T7 c99ixxNuwjxR8qERjVGUt1BgMu1DjLU/nCMOV9pEea1/nXVk7GV9Tee5zuPxAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUkDT6VpHMSlakNYqP7p/qFTug0D0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk3NDIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAUhbM AwQAUhhSAwQAUhjIMAwDBABSGRcDBABSGRoDBAJSGRwDBABSGsgDBAJSKTwDBAJS KUwDBAJSKVQDBAJSKVwwDQYJKoZIhvcNAQELBQADggEBAJcm5Ydo1locIv5VvOzU Fk7isfHymHxXuTmlmq+fquJhog4aysaR2aIRLVxArBKobifQIq0FswUP2JUW/u42 anIYoYV/YEvz5PxaKFdA2xldQQ69jmu6ay3gg7wlQXXdkKGKEKWG6x4w49bNKAQ1 QYUwNrtZc/S/t3WVedHsuz4Prp0QOwsJR0WbAf4eZiYPy7yxF02bIyCDbQocphSu poXIbqgSwLbxcBFB32OuKCU5YIPnRf2V6JsnHPj+Db8sVvE1QdTKjpOQ2HG2Hdet z9GSi63jrWD7bLpE0EjWhPbG7g0Xwo7NWENXzcgEo28L7Io659aTNfV8J93NzbOm ynk= -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:15 2025 by rpki-client