This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7488.roa File: AS7488.roa (raw, json) Hash identifier: MPKaAaDZNtsgdLRFVr+w+NaQrnj5e/qh+Gx5SUrLkl0= Subject key identifier: 91:A0:99:78:0B:27:22:97:10:CA:0E:B6:60:F6:32:B5:8D:02:F3:00 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4516AB5785999EFF023D4AEDFA7F343846814C23 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7488.roa Signing time: Mon 19 Jan 2026 15:30:18 +0000 ROA not before: Mon 19 Jan 2026 15:25:18 +0000 ROA not after: Mon 18 Jan 2027 15:30:18 +0000 asID: 7488 IP address blocks: 82.38.92.0/22 maxlen: 24 82.38.100.0/22 maxlen: 24 82.38.112.0/22 maxlen: 24 82.39.116.0/23 maxlen: 24 82.39.120.0/21 maxlen: 24 82.39.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:16:ab:57:85:99:9e:ff:02:3d:4a:ed:fa:7f:34:38:46:81:4c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 19 15:25:18 2026 GMT Not After : Jan 18 15:30:18 2027 GMT Subject: CN=91A099780B27229710CA0EB660F632B58D02F300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:99:ca:ac:99:e0:e9:18:c3:88:96:54:0f: 22:c7:78:dd:5d:b1:ad:19:36:29:3e:10:b8:54:a8: 48:b0:5b:eb:ab:35:68:67:b2:aa:48:90:13:c7:d1: 5c:2b:5a:ad:5d:2c:21:63:a2:c2:43:4a:64:f7:23: 69:67:21:55:88:ea:59:e8:8c:f4:76:eb:72:13:a6: 58:e3:99:31:63:b3:7a:54:a7:38:57:eb:95:da:ad: a3:e0:f4:4b:85:4a:ad:6c:47:39:1b:b4:9c:6d:3c: 06:94:be:8c:6e:0e:fc:50:6d:d1:ed:72:96:59:03: fc:9d:50:78:0c:6a:b4:5c:16:1e:47:1f:03:ac:5b: 49:72:29:dc:3a:08:0a:f1:f1:98:69:fd:4a:a6:94: b6:fe:ba:f8:83:dd:6a:e3:1b:16:54:4e:58:dc:d9: 96:e2:8d:00:ef:b2:71:11:35:cb:2b:88:80:b2:a7: c5:92:4d:81:13:f7:3c:f8:c7:13:05:54:ed:ce:58: 32:f2:39:a8:2f:27:a0:f5:e7:be:d1:1e:d1:75:e4: 6a:0d:d6:f0:93:70:34:a7:1b:dc:dd:e4:f8:1a:04: b7:66:37:83:e3:a5:4c:61:31:9d:0a:17:ac:8a:4b: 99:c8:b8:c9:be:c3:aa:66:a7:d7:d8:f4:85:89:2d: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A0:99:78:0B:27:22:97:10:CA:0E:B6:60:F6:32:B5:8D:02:F3:00 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7488.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.92.0/22 82.38.100.0/22 82.38.112.0/22 82.39.116.0/23 82.39.120.0-82.39.131.255 Signature Algorithm: sha256WithRSAEncryption 33:66:5d:9b:15:2a:e1:5a:11:d1:46:e9:de:a8:b9:a9:7c:02: e4:11:61:b7:89:51:cc:6a:aa:23:29:e1:25:6d:00:5b:62:ac: 64:15:b4:cb:ad:56:3f:72:75:c3:40:23:7c:13:5b:ef:52:d8: 9a:8b:1e:3b:7b:a7:78:32:e2:9c:fc:b0:16:42:01:bd:24:ed: 99:a1:26:5f:6c:b4:47:ad:c9:40:72:6c:53:64:6d:11:36:52: 92:f8:b8:76:b7:ce:40:c8:ad:ce:82:cb:99:31:98:9e:da:4a: af:54:27:b0:ed:ce:e3:05:04:23:9d:8d:2b:5a:35:b5:22:9c: 39:75:5b:74:89:3c:1d:4b:c6:b8:da:40:cb:03:f5:a1:14:a6: ba:a3:03:e7:ae:e6:e2:ac:0f:22:a1:6f:91:6c:24:40:02:42: 14:71:b3:5e:03:e7:fb:e0:83:9f:50:ee:a8:9d:12:5f:93:72: 7c:ad:5c:9c:0f:82:4c:6e:37:85:02:59:99:49:b0:10:01:56: 66:5b:de:50:e9:8c:1f:24:86:49:e9:d4:f5:84:c1:75:70:0d: 2f:f7:be:bd:c1:e6:c0:ea:e9:00:69:87:73:45:e1:68:59:41: 24:1a:35:94:2c:2f:02:cb:63:de:d0:cd:50:e0:9b:33:d2:ef: 9c:49:7a:b4 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIURRarV4WZnv8CPUrt+n80OEaBTCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTkxNTI1MThaFw0yNzAxMTgxNTMwMThaMDMxMTAvBgNV BAMTKDkxQTA5OTc4MEIyNzIyOTcxMENBMEVCNjYwRjYzMkI1OEQwMkYzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE85nKrJng6RjDiJZUDyLHeN1d sa0ZNik+ELhUqEiwW+urNWhnsqpIkBPH0VwrWq1dLCFjosJDSmT3I2lnIVWI6lno jPR263ITpljjmTFjs3pUpzhX65XaraPg9EuFSq1sRzkbtJxtPAaUvoxuDvxQbdHt cpZZA/ydUHgMarRcFh5HHwOsW0lyKdw6CArx8Zhp/UqmlLb+uviD3WrjGxZUTljc 2ZbijQDvsnERNcsriICyp8WSTYET9zz4xxMFVO3OWDLyOagvJ6D1577RHtF15GoN 1vCTcDSnG9zd5PgaBLdmN4PjpUxhMZ0KF6yKS5nIuMm+w6pmp9fY9IWJLVZtAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUkaCZeAsnIpcQyg62YPYytY0C8wAwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNzQ4OC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAlImXAME AlImZAMEAlImcAMEAVIndDAMAwQDUid4AwQCUieAMA0GCSqGSIb3DQEBCwUAA4IB AQAzZl2bFSrhWhHRRuneqLmpfALkEWG3iVHMaqojKeElbQBbYqxkFbTLrVY/cnXD QCN8E1vvUtiaix47e6d4MuKc/LAWQgG9JO2ZoSZfbLRHrclAcmxTZG0RNlKS+Lh2 t85AyK3OgsuZMZie2kqvVCew7c7jBQQjnY0rWjW1Ipw5dVt0iTwdS8a42kDLA/Wh FKa6owPnrubirA8ioW+RbCRAAkIUcbNeA+f74IOfUO6onRJfk3J8rVycD4JMbjeF AlmZSbAQAVZmW95Q6YwfJIZJ6dT1hMF1cA0v9769webA6ukAaYdzReFoWUEkGjWU LC8Cy2Pe0M1Q4Jsz0u+cSXq0 -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:39 2026 by rpki-client