This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133150.roa File: AS133150.roa (raw, json) Hash identifier: VuKS8yrVC7CWQDGESKxZpAbmaVT9kTPFb7yk9K/YM+U= Subject key identifier: 6A:D8:58:8A:9F:9E:72:3E:0A:10:2F:C7:8E:61:B7:A3:AF:23:8F:85 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4FB4F85F4C59E47771A26D72748F2A149E68F9F8 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133150.roa Signing time: Thu 04 Dec 2025 15:54:30 +0000 ROA not before: Thu 04 Dec 2025 15:49:30 +0000 ROA not after: Thu 03 Dec 2026 15:54:30 +0000 asID: 133150 IP address blocks: 82.39.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 19:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b4:f8:5f:4c:59:e4:77:71:a2:6d:72:74:8f:2a:14:9e:68:f9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 4 15:49:30 2025 GMT Not After : Dec 3 15:54:30 2026 GMT Subject: CN=6AD8588A9F9E723E0A102FC78E61B7A3AF238F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:46:47:64:23:e5:23:3e:b0:ac:fe:1f:4d: 0a:9a:b3:00:76:fb:d5:39:f5:a2:72:51:50:61:10: 49:88:d9:7b:c2:ce:31:d0:ee:71:33:79:b0:77:e9: 08:1b:b3:5c:da:03:0c:be:f9:df:d6:42:d4:83:30: d4:8e:06:f4:f6:2f:e7:9d:7b:5f:15:a2:44:d8:0a: 92:31:0f:c4:06:19:9d:a2:91:bb:36:26:fc:89:a0: 32:f9:0f:57:60:f3:0c:71:a4:00:70:66:b8:7d:e1: cb:11:33:a4:78:8c:d2:94:f7:48:b0:ee:87:df:15: 2d:7d:04:dd:59:ec:72:cf:4a:89:d1:8a:3c:de:d4: 7a:c3:0f:cf:91:ae:64:2f:b1:47:74:4e:fd:62:1f: 9c:aa:ba:0e:8a:7b:7d:65:8e:b0:8f:76:16:18:bf: 14:05:7b:ff:c0:be:73:fb:04:db:df:10:f7:6c:9a: 5a:47:ab:fb:a2:e7:72:a5:3a:ce:cf:e2:e3:74:14: f1:eb:5e:65:5d:b1:bc:37:95:ad:31:82:29:4b:3d: e5:e9:dc:9e:cc:df:4e:9b:4a:2f:35:c0:0d:f8:5a: 61:c4:bd:3e:ff:a9:ac:c7:fb:30:5c:85:53:58:32: 4f:c4:e7:39:9b:71:a5:21:5e:59:2e:ce:40:8e:0d: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:58:8A:9F:9E:72:3E:0A:10:2F:C7:8E:61:B7:A3:AF:23:8F:85 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.232.0/23 Signature Algorithm: sha256WithRSAEncryption 35:e1:7c:81:7f:97:be:45:5f:2e:90:b4:5f:21:d1:23:90:56: 31:39:9c:79:4b:2e:cf:7c:4c:24:59:ce:d1:f2:ca:b7:50:c4: 7b:f4:4d:08:ea:15:b6:e8:86:75:34:b0:57:8b:2a:1b:b9:7c: d7:56:71:bc:d5:80:57:f7:d3:2b:44:0f:94:01:85:a4:18:db: 0e:e5:41:7b:7c:60:d9:b1:00:c7:94:92:93:4d:02:10:4d:6e: d1:03:0d:25:da:34:5f:14:67:1a:3d:9b:db:3b:3e:c4:a2:a2: 57:a7:5b:18:85:39:ff:5c:fb:d3:38:b9:67:f0:3d:61:54:72: 6d:50:13:02:1c:09:78:31:7f:c4:56:b7:fa:0d:fa:b3:c5:ea: ed:f7:e9:5b:fb:1c:7f:03:ba:a1:d3:aa:8f:4a:8f:c8:fd:da: 69:e2:0a:1c:50:64:e8:63:a7:90:07:83:38:00:10:5c:25:c6: ff:99:e2:8f:82:70:2b:58:cf:96:eb:e5:8e:8b:6a:2e:28:44: a8:3f:ca:08:2f:44:89:9d:05:e5:6c:f1:80:d4:11:41:59:7b: 52:d1:98:14:38:84:22:de:1f:8f:72:de:7a:f8:a0:c6:54:94: 69:b8:70:ab:7c:9b:fe:2e:ae:1d:bc:a7:9f:51:89:41:d6:37: d6:98:00:3d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUT7T4X0xZ5Hdxom1ydI8qFJ5o+fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDQxNTQ5MzBaFw0yNjEyMDMxNTU0MzBaMDMxMTAvBgNV BAMTKDZBRDg1ODhBOUY5RTcyM0UwQTEwMkZDNzhFNjFCN0EzQUYyMzhGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhykZHZCPlIz6wrP4fTQqaswB2 +9U59aJyUVBhEEmI2XvCzjHQ7nEzebB36Qgbs1zaAwy++d/WQtSDMNSOBvT2L+ed e18VokTYCpIxD8QGGZ2ikbs2JvyJoDL5D1dg8wxxpABwZrh94csRM6R4jNKU90iw 7offFS19BN1Z7HLPSonRijze1HrDD8+RrmQvsUd0Tv1iH5yqug6Ke31ljrCPdhYY vxQFe//AvnP7BNvfEPdsmlpHq/ui53KlOs7P4uN0FPHrXmVdsbw3la0xgilLPeXp 3J7M306bSi81wA34WmHEvT7/qazH+zBchVNYMk/E5zmbcaUhXlkuzkCODeuXAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUathYip+ecj4KEC/HjmG3o68jj4UwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMzMTUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUifo MA0GCSqGSIb3DQEBCwUAA4IBAQA14XyBf5e+RV8ukLRfIdEjkFYxOZx5Sy7PfEwk Wc7R8sq3UMR79E0I6hW26IZ1NLBXiyobuXzXVnG81YBX99MrRA+UAYWkGNsO5UF7 fGDZsQDHlJKTTQIQTW7RAw0l2jRfFGcaPZvbOz7EoqJXp1sYhTn/XPvTOLln8D1h VHJtUBMCHAl4MX/EVrf6Dfqzxert9+lb+xx/A7qh06qPSo/I/dpp4gocUGToY6eQ B4M4ABBcJcb/meKPgnArWM+W6+WOi2ouKESoP8oIL0SJnQXlbPGA1BFBWXtS0ZgU OIQi3h+Pct56+KDGVJRpuHCrfJv+Lq4dvKefUYlB1jfWmAA9 -----END CERTIFICATE-----Generated at Fri Dec 5 07:01:37 2025 by rpki-client