This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa File: AS133153.roa (raw, json) Hash identifier: 1KqEYpzQsTWnMVVYqK7487CPHW3/5akt3awDhZFWrPc= Subject key identifier: 65:04:D3:BD:03:CC:F3:54:3D:BC:23:4D:45:81:48:18:0D:FA:F7:7B Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 528547080D74E921F5E8DA7352C158E626631ACE Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa Signing time: Mon 24 Nov 2025 15:43:41 +0000 ROA not before: Mon 24 Nov 2025 15:38:41 +0000 ROA not after: Mon 23 Nov 2026 15:43:41 +0000 asID: 133153 IP address blocks: 82.39.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:85:47:08:0d:74:e9:21:f5:e8:da:73:52:c1:58:e6:26:63:1a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 15:38:41 2025 GMT Not After : Nov 23 15:43:41 2026 GMT Subject: CN=6504D3BD03CCF3543DBC234D458148180DFAF77B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5b:3d:74:35:cf:c1:82:12:ab:e3:2f:20:ee: 63:5b:81:f0:7b:3d:ea:c1:12:65:23:7e:8a:f0:a5: 84:36:ee:2f:dd:60:71:85:71:b2:e5:9e:26:e9:0a: e0:04:f8:c7:77:90:57:6f:ce:f4:40:d7:a4:ad:1e: ba:88:d3:3f:c0:82:ca:03:e3:a7:45:61:24:c6:e1: 86:74:65:bf:c8:4c:2f:3e:1f:4e:c7:bf:6f:cd:0a: 81:0d:ae:54:ff:96:88:ac:53:41:05:0a:86:fe:3a: 21:9c:98:c3:43:69:a1:c9:ee:e0:82:31:a4:bb:11: e0:56:65:d4:3e:e3:d8:99:9b:55:01:7a:81:36:57: 16:53:b7:8f:30:56:d8:98:bb:c6:a3:67:e8:6c:ac: 38:dc:f3:ab:91:94:d6:d0:76:c6:58:d4:a8:23:c7: 08:dc:af:0c:00:cb:06:68:59:66:62:3f:f0:68:65: 81:08:a7:a5:05:23:63:31:fe:dd:47:36:f2:c6:16: 76:0b:b3:79:f9:5e:20:14:8e:32:86:b3:fa:59:3c: 6b:e3:7e:74:c3:7e:a2:60:d5:91:b0:35:57:9c:ca: ba:4b:d0:a4:a2:00:6e:ba:d7:b1:cc:e0:a0:82:f1: ef:ec:13:a9:ef:3d:84:f7:0d:5c:89:6b:5d:93:71: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:04:D3:BD:03:CC:F3:54:3D:BC:23:4D:45:81:48:18:0D:FA:F7:7B X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.99.0/24 Signature Algorithm: sha256WithRSAEncryption 31:bc:91:1d:78:9d:11:a4:99:7a:eb:a9:60:15:70:77:bd:19: d6:e4:3c:ca:b7:7d:b1:09:ca:4e:b3:e7:c8:46:07:e6:4a:7d: 14:8d:3d:13:c6:0d:a2:4d:f9:fb:0f:84:18:a9:e5:77:8a:55: cd:04:49:18:98:3f:87:a6:10:27:e1:91:f2:c3:63:a8:4a:c0: 65:d5:22:fb:e7:47:39:95:b0:fb:25:eb:97:d3:32:08:7e:71: 82:45:87:91:1d:80:fd:6d:31:10:1a:66:56:cf:6c:6b:db:1a: b1:95:f0:9b:1a:eb:41:ab:94:9b:a7:87:b8:15:9b:21:f4:22: 21:b7:74:70:f6:fb:0f:7c:33:44:45:df:b0:d9:68:d8:35:f7: be:e8:ca:bc:00:9c:e7:c7:c8:52:63:34:5a:ff:e2:34:5c:fb: 8b:62:67:24:1b:fe:9f:ad:f9:b4:f8:55:0c:df:ab:f9:72:16: e0:47:13:14:c3:b5:65:7a:95:62:0e:6f:86:3a:87:b2:d8:eb: c3:31:f0:77:09:a4:49:ee:1e:3c:5f:37:df:a0:df:c3:b9:b2: 4e:fe:a3:7c:75:b7:48:9f:16:e6:5c:30:37:77:6c:2d:6e:93: 4a:eb:f5:d6:17:41:00:b4:16:50:42:ba:4d:ed:34:99:2d:85: 3d:8f:ce:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUUoVHCA106SH16NpzUsFY5iZjGs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQxNTM4NDFaFw0yNjExMjMxNTQzNDFaMDMxMTAvBgNV BAMTKDY1MDREM0JEMDNDQ0YzNTQzREJDMjM0RDQ1ODE0ODE4MERGQUY3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6Wz10Nc/BghKr4y8g7mNbgfB7 PerBEmUjforwpYQ27i/dYHGFcbLlnibpCuAE+Md3kFdvzvRA16StHrqI0z/AgsoD 46dFYSTG4YZ0Zb/ITC8+H07Hv2/NCoENrlT/loisU0EFCob+OiGcmMNDaaHJ7uCC MaS7EeBWZdQ+49iZm1UBeoE2VxZTt48wVtiYu8ajZ+hsrDjc86uRlNbQdsZY1Kgj xwjcrwwAywZoWWZiP/BoZYEIp6UFI2Mx/t1HNvLGFnYLs3n5XiAUjjKGs/pZPGvj fnTDfqJg1ZGwNVecyrpL0KSiAG6617HM4KCC8e/sE6nvPYT3DVyJa12TcTGlAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZQTTvQPM81Q9vCNNRYFIGA3693swHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMzMTUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidj MA0GCSqGSIb3DQEBCwUAA4IBAQAxvJEdeJ0RpJl666lgFXB3vRnW5DzKt32xCcpO s+fIRgfmSn0UjT0Txg2iTfn7D4QYqeV3ilXNBEkYmD+HphAn4ZHyw2OoSsBl1SL7 50c5lbD7JeuX0zIIfnGCRYeRHYD9bTEQGmZWz2xr2xqxlfCbGutBq5Sbp4e4FZsh 9CIht3Rw9vsPfDNERd+w2WjYNfe+6Mq8AJznx8hSYzRa/+I0XPuLYmckG/6frfm0 +FUM36v5chbgRxMUw7VlepViDm+GOoey2OvDMfB3CaRJ7h48XzffoN/DubJO/qN8 dbdInxbmXDA3d2wtbpNK6/XWF0EAtBZQQrpN7TSZLYU9j84L -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:58 2025 by rpki-client