This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140813.roa File: AS140813.roa (raw, json) Hash identifier: TR2u0bwPy5l1dQ61tawhHphLu6m/Fvr5zvrPipM/aoc= Subject key identifier: 59:06:C5:89:29:65:A8:FC:DE:6D:0B:26:D1:D0:EC:99:6E:E9:EE:AF Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 394A507ECC7FD9BFDBD536E2022BAC305BB48174 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140813.roa Signing time: Tue 25 Nov 2025 09:33:29 +0000 ROA not before: Tue 25 Nov 2025 09:28:29 +0000 ROA not after: Tue 24 Nov 2026 09:33:29 +0000 asID: 140813 IP address blocks: 82.38.168.0/24 maxlen: 24 82.38.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4a:50:7e:cc:7f:d9:bf:db:d5:36:e2:02:2b:ac:30:5b:b4:81:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 25 09:28:29 2025 GMT Not After : Nov 24 09:33:29 2026 GMT Subject: CN=5906C5892965A8FCDE6D0B26D1D0EC996EE9EEAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:bb:2d:b7:d8:7e:51:79:8d:c8:c3:86:f8: b3:01:ba:62:5d:aa:b6:fb:d8:58:ba:5c:c4:e9:c6: 8c:f6:a3:99:d5:f8:34:49:4a:93:b7:e5:0b:32:31: 97:be:99:0f:8c:43:7e:44:4d:88:59:fa:d1:98:f5: 83:40:89:00:2d:c5:92:79:72:65:11:bc:e4:89:12: ff:6e:f5:a9:43:96:ee:f9:78:0e:47:3f:ff:0b:be: ab:59:cf:68:8f:6b:84:9c:6a:f8:b9:7f:9a:40:c9: b1:b2:06:0f:ae:22:6c:e0:e9:bc:db:4c:09:ab:42: 53:39:1e:50:0b:b5:80:ef:34:28:61:03:1e:db:21: 3e:52:f1:76:eb:85:c6:92:d2:df:3b:a5:8e:a4:f8: 25:b8:18:01:2b:1d:36:d2:bc:0c:43:d4:74:c4:89: 84:61:15:67:d7:0a:76:ac:fc:bd:7b:ae:b8:69:8b: 92:59:d5:e5:ad:7a:97:bf:7d:32:f9:6f:e7:46:82: 43:51:6f:c5:cc:ad:69:65:c6:2e:4a:31:2b:35:ab: 0c:b4:f8:35:be:48:08:3b:83:2c:3d:8d:bb:49:48: e6:41:08:be:21:68:a3:de:47:3f:a8:49:4f:ab:69: 6d:b6:8a:f9:ca:d5:1c:87:c8:aa:43:07:11:ff:25: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:C5:89:29:65:A8:FC:DE:6D:0B:26:D1:D0:EC:99:6E:E9:EE:AF X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS140813.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.168.0/24 82.38.200.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:2e:59:21:4c:78:c2:31:02:c8:5b:f2:6e:3e:47:f3:1f:bd: 26:0f:ed:ee:3f:c4:33:32:7f:e2:e7:13:13:93:cb:29:2c:38: f9:fa:73:92:1e:00:ef:e4:d9:2d:32:b0:04:3d:c4:57:4f:06: 5d:d4:64:c6:6c:93:61:8d:bf:9e:a7:db:e1:db:58:db:76:5d: 56:e3:0c:b9:f1:c9:63:73:d8:b3:af:e5:34:9b:1a:df:2a:20: b5:45:f5:86:c2:1e:06:6d:e8:56:f1:23:88:4c:12:90:38:11: dd:eb:06:62:6a:1a:dd:f3:5d:ef:3d:e0:13:e0:2b:df:0a:27: 8f:9a:4f:da:40:a2:7a:72:45:a1:1c:52:ed:67:4a:19:93:4a: af:5f:c6:2b:0c:11:5c:9e:b0:54:1c:2f:c0:86:ff:5d:e8:5d: 19:09:57:17:c8:17:ce:c2:5b:fb:87:56:9c:94:f4:f9:18:23: 58:67:e7:f4:1f:86:d7:d4:01:fa:2f:6b:81:46:58:b5:0a:c3: 9c:8f:93:fd:f8:6a:5f:25:b4:cc:4b:13:63:39:ab:b6:48:7e: 64:ff:2c:b4:cd:7b:c8:20:33:26:71:fa:87:79:e3:27:7c:da: e6:ac:7b:b8:8e:9d:d2:8a:b5:81:af:57:b6:d3:eb:d2:c8:b2: 3a:d0:93:42 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUOUpQfsx/2b/b1TbiAiusMFu0gXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjUwOTI4MjlaFw0yNjExMjQwOTMzMjlaMDMxMTAvBgNV BAMTKDU5MDZDNTg5Mjk2NUE4RkNERTZEMEIyNkQxRDBFQzk5NkVFOUVFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/rstt9h+UXmNyMOG+LMBumJd qrb72Fi6XMTpxoz2o5nV+DRJSpO35QsyMZe+mQ+MQ35ETYhZ+tGY9YNAiQAtxZJ5 cmURvOSJEv9u9alDlu75eA5HP/8LvqtZz2iPa4Scavi5f5pAybGyBg+uImzg6bzb TAmrQlM5HlALtYDvNChhAx7bIT5S8XbrhcaS0t87pY6k+CW4GAErHTbSvAxD1HTE iYRhFWfXCnas/L17rrhpi5JZ1eWtepe/fTL5b+dGgkNRb8XMrWllxi5KMSs1qwy0 +DW+SAg7gyw9jbtJSOZBCL4haKPeRz+oSU+raW22ivnK1RyHyKpDBxH/Jdn/AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUWQbFiSllqPzebQsm0dDsmW7p7q8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQwODEzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUiao AwQAUibIMA0GCSqGSIb3DQEBCwUAA4IBAQA6LlkhTHjCMQLIW/JuPkfzH70mD+3u P8QzMn/i5xMTk8spLDj5+nOSHgDv5NktMrAEPcRXTwZd1GTGbJNhjb+ep9vh21jb dl1W4wy58cljc9izr+U0mxrfKiC1RfWGwh4GbehW8SOITBKQOBHd6wZiahrd813v PeAT4CvfCiePmk/aQKJ6ckWhHFLtZ0oZk0qvX8YrDBFcnrBUHC/Ahv9d6F0ZCVcX yBfOwlv7h1aclPT5GCNYZ+f0H4bX1AH6L2uBRli1CsOcj5P9+GpfJbTMSxNjOau2 SH5k/yy0zXvIIDMmcfqHeeMnfNrmrHu4jp3SirWBr1e20+vSyLI60JNC -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:59 2025 by rpki-client