This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48011.roa File: AS48011.roa (raw, json) Hash identifier: +zAWEhZx1qhPSETRcKwQ6HQmQYeR6AzmFez3gTe11UU= Subject key identifier: 91:7D:F8:13:6D:56:A3:03:FC:38:43:FC:C4:A4:87:DD:CD:8B:16:6B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7729111B167EDB7FD18F05E83AC4A34FD73BC66A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48011.roa Signing time: Fri 05 Dec 2025 06:58:38 +0000 ROA not before: Fri 05 Dec 2025 06:53:38 +0000 ROA not after: Fri 04 Dec 2026 06:58:38 +0000 asID: 48011 IP address blocks: 82.22.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:11:1b:16:7e:db:7f:d1:8f:05:e8:3a:c4:a3:4f:d7:3b:c6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 5 06:53:38 2025 GMT Not After : Dec 4 06:58:38 2026 GMT Subject: CN=917DF8136D56A303FC3843FCC4A487DDCD8B166B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:6b:2f:f7:a9:84:1f:b5:97:77:46:0b:4e: 93:e5:9e:41:52:5d:18:11:69:b7:76:a6:eb:f9:db: 7b:9b:6a:22:74:9e:5e:a8:5a:66:a5:c4:cd:8d:95: 10:3d:1f:6b:bb:c9:3c:28:25:d8:e6:2c:74:bf:aa: 1c:c6:40:27:4c:d0:d1:3d:5c:14:66:c9:c8:d0:a2: 67:9f:64:54:08:f7:1b:48:dc:d3:ae:dc:04:c9:fa: e0:f1:35:ad:f6:e9:2b:f5:1f:0f:7a:8c:f4:f3:9c: 12:61:7f:12:17:6a:16:c2:bf:eb:82:75:48:81:3b: d4:e3:1a:6f:1f:2c:86:8c:ee:a7:6e:4d:aa:b0:c9: d7:70:a8:7e:a6:7d:b0:f4:75:00:fb:ab:42:c2:4d: 2a:58:8a:6b:01:8a:30:98:9b:a3:3b:1c:46:95:f7: 65:f5:ab:fa:97:92:f4:40:44:73:82:f2:fd:74:47: c6:5f:96:29:c1:9b:b2:67:2f:cc:c3:50:55:1b:80: 79:fa:34:ef:8d:3f:c5:1f:00:db:f0:c0:e9:a1:2f: eb:46:a2:7a:42:38:50:56:ec:d2:da:78:ad:f3:f1: 66:28:ca:20:08:4a:2e:9a:d6:05:3e:d2:ac:94:76: 8f:be:a6:85:c1:75:3a:eb:01:34:df:ec:4f:ec:e8: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7D:F8:13:6D:56:A3:03:FC:38:43:FC:C4:A4:87:DD:CD:8B:16:6B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48011.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.17.0/24 Signature Algorithm: sha256WithRSAEncryption 38:cd:c4:27:2b:6b:d7:4e:a2:a0:1a:bc:2a:c1:fb:94:76:de: 79:c0:bb:07:3b:d6:16:14:b7:59:5c:23:d0:35:ee:e8:b1:80: 59:55:81:f5:01:ab:95:b4:c5:4d:46:ca:ac:e7:c5:6d:f8:1c: 75:82:68:9a:51:11:10:e4:1e:7f:2b:d9:99:f0:c5:f1:d4:15: 04:8d:04:04:38:f1:87:34:a2:71:9e:3a:d0:f8:6c:e0:2a:4e: f9:5e:e2:14:54:99:49:4b:4b:8a:1f:24:1e:1f:7a:06:b6:01: 2c:fd:74:3d:e6:cb:df:f6:b5:31:94:2e:55:ae:d2:d1:59:74: 4c:6e:e9:3f:0a:20:b2:09:29:dd:02:81:3d:08:1b:53:2b:50: 7b:33:aa:bd:85:26:5d:f4:2b:6f:41:54:0a:32:ff:16:81:1f: ea:de:11:19:98:d0:fe:9f:ac:41:c3:ce:28:53:82:e1:e4:de: ac:69:a5:29:f3:57:95:d6:13:2e:c9:8e:9f:95:9d:fd:ea:21: b8:2a:10:a9:b8:1f:87:84:49:f7:ed:f7:c0:40:92:83:8a:8c: 20:2b:35:3a:f5:cd:c5:3a:6b:42:a8:72:a3:d8:a9:92:37:eb: 6e:f2:10:74:f3:dd:59:89:f1:ca:1a:58:6a:3c:97:a8:b6:77: 63:f3:6c:d1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUdykRGxZ+23/RjwXoOsSjT9c7xmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDUwNjUzMzhaFw0yNjEyMDQwNjU4MzhaMDMxMTAvBgNV BAMTKDkxN0RGODEzNkQ1NkEzMDNGQzM4NDNGQ0M0QTQ4N0REQ0Q4QjE2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CWsv96mEH7WXd0YLTpPlnkFS XRgRabd2puv523ubaiJ0nl6oWmalxM2NlRA9H2u7yTwoJdjmLHS/qhzGQCdM0NE9 XBRmycjQomefZFQI9xtI3NOu3ATJ+uDxNa326Sv1Hw96jPTznBJhfxIXahbCv+uC dUiBO9TjGm8fLIaM7qduTaqwyddwqH6mfbD0dQD7q0LCTSpYimsBijCYm6M7HEaV 92X1q/qXkvRARHOC8v10R8ZflinBm7JnL8zDUFUbgHn6NO+NP8UfANvwwOmhL+tG onpCOFBW7NLaeK3z8WYoyiAISi6a1gU+0qyUdo++poXBdTrrATTf7E/s6D5/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUkX34E21WowP8OEP8xKSH3c2LFmswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDgwMTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSFhEw DQYJKoZIhvcNAQELBQADggEBADjNxCcra9dOoqAavCrB+5R23nnAuwc71hYUt1lc I9A17uixgFlVgfUBq5W0xU1GyqznxW34HHWCaJpRERDkHn8r2ZnwxfHUFQSNBAQ4 8Yc0onGeOtD4bOAqTvle4hRUmUlLS4ofJB4fega2ASz9dD3my9/2tTGULlWu0tFZ dExu6T8KILIJKd0CgT0IG1MrUHszqr2FJl30K29BVAoy/xaBH+reERmY0P6frEHD zihTguHk3qxppSnzV5XWEy7Jjp+Vnf3qIbgqEKm4H4eESfft98BAkoOKjCArNTr1 zcU6a0KocqPYqZI3627yEHTz3VmJ8coaWGo8l6i2d2PzbNE= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:18 2025 by rpki-client