This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa File: AS137235.roa (raw, json) Hash identifier: 57U3nBb/r9URS6YusY/Qhp9RAfGr1sGL/PhL/H3SXFw= Subject key identifier: E4:C5:38:34:A9:F7:C1:DD:95:37:71:FF:31:D5:7D:6A:55:0D:95:AA Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7D85A5B20D7DBA0605DF0A98A0B6BC15D710D7F5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa Signing time: Mon 12 Jan 2026 03:32:00 +0000 ROA not before: Mon 12 Jan 2026 03:27:00 +0000 ROA not after: Mon 11 Jan 2027 03:32:00 +0000 asID: 137235 IP address blocks: 82.22.34.0/24 maxlen: 24 82.22.171.0/24 maxlen: 24 82.24.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:85:a5:b2:0d:7d:ba:06:05:df:0a:98:a0:b6:bc:15:d7:10:d7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 12 03:27:00 2026 GMT Not After : Jan 11 03:32:00 2027 GMT Subject: CN=E4C53834A9F7C1DD953771FF31D57D6A550D95AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:76:82:fc:fb:7a:af:41:ad:29:3a:c4:37: 76:da:e6:47:2d:86:75:cb:b8:28:1d:27:98:83:e0: 5d:92:3a:eb:00:03:54:03:1b:84:ab:d1:69:5f:98: bb:15:0f:c1:11:29:f4:47:20:35:0a:50:04:2d:bb: af:f3:e1:90:bc:16:b8:90:f9:3a:de:01:bf:8c:65: 74:67:c2:4d:b9:52:c3:12:c1:98:74:88:9a:a6:98: d9:bc:0a:d6:9c:73:57:1d:6a:4b:bd:8f:8a:45:1b: 56:ba:f4:a1:5a:4a:7b:16:2c:5e:7f:d9:f9:4f:59: cb:ac:30:bf:d8:1f:e0:da:5d:ec:15:1b:81:1d:a5: 64:56:78:3c:06:db:07:52:d0:a1:a7:c5:53:dc:2f: aa:da:a6:48:d0:11:6b:cb:46:4a:12:86:bc:14:06: 34:43:d0:bf:4a:b8:0f:f2:19:0f:b9:50:c5:f5:21: 53:10:8e:32:c0:d3:94:dd:4e:ad:1a:5d:92:a0:9c: bb:2c:ed:f0:3e:13:7d:9d:4e:73:70:91:46:6b:67: 8d:32:33:d9:1f:48:e5:c3:33:6e:31:51:e4:43:2d: d0:e4:f6:6e:e0:d3:6c:6c:27:fc:cf:a9:b4:cc:03: fc:82:c8:94:d0:a2:9e:46:0e:da:59:80:2c:2f:40: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:38:34:A9:F7:C1:DD:95:37:71:FF:31:D5:7D:6A:55:0D:95:AA X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.34.0/24 82.22.171.0/24 82.24.122.0/24 Signature Algorithm: sha256WithRSAEncryption 58:1b:06:d0:ff:6a:8e:e5:78:e8:e9:c0:89:de:6c:4f:5c:62: 11:d0:9a:40:19:17:80:47:4b:1a:d8:cc:e5:00:51:fc:5b:6f: ce:aa:ab:b3:67:39:b4:57:85:01:41:f6:45:bc:2a:9a:11:23: d9:66:8a:83:b1:0f:2a:19:2a:c0:59:b5:f5:48:f8:a6:9d:d3: 01:37:16:89:71:a2:44:0a:db:1e:e5:f7:26:b8:b2:02:8f:73: 11:fa:2e:fa:a8:48:78:80:18:15:eb:e1:e0:af:ab:47:24:e5: c0:d5:c1:5f:2d:be:1d:d3:bc:94:3c:e5:9f:d6:96:6b:d2:e4: a4:59:76:df:ec:06:fa:f1:7d:3f:b9:cd:66:1d:32:dd:55:e7: e8:f4:e2:18:a7:89:48:33:f4:a8:9d:f5:11:1b:17:31:86:59: ce:e1:f2:7a:49:31:52:97:6c:98:1c:17:95:4d:38:1d:85:c4: 18:54:f4:c9:70:16:3d:66:7c:0c:ea:72:b3:79:d3:c2:aa:a7: 20:8c:ad:b7:50:41:ca:0f:fd:cd:3f:71:11:89:a5:4d:fd:e1: 6f:a0:42:9c:66:76:c3:40:29:23:05:43:2b:e0:59:d9:87:3c: 04:b9:b3:47:9d:be:bc:0e:18:62:22:bc:42:f2:25:b5:58:83: 5e:57:c8:3a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUfYWlsg19ugYF3wqYoLa8FdcQ1/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTIwMzI3MDBaFw0yNzAxMTEwMzMyMDBaMDMxMTAvBgNV BAMTKEU0QzUzODM0QTlGN0MxREQ5NTM3NzFGRjMxRDU3RDZBNTUwRDk1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5naC/Pt6r0GtKTrEN3ba5kct hnXLuCgdJ5iD4F2SOusAA1QDG4Sr0WlfmLsVD8ERKfRHIDUKUAQtu6/z4ZC8FriQ +TreAb+MZXRnwk25UsMSwZh0iJqmmNm8Ctacc1cdaku9j4pFG1a69KFaSnsWLF5/ 2flPWcusML/YH+DaXewVG4EdpWRWeDwG2wdS0KGnxVPcL6rapkjQEWvLRkoShrwU BjRD0L9KuA/yGQ+5UMX1IVMQjjLA05TdTq0aXZKgnLss7fA+E32dTnNwkUZrZ40y M9kfSOXDM24xUeRDLdDk9m7g02xsJ/zPqbTMA/yCyJTQop5GDtpZgCwvQApTAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU5MU4NKn3wd2VN3H/MdV9alUNlaowHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3MjM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhYi AwQAUharAwQAUhh6MA0GCSqGSIb3DQEBCwUAA4IBAQBYGwbQ/2qO5Xjo6cCJ3mxP XGIR0JpAGReAR0sa2MzlAFH8W2/OqquzZzm0V4UBQfZFvCqaESPZZoqDsQ8qGSrA WbX1SPimndMBNxaJcaJECtse5fcmuLICj3MR+i76qEh4gBgV6+Hgr6tHJOXA1cFf Lb4d07yUPOWf1pZr0uSkWXbf7Ab68X0/uc1mHTLdVefo9OIYp4lIM/SonfURGxcx hlnO4fJ6STFSl2yYHBeVTTgdhcQYVPTJcBY9ZnwM6nKzedPCqqcgjK23UEHKD/3N P3ERiaVN/eFvoEKcZnbDQCkjBUMr4FnZhzwEubNHnb68DhhiIrxC8iW1WINeV8g6 -----END CERTIFICATE-----Generated at Sun Jan 18 08:57:01 2026 by rpki-client