This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS18046.roa File: AS18046.roa (raw, json) Hash identifier: AO/qYz5XTDGC/47SwfnU3MTGcyLZe+MrDTGQtI5qDhg= Subject key identifier: 6B:D5:71:C3:BC:5D:DC:56:8D:25:2E:47:61:E8:74:55:58:18:1B:41 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4284A496EC3D1EDDD326E296B6F54636A7AEF22D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS18046.roa Signing time: Wed 26 Nov 2025 14:22:37 +0000 ROA not before: Wed 26 Nov 2025 14:17:37 +0000 ROA not after: Wed 25 Nov 2026 14:22:37 +0000 asID: 18046 IP address blocks: 82.41.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:84:a4:96:ec:3d:1e:dd:d3:26:e2:96:b6:f5:46:36:a7:ae:f2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 14:17:37 2025 GMT Not After : Nov 25 14:22:37 2026 GMT Subject: CN=6BD571C3BC5DDC568D252E4761E8745558181B41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:a3:b9:69:01:89:7d:7e:32:a8:53:f6:f1: c3:79:16:21:6b:8d:c9:21:3f:fc:db:d3:4b:82:a2: f5:c7:d2:59:84:04:0a:91:7f:7f:5a:67:de:d0:ff: e0:20:06:f5:83:9b:65:de:fc:dc:f4:da:2b:53:2a: d2:11:c9:23:82:35:53:e3:33:bc:33:b7:39:42:7c: 08:00:aa:59:df:00:f3:64:7c:90:7c:f7:91:d8:2d: 51:a7:41:56:19:3d:ff:30:97:d6:45:2f:ba:b0:c0: e4:36:d3:97:53:b7:5e:f1:ef:c4:c0:bf:f4:19:f3: 7a:5c:f7:fd:c2:f2:b0:00:15:3b:b8:48:e3:51:cf: 02:14:4f:8a:4c:ee:12:79:b9:44:05:d2:11:6c:f0: ce:1a:b2:47:b7:b1:6b:39:e4:72:93:7f:a3:c8:d3: b8:90:38:ce:05:aa:73:94:15:b8:1f:85:f3:f0:cd: 7a:45:4d:4a:06:63:48:21:0d:e7:5c:49:71:71:53: 89:8a:7e:79:cb:d2:c6:3d:c2:26:52:da:bb:ec:e9: 82:c2:43:79:45:87:e3:dd:81:60:ef:b7:82:8d:a8: 4c:2d:ae:68:d9:71:08:cd:c9:c7:79:9f:0f:96:91: 87:3b:b0:e3:a7:30:c3:1d:42:19:ad:97:9c:0b:02: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:71:C3:BC:5D:DC:56:8D:25:2E:47:61:E8:74:55:58:18:1B:41 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS18046.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.128.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:2b:9e:4c:b1:4a:59:21:8f:e2:51:01:d1:59:69:ca:7f:2f: d1:2e:63:22:08:16:17:fe:d9:d1:30:28:da:22:f8:77:4a:97: a8:15:c7:f3:71:13:5a:28:6f:f4:d6:0b:d5:ff:f2:ea:ac:a1: 37:37:3e:91:77:53:fb:03:61:7c:c7:6e:e1:d7:07:88:e3:10: be:e5:18:f7:f2:1e:af:7f:73:be:8a:0a:c7:52:4b:ea:fc:1b: 46:b5:33:ea:25:86:e2:03:52:6b:29:d1:ef:a6:9f:fb:ff:5c: bc:26:82:1c:d1:a0:d6:8c:f7:29:c8:4d:ed:37:70:d4:ae:ec: ab:d5:57:ad:4c:51:f3:b1:ee:ea:b0:a9:a0:84:a2:9e:71:bf: da:71:c7:03:ee:66:a6:f2:b9:6a:2b:02:ec:1f:b4:02:a2:f8: c3:ee:89:b8:f0:9c:d5:7f:0b:56:6f:a2:35:9b:48:b1:2a:b9: 53:f8:bb:b6:e2:0e:fe:b9:55:05:f0:7a:cc:d2:d6:94:b0:cf: 7b:25:65:42:8e:38:58:ec:5c:13:44:99:27:dc:e1:f1:45:6c: 6c:42:a4:f3:1a:55:c2:44:f2:aa:56:af:35:df:cc:6f:91:4c: 63:4a:f7:1e:64:da:46:a8:3f:32:fe:e3:07:e2:99:be:c7:2a: c2:4b:80:7e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUQoSkluw9Ht3TJuKWtvVGNqeu8i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYxNDE3MzdaFw0yNjExMjUxNDIyMzdaMDMxMTAvBgNV BAMTKDZCRDU3MUMzQkM1RERDNTY4RDI1MkU0NzYxRTg3NDU1NTgxODFCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDqO5aQGJfX4yqFP28cN5FiFr jckhP/zb00uCovXH0lmEBAqRf39aZ97Q/+AgBvWDm2Xe/Nz02itTKtIRySOCNVPj M7wztzlCfAgAqlnfAPNkfJB895HYLVGnQVYZPf8wl9ZFL7qwwOQ205dTt17x78TA v/QZ83pc9/3C8rAAFTu4SONRzwIUT4pM7hJ5uUQF0hFs8M4aske3sWs55HKTf6PI 07iQOM4FqnOUFbgfhfPwzXpFTUoGY0ghDedcSXFxU4mKfnnL0sY9wiZS2rvs6YLC Q3lFh+PdgWDvt4KNqEwtrmjZcQjNycd5nw+WkYc7sOOnMMMdQhmtl5wLApsdAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUa9Vxw7xd3FaNJS5HYeh0VVgYG0EwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTgwNDYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARSKYAw DQYJKoZIhvcNAQELBQADggEBACsrnkyxSlkhj+JRAdFZacp/L9EuYyIIFhf+2dEw KNoi+HdKl6gVx/NxE1oob/TWC9X/8uqsoTc3PpF3U/sDYXzHbuHXB4jjEL7lGPfy Hq9/c76KCsdSS+r8G0a1M+olhuIDUmsp0e+mn/v/XLwmghzRoNaM9ynITe03cNSu 7KvVV61MUfOx7uqwqaCEop5xv9pxxwPuZqbyuWorAuwftAKi+MPuibjwnNV/C1Zv ojWbSLEquVP4u7biDv65VQXweszS1pSwz3slZUKOOFjsXBNEmSfc4fFFbGxCpPMa VcJE8qpWrzXfzG+RTGNK9x5k2kaoPzL+4wfimb7HKsJLgH4= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:00 2025 by rpki-client