This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa File: AS133153.roa (raw, json) Hash identifier: RG8XjAK3vRkMu/Cd3d+iYTh5Mr94axEdax1PlhylF88= Subject key identifier: F3:08:76:09:87:0F:DE:57:56:F2:EA:DC:8F:34:B7:8C:AD:82:8B:1C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 49385D1B9D0F9438643481D28F59A2B2732ACFA1 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa Signing time: Wed 07 Jan 2026 12:19:46 +0000 ROA not before: Wed 07 Jan 2026 12:14:46 +0000 ROA not after: Wed 06 Jan 2027 12:19:46 +0000 asID: 133153 IP address blocks: 82.39.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:38:5d:1b:9d:0f:94:38:64:34:81:d2:8f:59:a2:b2:73:2a:cf:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 7 12:14:46 2026 GMT Not After : Jan 6 12:19:46 2027 GMT Subject: CN=F3087609870FDE5756F2EADC8F34B78CAD828B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:6a:2f:ed:7d:be:8b:5d:70:7d:e6:ce:3a: 1d:18:a0:00:87:34:8b:a5:14:b3:e7:c0:e5:de:b6: e5:b7:cf:f3:23:b4:fa:ec:72:02:1e:75:24:cf:c7: 68:82:55:e1:e5:78:82:c0:e4:c5:d9:77:d2:8e:a6: 84:cd:a0:f0:d1:45:6e:23:69:13:73:87:5f:62:7d: d0:2e:e2:55:fc:0c:c3:3f:25:29:2c:6a:18:6a:6d: b6:f3:b0:91:b2:98:f3:c6:49:95:55:e4:b0:d0:23: 28:87:a1:8d:8b:3a:bc:bc:77:8e:5b:b0:03:52:0b: 83:4f:f5:57:97:ae:bf:f1:0a:29:77:7a:18:ab:7a: b6:36:02:6c:96:9c:9d:76:94:17:0e:a0:bd:8b:4b: 7a:4c:45:94:1c:d2:25:e0:f2:e1:1f:58:2e:14:4c: 66:77:fc:11:cc:7c:8f:5e:c8:76:18:7c:b8:0e:2f: 09:e4:1a:2a:9f:72:93:c3:23:36:38:03:c1:71:4b: 93:03:44:52:85:7c:08:3b:23:64:69:c4:93:0a:62: f5:f7:7e:1a:07:9e:2e:a5:d3:52:88:54:a8:47:29: 73:81:e7:8e:30:56:30:9a:02:c0:57:fd:d7:0f:40: df:6b:a1:38:1b:28:20:1a:b7:5f:ed:b3:b3:e7:b8: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:76:09:87:0F:DE:57:56:F2:EA:DC:8F:34:B7:8C:AD:82:8B:1C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.99.0/24 Signature Algorithm: sha256WithRSAEncryption 67:07:fe:c1:43:0d:fe:44:28:d4:c4:18:17:b1:6c:c0:2f:10: e6:85:ee:3b:7f:da:9d:c0:dc:c5:09:38:f0:7c:2e:07:35:e8: 38:03:33:ea:a2:5f:39:39:58:2d:37:b2:13:7d:82:0d:40:6f: cc:29:f5:b9:6c:72:55:22:f5:c0:b9:ab:bd:af:e5:87:28:0f: e2:c9:66:93:13:6e:fc:84:92:da:8d:9b:a4:52:87:cc:77:e8: df:2b:c9:ba:af:95:6e:03:c7:29:c5:50:e6:33:e2:47:b6:b4: 2d:bf:d0:b0:9e:c4:01:c5:98:dd:19:27:f7:f3:86:4e:91:4d: 3b:22:60:6d:61:36:b9:d4:fe:90:32:22:10:76:8b:4e:d1:0d: 18:e0:97:31:98:8c:19:20:7f:4d:c3:52:99:ed:f8:cc:90:db: a3:e2:94:09:9a:60:89:fd:83:5d:4b:33:8e:92:65:45:d5:9e: 9d:2c:af:32:75:fb:77:98:56:ab:dd:72:96:ef:50:8f:c9:c1: 8c:f5:df:6c:9a:87:c8:d5:a4:29:cb:94:8d:90:f7:e4:79:d2: c0:10:f5:8e:70:1c:ab:1f:1d:ca:3a:3a:cc:81:e1:3f:37:a9: f2:ff:4c:58:50:f3:30:98:8f:61:e1:06:f0:8b:41:15:fc:6d: 73:e6:07:8f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSThdG50PlDhkNIHSj1misnMqz6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDcxMjE0NDZaFw0yNzAxMDYxMjE5NDZaMDMxMTAvBgNV BAMTKEYzMDg3NjA5ODcwRkRFNTc1NkYyRUFEQzhGMzRCNzhDQUQ4MjhCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FWov7X2+i11wfebOOh0YoACH NIulFLPnwOXetuW3z/MjtPrscgIedSTPx2iCVeHleILA5MXZd9KOpoTNoPDRRW4j aRNzh19ifdAu4lX8DMM/JSksahhqbbbzsJGymPPGSZVV5LDQIyiHoY2LOry8d45b sANSC4NP9VeXrr/xCil3ehirerY2AmyWnJ12lBcOoL2LS3pMRZQc0iXg8uEfWC4U TGZ3/BHMfI9eyHYYfLgOLwnkGiqfcpPDIzY4A8FxS5MDRFKFfAg7I2RpxJMKYvX3 fhoHni6l01KIVKhHKXOB544wVjCaAsBX/dcPQN9roTgbKCAat1/ts7PnuKcBAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU8wh2CYcP3ldW8urcjzS3jK2CixwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMzMTUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidj MA0GCSqGSIb3DQEBCwUAA4IBAQBnB/7BQw3+RCjUxBgXsWzALxDmhe47f9qdwNzF CTjwfC4HNeg4AzPqol85OVgtN7ITfYINQG/MKfW5bHJVIvXAuau9r+WHKA/iyWaT E278hJLajZukUofMd+jfK8m6r5VuA8cpxVDmM+JHtrQtv9CwnsQBxZjdGSf384ZO kU07ImBtYTa51P6QMiIQdotO0Q0Y4JcxmIwZIH9Nw1KZ7fjMkNuj4pQJmmCJ/YNd SzOOkmVF1Z6dLK8ydft3mFar3XKW71CPycGM9d9smofI1aQpy5SNkPfkedLAEPWO cByrHx3KOjrMgeE/N6ny/0xYUPMwmI9h4Qbwi0EV/G1z5geP -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:44 2026 by rpki-client