This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141968.roa File: AS141968.roa (raw, json) Hash identifier: LdfonJWltIN2kJnL+43MAm66aEaEYilrrJUJw3usFb8= Subject key identifier: 65:92:42:AC:A8:91:59:56:57:6E:DD:6A:59:A2:C9:C8:EF:F7:D7:83 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 24948B3033E7433585336D324DC2991F0A8DB9DD Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141968.roa Signing time: Fri 07 Nov 2025 05:52:54 +0000 ROA not before: Fri 07 Nov 2025 05:47:54 +0000 ROA not after: Fri 06 Nov 2026 05:52:54 +0000 asID: 141968 IP address blocks: 82.25.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:94:8b:30:33:e7:43:35:85:33:6d:32:4d:c2:99:1f:0a:8d:b9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 7 05:47:54 2025 GMT Not After : Nov 6 05:52:54 2026 GMT Subject: CN=659242ACA8915956576EDD6A59A2C9C8EFF7D783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:a5:94:cd:e5:9b:f1:93:46:6a:b9:56:7f: 12:5e:2a:20:1c:73:73:80:b8:81:fe:84:d6:38:20: 38:f4:0c:f5:8d:bf:63:bf:7a:85:68:e6:2c:83:d8: 97:e9:33:f0:98:5b:a2:e4:3f:39:03:3b:a4:b1:96: c1:8b:fe:f6:11:51:e0:d1:9b:91:39:4a:8d:d2:d4: 35:3a:52:6e:73:2f:80:d5:00:4a:57:c2:4b:ac:bf: 5a:1d:d8:1a:df:24:b1:56:01:a2:b3:d2:18:66:de: 4f:c7:ce:ba:f9:6e:2f:7e:fd:cf:0b:d5:ac:68:83: a3:f3:43:08:c5:36:fd:8c:88:1e:53:6f:1b:97:87: fd:f1:49:32:9c:9b:27:29:bf:50:49:9f:fd:25:b3: 04:29:f7:a2:b0:ed:94:d2:ec:90:83:d0:37:03:af: af:12:9a:5c:6f:2d:73:ce:ec:77:60:7c:25:60:bf: ae:6b:2b:ef:5a:07:3f:c3:01:4a:2e:b0:66:22:3a: 68:3b:f7:b3:61:d8:05:14:0d:6c:8e:82:bb:dd:b7: 06:e6:02:47:86:c7:42:e2:54:4c:52:24:72:64:70: 5c:bc:17:04:1a:fb:97:9b:78:09:f0:22:fc:e0:32: 35:1a:65:e7:a7:1f:91:3f:3e:36:b2:1c:ef:e5:c1: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:42:AC:A8:91:59:56:57:6E:DD:6A:59:A2:C9:C8:EF:F7:D7:83 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS141968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.62.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:5f:11:9d:d6:a5:c6:26:e6:b1:fc:ac:c2:21:b2:5e:ec:f2: 3c:cb:39:41:ca:7e:f0:e6:cf:02:b5:f7:f7:c0:5f:3e:5f:f1: 01:03:12:2e:46:fc:f3:c9:6a:ef:23:2d:d2:83:ab:ba:9f:0c: fe:1b:bf:ce:f7:54:9a:94:b0:36:c6:31:38:1c:50:88:13:2b: 6a:e5:89:e5:05:c5:31:c0:48:83:5d:01:44:c1:01:ba:bf:c4: c7:82:fd:48:02:f5:ff:8a:8d:54:58:88:b6:94:d6:fa:13:c7: 31:9e:a6:8f:de:8a:fe:e7:54:ce:8a:03:72:46:82:e7:49:46: eb:49:15:dc:d4:46:8d:ea:13:1b:2e:3f:85:1b:0d:ec:00:d6: 47:d3:98:f6:6e:91:7c:9c:07:06:7b:57:f0:f0:5f:b7:86:b5: 08:81:99:1d:e4:e4:89:a6:9a:f4:e9:71:0a:a5:f9:c2:27:61: 0c:4d:33:67:6b:48:9f:5a:a4:5e:bf:dd:bb:be:5a:78:9e:eb: 55:28:42:8b:8d:66:03:4c:60:e5:a6:6e:12:f1:c4:b5:9e:fd: 16:0d:bb:d3:60:63:ec:0c:37:c5:f4:3a:a2:9a:2d:13:01:0f: b3:e2:0b:39:f3:26:87:8f:39:83:5d:94:ff:1c:f1:e1:e7:2e: ee:84:67:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUJJSLMDPnQzWFM20yTcKZHwqNud0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDcwNTQ3NTRaFw0yNjExMDYwNTUyNTRaMDMxMTAvBgNV BAMTKDY1OTI0MkFDQTg5MTU5NTY1NzZFREQ2QTU5QTJDOUM4RUZGN0Q3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoKWUzeWb8ZNGarlWfxJeKiAc c3OAuIH+hNY4IDj0DPWNv2O/eoVo5iyD2JfpM/CYW6LkPzkDO6SxlsGL/vYRUeDR m5E5So3S1DU6Um5zL4DVAEpXwkusv1od2BrfJLFWAaKz0hhm3k/Hzrr5bi9+/c8L 1axog6PzQwjFNv2MiB5TbxuXh/3xSTKcmycpv1BJn/0lswQp96Kw7ZTS7JCD0DcD r68SmlxvLXPO7HdgfCVgv65rK+9aBz/DAUousGYiOmg797Nh2AUUDWyOgrvdtwbm AkeGx0LiVExSJHJkcFy8FwQa+5ebeAnwIvzgMjUaZeenH5E/PjayHO/lwc49AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZZJCrKiRWVZXbt1qWaLJyO/314MwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQxOTY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhk+ MA0GCSqGSIb3DQEBCwUAA4IBAQCOXxGd1qXGJuax/KzCIbJe7PI8yzlByn7w5s8C tff3wF8+X/EBAxIuRvzzyWrvIy3Sg6u6nwz+G7/O91SalLA2xjE4HFCIEytq5Ynl BcUxwEiDXQFEwQG6v8THgv1IAvX/io1UWIi2lNb6E8cxnqaP3or+51TOigNyRoLn SUbrSRXc1EaN6hMbLj+FGw3sANZH05j2bpF8nAcGe1fw8F+3hrUIgZkd5OSJppr0 6XEKpfnCJ2EMTTNna0ifWqRev927vlp4nutVKEKLjWYDTGDlpm4S8cS1nv0WDbvT YGPsDDfF9Dqimi0TAQ+z4gs58yaHjzmDXZT/HPHh5y7uhGeO -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:45 2025 by rpki-client