This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141585.roa File: AS141585.roa (raw, json) Hash identifier: 4DHRP2hr8oDf6QCnsS0qiH4b7xdBCQMOB2ti/C8cY0k= Subject key identifier: 85:D6:93:32:46:6E:77:42:B3:8F:D2:1D:02:60:9F:95:61:0B:28:21 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6274614BEFB288EB78942C5032339EEAC7D59748 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141585.roa Signing time: Fri 14 Nov 2025 06:44:44 +0000 ROA not before: Fri 14 Nov 2025 06:39:44 +0000 ROA not after: Fri 13 Nov 2026 06:44:44 +0000 asID: 141585 IP address blocks: 82.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:74:61:4b:ef:b2:88:eb:78:94:2c:50:32:33:9e:ea:c7:d5:97:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 14 06:39:44 2025 GMT Not After : Nov 13 06:44:44 2026 GMT Subject: CN=85D69332466E7742B38FD21D02609F95610B2821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:7d:97:76:86:a7:0c:e1:f8:e5:ff:66:01: 52:ed:df:b0:2a:80:bf:83:21:62:2f:f4:94:c3:03: 67:94:2b:48:af:f6:8b:cc:88:5b:f2:05:cd:f7:40: de:03:52:45:c8:08:92:33:2b:c3:11:ad:1b:66:11: 96:49:6e:43:a6:b1:bf:36:d6:7b:cc:f3:f2:ef:b4: 4c:57:66:16:99:1d:af:60:b2:2d:57:18:c0:f1:e3: f4:93:0d:fe:2c:cd:07:9b:10:b4:43:1d:39:e1:b9: 99:d8:9b:94:1c:92:68:0f:ba:55:5c:9d:69:57:1e: 5d:3f:c4:38:c1:f5:11:8a:c0:da:10:89:f8:02:19: d6:d6:ff:36:f2:80:6c:cd:a8:88:13:11:dd:d2:2d: 0b:b9:bb:45:33:5f:76:b6:43:a1:2c:49:99:f6:b9: 79:39:7b:20:37:3a:a2:49:25:72:85:81:0c:2e:b9: 35:97:ce:ea:3e:15:28:d0:21:8b:80:3d:f6:5b:21: 7a:31:74:8d:ae:e1:3b:f3:32:ba:1f:ab:96:fe:bf: 35:85:d0:64:8f:57:43:4b:6a:65:e8:88:56:ab:57: b1:a3:25:ca:fc:72:bf:cd:c4:b8:7d:44:c4:76:1b: 80:da:e0:ff:aa:5e:5c:ed:48:0e:e5:d5:05:d9:3b: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:93:32:46:6E:77:42:B3:8F:D2:1D:02:60:9F:95:61:0B:28:21 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.3.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:a0:dd:5a:56:36:b0:b2:80:77:6c:34:cf:53:fb:f4:63:75: 0c:01:42:4c:79:88:0c:24:80:66:a9:db:88:7b:ed:52:b0:1e: aa:41:54:ec:31:aa:c6:b8:2a:44:e5:f1:00:c3:e7:a4:2f:9c: 08:aa:72:5d:64:62:2a:f7:f2:32:8a:03:94:04:33:fa:6d:79: 63:80:fe:8d:3f:51:01:89:1c:2b:24:d4:5d:aa:94:88:fc:15: d6:dc:81:79:65:11:98:8c:76:54:b5:e4:fb:2e:2b:ce:cb:d3: 3b:7d:56:63:7e:e6:3a:a9:f3:39:95:ae:ad:d3:2d:e5:11:70: 72:8d:b3:99:1f:df:cd:b1:28:a4:44:86:6b:0c:e0:47:85:80: 23:c9:80:0a:e7:af:97:cd:d5:85:32:63:3b:cf:fe:fc:4d:bd: f1:28:d0:c0:9f:0f:e7:78:a5:27:90:e4:0d:ab:11:f2:d8:ec: 1c:c8:57:a7:e0:8d:5b:a8:54:9f:86:2a:b4:a4:0f:07:7e:4f: 53:1a:68:28:a9:b7:5f:83:fb:b7:93:13:70:bb:6b:f4:d0:6f: 63:b1:8c:1e:be:48:d5:f6:ec:5e:96:c8:d9:d0:b6:02:da:ac: cf:65:6e:0b:76:ae:d2:e8:35:4a:33:d9:12:17:17:23:c3:b0: 69:09:02:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUYnRhS++yiOt4lCxQMjOe6sfVl0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTQwNjM5NDRaFw0yNjExMTMwNjQ0NDRaMDMxMTAvBgNV BAMTKDg1RDY5MzMyNDY2RTc3NDJCMzhGRDIxRDAyNjA5Rjk1NjEwQjI4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0B32XdoanDOH45f9mAVLt37Aq gL+DIWIv9JTDA2eUK0iv9ovMiFvyBc33QN4DUkXICJIzK8MRrRtmEZZJbkOmsb82 1nvM8/LvtExXZhaZHa9gsi1XGMDx4/STDf4szQebELRDHTnhuZnYm5QckmgPulVc nWlXHl0/xDjB9RGKwNoQifgCGdbW/zbygGzNqIgTEd3SLQu5u0UzX3a2Q6EsSZn2 uXk5eyA3OqJJJXKFgQwuuTWXzuo+FSjQIYuAPfZbIXoxdI2u4TvzMrofq5b+vzWF 0GSPV0NLamXoiFarV7GjJcr8cr/NxLh9RMR2G4Da4P+qXlztSA7l1QXZO/PpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUhdaTMkZud0Kzj9IdAmCflWELKCEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQxNTg1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiYD MA0GCSqGSIb3DQEBCwUAA4IBAQAroN1aVjawsoB3bDTPU/v0Y3UMAUJMeYgMJIBm qduIe+1SsB6qQVTsMarGuCpE5fEAw+ekL5wIqnJdZGIq9/IyigOUBDP6bXljgP6N P1EBiRwrJNRdqpSI/BXW3IF5ZRGYjHZUteT7LivOy9M7fVZjfuY6qfM5la6t0y3l EXByjbOZH9/NsSikRIZrDOBHhYAjyYAK56+XzdWFMmM7z/78Tb3xKNDAnw/neKUn kOQNqxHy2OwcyFen4I1bqFSfhiq0pA8Hfk9TGmgoqbdfg/u3kxNwu2v00G9jsYwe vkjV9uxelsjZ0LYC2qzPZW4Ldq7S6DVKM9kSFxcjw7BpCQLg -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:59 2025 by rpki-client