This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11059.roa File: AS11059.roa (raw, json) Hash identifier: 9QUBZNl/TNCaaBrAIdyFB6BfJXboOSQg8kEGr3nHc3o= Subject key identifier: AA:6A:32:D3:DC:95:A5:E4:A6:CA:0F:BD:27:F8:E8:34:DF:DE:8F:72 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 554EB22F458C304BA8264D5E6F70951AA2C61F35 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11059.roa Signing time: Tue 02 Dec 2025 06:51:17 +0000 ROA not before: Tue 02 Dec 2025 06:46:17 +0000 ROA not after: Tue 01 Dec 2026 06:51:17 +0000 asID: 11059 IP address blocks: 82.40.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4e:b2:2f:45:8c:30:4b:a8:26:4d:5e:6f:70:95:1a:a2:c6:1f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 06:46:17 2025 GMT Not After : Dec 1 06:51:17 2026 GMT Subject: CN=AA6A32D3DC95A5E4A6CA0FBD27F8E834DFDE8F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:fd:e7:8b:94:2c:b7:83:57:ec:2e:4b:55: 32:2a:11:98:28:a7:be:79:87:8e:08:ad:74:d5:2c: dd:b5:dd:bd:7e:d5:58:43:ec:69:ac:8d:a6:94:98: 9d:f2:0b:83:94:90:7d:a8:70:4d:46:68:48:6b:2d: 38:ee:aa:30:ad:d7:d3:28:55:3e:b6:7c:1d:fc:52: d3:74:cc:ce:b7:ac:be:41:6e:37:39:ea:42:2b:25: 8b:2a:91:09:d5:48:56:68:74:26:11:bd:5b:cc:65: 72:30:14:dd:68:f5:73:4e:54:32:a0:4a:c2:2f:8e: d2:aa:58:ee:ec:f5:8b:33:20:a9:b8:1a:ad:3d:76: 39:45:4e:95:12:b9:62:46:9d:41:f2:21:cc:ac:fc: d5:e4:ab:1a:fe:94:28:20:12:55:71:3a:5a:e5:80: a3:26:fc:80:3f:fe:22:27:c7:85:39:e6:ec:9b:77: 0d:18:52:b3:c9:4c:07:9e:ce:f0:b2:95:47:8b:93: 4c:e9:d4:e4:40:2f:21:94:3c:90:a6:83:23:7b:c9: 4a:23:ea:fe:e7:cb:66:90:cd:cc:1f:d3:eb:82:69: 64:36:59:cd:65:09:01:02:36:00:89:3a:1a:21:68: 25:ce:f5:66:9a:77:b2:c2:aa:71:44:48:10:01:cf: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6A:32:D3:DC:95:A5:E4:A6:CA:0F:BD:27:F8:E8:34:DF:DE:8F:72 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.40.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9c:a6:58:f1:6a:ba:f5:b4:2f:f0:c9:d1:50:1e:64:2d:64:94: b1:fe:7a:6d:64:2f:ce:57:2f:cd:b4:02:03:80:e4:2b:18:07: 7a:c7:b3:af:e2:df:1b:c1:46:3e:31:59:cd:2f:27:a8:63:5b: 66:cc:7b:e6:98:48:48:65:76:05:3a:84:86:57:41:63:a1:41: 19:2b:12:82:1c:30:2d:3e:81:f9:d2:65:b0:9b:56:1d:df:91: 28:17:7d:c7:99:9a:6d:af:56:36:78:da:7a:64:91:dc:71:1e: e7:58:dc:46:1b:4c:af:a1:56:4f:40:67:08:9a:3a:86:4e:a3: e0:a3:7c:80:fd:60:8f:cb:43:8d:2a:09:4b:9b:a4:c6:57:50: 0d:12:bc:9b:bc:38:d3:e7:e7:2f:86:0c:a9:76:42:cd:62:f5: a6:fa:37:40:09:18:36:dd:ae:8a:0f:37:6d:e0:df:10:dc:5b: 6a:3f:ff:f9:ae:bb:fe:b3:c8:96:18:59:c2:7a:f7:53:0c:7d: 38:bf:23:2f:4a:87:d2:8c:59:ea:91:c3:c8:2e:0b:d5:fe:e9: 86:44:04:70:54:6c:4e:a8:90:ad:54:2c:60:76:a7:7d:0a:04: 03:ff:0c:59:1c:f0:1d:9c:d5:93:86:f9:1f:e7:be:6e:ef:14: 77:8e:7c:93 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUVU6yL0WMMEuoJk1eb3CVGqLGHzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIwNjQ2MTdaFw0yNjEyMDEwNjUxMTdaMDMxMTAvBgNV BAMTKEFBNkEzMkQzREM5NUE1RTRBNkNBMEZCRDI3RjhFODM0REZERThGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JP3ni5Qst4NX7C5LVTIqEZgo p755h44IrXTVLN213b1+1VhD7GmsjaaUmJ3yC4OUkH2ocE1GaEhrLTjuqjCt19Mo VT62fB38UtN0zM63rL5Bbjc56kIrJYsqkQnVSFZodCYRvVvMZXIwFN1o9XNOVDKg SsIvjtKqWO7s9YszIKm4Gq09djlFTpUSuWJGnUHyIcys/NXkqxr+lCggElVxOlrl gKMm/IA//iInx4U55uybdw0YUrPJTAeezvCylUeLk0zp1ORALyGUPJCmgyN7yUoj 6v7ny2aQzcwf0+uCaWQ2Wc1lCQECNgCJOhohaCXO9Waad7LCqnFESBABz9/nAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUqmoy09yVpeSmyg+9J/joNN/ej3IwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTEwNTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdSKIAw DQYJKoZIhvcNAQELBQADggEBAJymWPFquvW0L/DJ0VAeZC1klLH+em1kL85XL820 AgOA5CsYB3rHs6/i3xvBRj4xWc0vJ6hjW2bMe+aYSEhldgU6hIZXQWOhQRkrEoIc MC0+gfnSZbCbVh3fkSgXfceZmm2vVjZ42npkkdxxHudY3EYbTK+hVk9AZwiaOoZO o+CjfID9YI/LQ40qCUubpMZXUA0SvJu8ONPn5y+GDKl2Qs1i9ab6N0AJGDbdrooP N23g3xDcW2o///muu/6zyJYYWcJ691MMfTi/Iy9Kh9KMWeqRw8guC9X+6YZEBHBU bE6okK1ULGB2p30KBAP/DFkc8B2c1ZOG+R/nvm7vFHeOfJM= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:45 2025 by rpki-client