This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15287.roa File: AS15287.roa (raw, json) Hash identifier: YzV2loadcdv9aqByOGb2K5HfrB3vbdG7XNl35tpx488= Subject key identifier: 08:05:8C:FB:0A:53:97:27:40:0E:40:B5:24:E8:6A:7E:25:D8:92:F8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 20FEF932447B74236776FFBC0328934CF1E318A7 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15287.roa Signing time: Thu 20 Nov 2025 18:49:56 +0000 ROA not before: Thu 20 Nov 2025 18:44:56 +0000 ROA not after: Thu 19 Nov 2026 18:49:56 +0000 asID: 15287 IP address blocks: 82.38.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fe:f9:32:44:7b:74:23:67:76:ff:bc:03:28:93:4c:f1:e3:18:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 20 18:44:56 2025 GMT Not After : Nov 19 18:49:56 2026 GMT Subject: CN=08058CFB0A539727400E40B524E86A7E25D892F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:02:09:75:cf:82:30:a2:b9:c7:de:e7:b7: 35:e7:d6:74:c1:ab:7f:d6:42:b7:95:b3:52:2b:93: 2a:2c:8a:e9:23:79:64:c5:60:b9:f3:c9:22:54:72: 0a:ef:2a:6b:b2:05:ef:63:a4:11:2c:3b:e9:e3:75: d4:6b:42:e6:6e:1a:78:f6:0b:6b:28:8d:d2:76:6d: 46:b0:a4:e4:5a:a5:53:6e:26:f8:37:ef:eb:e4:73: b3:d6:d5:c8:44:78:04:d1:28:6f:bc:1e:78:5c:56: 1a:8c:90:6f:1e:92:8f:9f:2a:13:48:2b:19:aa:a3: 89:40:be:dc:77:0c:27:f3:d7:c2:62:60:d6:94:81: 4b:80:5d:6e:9f:0a:4c:9f:b6:ca:f2:2d:0f:5b:24: 4f:56:45:1a:91:38:01:60:5d:da:04:6f:90:c8:24: 33:4c:d6:03:74:51:f8:b8:66:65:e4:a4:73:c8:3b: 0f:ff:19:bc:4a:2b:f6:ee:41:48:f4:91:09:42:48: 19:3c:1d:5e:ed:8f:df:ec:58:9a:6f:07:73:3a:4f: 68:63:71:17:e7:27:f3:41:0f:16:a9:0e:f0:61:5b: a4:c3:e7:f7:ae:4e:4c:5c:b0:0d:f6:b9:91:dc:4c: 01:06:b9:d3:85:4b:1b:90:c7:d3:56:7f:0e:8b:5f: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:8C:FB:0A:53:97:27:40:0E:40:B5:24:E8:6A:7E:25:D8:92:F8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.116.0/22 Signature Algorithm: sha256WithRSAEncryption a0:89:d3:61:76:94:09:fc:30:fa:0b:f7:f8:0d:f0:61:f4:8c: d9:c3:48:e2:ff:7b:ec:0a:3e:29:96:01:e8:eb:2d:f9:4d:1c: c0:a1:27:b0:ed:f7:a7:0d:d5:66:a5:3c:5a:f1:a9:fa:6b:d4: e8:82:fe:19:24:53:cf:0e:a1:b3:fa:a3:f3:fe:d9:66:a5:5a: 7a:30:8c:d2:fc:9e:6c:22:68:e7:55:57:30:4b:6f:5e:12:0e: 39:02:7f:e4:86:e0:83:49:60:5f:8c:35:8a:b9:31:df:93:6d: 87:f7:d6:89:80:5d:2a:b2:ce:3d:e0:f1:ae:d3:ee:87:72:3f: 30:00:ca:63:3b:93:17:f5:95:6a:18:f6:b7:19:d2:17:33:4a: 76:aa:6c:68:bf:b9:4e:07:e5:fa:b3:48:63:26:56:b6:34:cf: ba:b9:4c:59:0e:cb:48:04:ce:b1:5a:29:99:9c:02:67:1e:f1: d4:ca:0c:73:4d:55:98:9e:96:f9:2f:58:34:a7:c5:54:b1:48: 60:62:28:ba:1b:97:77:42:13:94:74:5a:c5:e0:64:f0:2e:1e: a5:18:b6:2e:fc:7c:f8:f9:26:6f:12:52:d0:4e:24:a4:30:51: 34:c9:df:4d:67:19:96:1d:0c:54:90:18:c3:62:c7:af:3f:08: ae:90:7c:34 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUIP75MkR7dCNndv+8AyiTTPHjGKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjAxODQ0NTZaFw0yNjExMTkxODQ5NTZaMDMxMTAvBgNV BAMTKDA4MDU4Q0ZCMEE1Mzk3Mjc0MDBFNDBCNTI0RTg2QTdFMjVEODkyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EQIJdc+CMKK5x97ntzXn1nTB q3/WQreVs1IrkyosiukjeWTFYLnzySJUcgrvKmuyBe9jpBEsO+njddRrQuZuGnj2 C2sojdJ2bUawpORapVNuJvg37+vkc7PW1chEeATRKG+8HnhcVhqMkG8eko+fKhNI Kxmqo4lAvtx3DCfz18JiYNaUgUuAXW6fCkyftsryLQ9bJE9WRRqROAFgXdoEb5DI JDNM1gN0Ufi4ZmXkpHPIOw//GbxKK/buQUj0kQlCSBk8HV7tj9/sWJpvB3M6T2hj cRfnJ/NBDxapDvBhW6TD5/euTkxcsA32uZHcTAEGudOFSxuQx9NWfw6LX6WnAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUCAWM+wpTlydADkC1JOhqfiXYkvgwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUyODcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJSJnQw DQYJKoZIhvcNAQELBQADggEBAKCJ02F2lAn8MPoL9/gN8GH0jNnDSOL/e+wKPimW AejrLflNHMChJ7Dt96cN1WalPFrxqfpr1OiC/hkkU88OobP6o/P+2WalWnowjNL8 nmwiaOdVVzBLb14SDjkCf+SG4INJYF+MNYq5Md+TbYf31omAXSqyzj3g8a7T7ody PzAAymM7kxf1lWoY9rcZ0hczSnaqbGi/uU4H5fqzSGMmVrY0z7q5TFkOy0gEzrFa KZmcAmce8dTKDHNNVZielvkvWDSnxVSxSGBiKLobl3dCE5R0WsXgZPAuHqUYti78 fPj5Jm8SUtBOJKQwUTTJ301nGZYdDFSQGMNix68/CK6QfDQ= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client