This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138195.roa File: AS138195.roa (raw, json) Hash identifier: qUEP3f9JGeoi/dUSdpwxmIxti2MSLQvqkQqmazHp60g= Subject key identifier: E8:55:08:75:58:C9:02:6F:EF:36:80:90:35:E4:56:0D:08:E9:C4:08 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3A6705AFB7176D31DFD48A7E14D8941D27C3488D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138195.roa Signing time: Mon 24 Nov 2025 15:46:32 +0000 ROA not before: Mon 24 Nov 2025 15:41:32 +0000 ROA not after: Mon 23 Nov 2026 15:46:32 +0000 asID: 138195 IP address blocks: 82.39.102.0/23 maxlen: 23 82.39.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:67:05:af:b7:17:6d:31:df:d4:8a:7e:14:d8:94:1d:27:c3:48:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 15:41:32 2025 GMT Not After : Nov 23 15:46:32 2026 GMT Subject: CN=E855087558C9026FEF36809035E4560D08E9C408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:42:ff:c5:e0:65:12:7f:1b:b4:fe:7b:6d: f4:74:40:02:82:46:35:88:c1:e0:be:88:9a:d7:9a: 7d:a5:cc:bc:a9:8e:4c:c9:11:5b:f0:0c:e1:6f:2a: 5b:27:75:df:ba:93:1b:77:ae:ef:82:53:34:c9:49: 72:a5:78:ba:94:66:79:93:9d:dc:26:98:0a:48:15: 30:52:ca:53:c0:0e:7d:f5:e9:d2:bb:82:20:34:9c: 90:02:b3:09:a0:94:8f:39:d7:3c:ef:af:0b:89:f3: c5:01:80:67:ae:5f:2a:7c:14:db:b9:19:34:2c:04: 26:60:ea:ce:29:9e:7d:04:d9:6b:d5:69:37:ef:34: 62:9c:90:e0:8f:a6:48:a6:5f:cc:a1:da:b0:57:0f: bf:bc:b1:e4:d2:2f:ec:3b:02:02:32:c1:d7:29:5e: 1f:55:d1:42:5e:54:92:b5:d0:be:ff:61:f7:1a:a9: eb:a0:bc:c1:9a:56:8f:7e:62:fb:73:a4:17:f4:b0: 13:47:63:6d:eb:4a:f3:71:6b:11:ab:d9:7c:f8:fd: 36:2c:aa:77:c0:1b:ed:91:71:33:10:97:8b:14:77: dc:34:de:0f:79:cd:72:b2:f8:85:f3:fc:83:f8:2f: 68:2a:b7:a1:b2:65:33:d2:c4:3f:8e:d7:e2:de:88: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:08:75:58:C9:02:6F:EF:36:80:90:35:E4:56:0D:08:E9:C4:08 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.102.0/23 82.39.194.0/23 Signature Algorithm: sha256WithRSAEncryption a9:36:28:f6:ad:83:ec:e7:5c:11:86:f2:b3:52:95:8e:fa:c8: 8e:77:0b:24:2c:8f:bd:36:6a:9a:d8:92:78:ab:6a:75:dd:27: eb:45:61:c4:77:b7:0e:78:69:95:ae:fd:c0:71:0f:19:a6:f5: 33:1c:a2:9e:23:24:ad:9f:4a:43:62:fe:3d:c7:c0:ab:8e:ca: 74:91:92:09:56:ea:25:78:72:8d:d7:b7:98:36:b2:f6:1e:b2: 5a:d9:0c:ea:05:c6:8e:e3:6c:a9:20:b3:27:a5:4f:0a:53:e7: 99:96:9b:92:a8:e0:bd:3a:36:b2:2a:2a:23:ce:29:fd:51:76: 89:2d:13:89:1d:f7:29:eb:37:5f:2d:db:21:2d:83:3b:7a:d2: 36:8f:35:07:0b:15:fe:37:8c:8e:e2:5b:89:27:39:6f:e6:ef: 68:9c:b4:c7:ab:1a:bb:d5:53:88:fe:24:c6:7b:1d:9a:a4:d3: fa:3d:8b:42:fb:f9:98:37:fb:35:3e:b5:0c:25:40:fc:14:b5: a1:5c:aa:2a:fc:eb:0b:65:bc:0d:8f:25:18:00:1a:06:60:8a: de:62:35:06:7e:97:b5:32:82:d9:8a:e8:bb:4d:43:ec:44:8f: c0:8e:46:96:29:0d:c3:27:ed:7b:35:6c:e0:da:ba:d8:dc:43: 27:50:3f:0b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUOmcFr7cXbTHf1Ip+FNiUHSfDSI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQxNTQxMzJaFw0yNjExMjMxNTQ2MzJaMDMxMTAvBgNV BAMTKEU4NTUwODc1NThDOTAyNkZFRjM2ODA5MDM1RTQ1NjBEMDhFOUM0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBEL/xeBlEn8btP57bfR0QAKC RjWIweC+iJrXmn2lzLypjkzJEVvwDOFvKlsndd+6kxt3ru+CUzTJSXKleLqUZnmT ndwmmApIFTBSylPADn316dK7giA0nJACswmglI851zzvrwuJ88UBgGeuXyp8FNu5 GTQsBCZg6s4pnn0E2WvVaTfvNGKckOCPpkimX8yh2rBXD7+8seTSL+w7AgIywdcp Xh9V0UJeVJK10L7/YfcaqeugvMGaVo9+YvtzpBf0sBNHY23rSvNxaxGr2Xz4/TYs qnfAG+2RcTMQl4sUd9w03g95zXKy+IXz/IP4L2gqt6GyZTPSxD+O1+LeiNiVAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU6FUIdVjJAm/vNoCQNeRWDQjpxAgwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM4MTk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUidm AwQBUifCMA0GCSqGSIb3DQEBCwUAA4IBAQCpNij2rYPs51wRhvKzUpWO+siOdwsk LI+9Nmqa2JJ4q2p13SfrRWHEd7cOeGmVrv3AcQ8ZpvUzHKKeIyStn0pDYv49x8Cr jsp0kZIJVuoleHKN17eYNrL2HrJa2QzqBcaO42ypILMnpU8KU+eZlpuSqOC9Ojay Kiojzin9UXaJLROJHfcp6zdfLdshLYM7etI2jzUHCxX+N4yO4luJJzlv5u9onLTH qxq71VOI/iTGex2apNP6PYtC+/mYN/s1PrUMJUD8FLWhXKoq/OsLZbwNjyUYABoG YIreYjUGfpe1MoLZiui7TUPsRI/AjkaWKQ3DJ+17NWzg2rrY3EMnUD8L -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:59 2025 by rpki-client