This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS210732.roa File: AS210732.roa (raw, json) Hash identifier: EmDXi9UctgaSCDq82zNTOg8zLFou2/aExhjh0/O5J3U= Subject key identifier: F2:82:FA:26:CA:4F:49:8F:44:2F:F1:AF:D8:8A:5E:14:AD:49:BE:B0 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 0F95C8BBC958C936244F6E5C5FB164B13AE16C9E Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS210732.roa Signing time: Wed 03 Dec 2025 21:32:56 +0000 ROA not before: Wed 03 Dec 2025 21:27:56 +0000 ROA not after: Wed 02 Dec 2026 21:32:56 +0000 asID: 210732 IP address blocks: 82.139.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:95:c8:bb:c9:58:c9:36:24:4f:6e:5c:5f:b1:64:b1:3a:e1:6c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Dec 3 21:27:56 2025 GMT Not After : Dec 2 21:32:56 2026 GMT Subject: CN=F282FA26CA4F498F442FF1AFD88A5E14AD49BEB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:78:06:c9:66:c7:d6:36:85:6a:75:f7:6d: e9:a1:f5:5e:ab:55:59:fb:de:d8:8b:81:0d:ae:6c: 7f:f2:6e:5f:b5:66:de:4c:66:3a:fd:05:32:fb:72: fd:cd:77:33:e3:a6:77:5c:cd:d3:46:7c:ad:89:3c: ce:ea:2e:44:68:97:e7:ad:0f:5b:bd:e3:77:ed:12: dc:21:07:38:eb:2f:6c:81:33:a4:59:f7:db:0d:f3: 2c:84:c9:ec:c5:cb:33:c0:05:68:8d:f0:11:94:28: fb:bc:76:88:1f:3c:c0:65:36:5d:33:09:cf:a7:c8: 2c:94:e1:27:2a:4b:00:4a:f3:db:5f:bb:f2:20:c9: 8a:08:b6:87:c7:04:a9:65:fc:ad:b5:70:fb:6e:c2: 4d:b4:a6:c3:c0:49:cf:55:7d:e5:00:b7:36:a5:89: 4f:5d:4c:d0:3f:81:1b:6d:53:5b:cb:91:e2:54:5a: cb:30:3c:c1:87:5c:5d:bd:c8:19:80:2a:8a:20:a6: 9f:9c:82:90:a1:6f:cd:bc:4f:8d:a8:3e:c3:e1:7e: a2:38:63:44:e7:29:32:8c:33:34:99:5f:d7:1c:f5: 14:a3:0f:b3:9f:93:70:1c:53:27:28:b8:0c:64:e6: 5c:aa:f3:71:96:8f:71:78:a4:a8:f0:a5:eb:30:d2: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:82:FA:26:CA:4F:49:8F:44:2F:F1:AF:D8:8A:5E:14:AD:49:BE:B0 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS210732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.245.0/24 Signature Algorithm: sha256WithRSAEncryption 22:30:84:b6:04:b4:42:fd:8b:38:b2:2a:cb:ae:6e:14:63:12: 88:b0:61:29:31:a1:72:1f:89:61:4d:a0:08:49:c4:5f:dc:55: 48:29:ba:65:15:6f:29:4f:96:37:c2:19:bb:b5:05:f4:ce:e8: 20:d4:85:ee:30:12:d8:85:fe:42:e5:d6:03:da:72:6a:04:ea: 7b:41:ef:4b:c2:88:b6:d1:8e:0e:63:e5:ed:56:0b:37:f8:6e: 8f:b7:07:3b:78:83:47:0e:dd:90:e5:aa:3a:a3:23:12:a0:92: e5:72:c2:2e:0c:ab:30:11:9a:30:cd:ca:a8:78:d0:c6:7c:83: 60:4e:97:65:c5:53:1b:22:85:94:d1:54:1a:c8:4b:d6:40:11: 9e:a0:7d:dc:65:73:ef:b2:35:dd:02:6a:8a:f4:57:eb:24:8a: 0f:d9:70:23:cd:49:84:74:9b:59:94:eb:75:86:b5:b0:40:99: 68:5b:9b:cb:82:4f:c8:20:fc:f4:8b:64:61:f7:31:73:fd:04: da:ff:de:f6:7f:47:e0:4b:c4:eb:2e:98:cb:97:0e:64:af:57: 97:d7:c8:40:77:aa:69:12:01:3d:7b:63:2b:85:ce:b6:c5:38: 1a:d1:ad:b6:1d:55:1a:45:c4:db:e2:cb:f1:c2:82:41:c5:88: fc:0e:bd:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUD5XIu8lYyTYkT25cX7FksTrhbJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTEyMDMyMTI3NTZaFw0yNjEyMDIyMTMyNTZaMDMxMTAvBgNV BAMTKEYyODJGQTI2Q0E0RjQ5OEY0NDJGRjFBRkQ4OEE1RTE0QUQ0OUJFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO03gGyWbH1jaFanX3bemh9V6r VVn73tiLgQ2ubH/ybl+1Zt5MZjr9BTL7cv3NdzPjpndczdNGfK2JPM7qLkRol+et D1u943ftEtwhBzjrL2yBM6RZ99sN8yyEyezFyzPABWiN8BGUKPu8dogfPMBlNl0z Cc+nyCyU4ScqSwBK89tfu/IgyYoItofHBKll/K21cPtuwk20psPASc9VfeUAtzal iU9dTNA/gRttU1vLkeJUWsswPMGHXF29yBmAKoogpp+cgpChb828T42oPsPhfqI4 Y0TnKTKMMzSZX9cc9RSjD7Ofk3AcUycouAxk5lyq83GWj3F4pKjwpesw0n5/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU8oL6JspPSY9EL/Gv2IpeFK1JvrAwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjEwNzMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUov1 MA0GCSqGSIb3DQEBCwUAA4IBAQAiMIS2BLRC/Ys4sirLrm4UYxKIsGEpMaFyH4lh TaAIScRf3FVIKbplFW8pT5Y3whm7tQX0zugg1IXuMBLYhf5C5dYD2nJqBOp7Qe9L woi20Y4OY+XtVgs3+G6Ptwc7eINHDt2Q5ao6oyMSoJLlcsIuDKswEZowzcqoeNDG fINgTpdlxVMbIoWU0VQayEvWQBGeoH3cZXPvsjXdAmqK9FfrJIoP2XAjzUmEdJtZ lOt1hrWwQJloW5vLgk/IIPz0i2Rh9zFz/QTa/972f0fgS8TrLpjLlw5kr1eX18hA d6ppEgE9e2Mrhc62xTga0a22HVUaRcTb4svxwoJBxYj8Dr2X -----END CERTIFICATE-----Generated at Sat Dec 6 03:35:08 2025 by rpki-client