This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa File: AS198825.roa (raw, json) Hash identifier: lptVRNV4ei+Js7wUk4+hqDcFNaM1N1VwrLoHF7ehX5s= Subject key identifier: B4:4E:30:EE:94:76:6A:5E:50:FA:DB:0A:B1:A6:91:04:D0:2D:CD:97 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 641C6BE4ED82F2A22CCA15BBBE2050B3DFAA58B1 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa Signing time: Fri 07 Nov 2025 20:19:55 +0000 ROA not before: Fri 07 Nov 2025 20:14:55 +0000 ROA not after: Fri 06 Nov 2026 20:19:55 +0000 asID: 198825 IP address blocks: 82.22.7.0/24 maxlen: 24 82.22.16.0/24 maxlen: 24 82.22.77.0/24 maxlen: 24 82.26.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1c:6b:e4:ed:82:f2:a2:2c:ca:15:bb:be:20:50:b3:df:aa:58:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 7 20:14:55 2025 GMT Not After : Nov 6 20:19:55 2026 GMT Subject: CN=B44E30EE94766A5E50FADB0AB1A69104D02DCD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:cb:ba:a1:c4:c7:8b:7e:64:5c:64:e7:93: cc:cd:85:fa:e6:10:e1:45:8d:1d:33:dc:7f:bc:9a: bc:b0:95:59:fc:34:63:40:5e:54:b4:1a:3b:3d:0b: 22:5b:bb:98:e4:80:a8:b3:2c:bd:e0:e1:39:02:4c: f1:10:fe:32:5c:e3:a5:d3:9d:13:00:67:fa:94:c0: 86:af:cd:2e:f4:b8:16:39:0c:b1:68:7e:be:68:96: 47:df:ef:d0:22:cc:7b:03:3e:20:d4:5d:43:a7:91: 61:3e:9b:bd:46:13:de:d3:79:b6:7f:84:e9:39:a9: 47:50:4f:9e:bd:18:72:d2:70:3f:c3:b6:0e:d2:1f: 3e:b0:e7:54:5a:30:06:ea:3f:82:6b:c2:64:64:c6: 01:cd:1d:07:62:6f:55:fe:ef:1e:4a:70:d0:54:13: a3:9a:b2:52:a8:92:d6:0c:d0:2d:a4:30:2e:1d:a6: cf:31:5a:e9:cd:31:30:bb:ea:33:ad:98:aa:11:d1: 76:ff:75:1c:19:18:6d:49:26:26:84:21:11:ad:fb: c8:45:31:bb:0f:07:21:7d:c5:b9:22:65:5a:df:ea: 90:9a:e3:3c:95:57:ab:ca:ae:6e:ce:5e:ae:53:b2: 02:ce:bb:51:4b:0b:c4:ad:3a:eb:8a:cf:db:d1:ff: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:30:EE:94:76:6A:5E:50:FA:DB:0A:B1:A6:91:04:D0:2D:CD:97 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.7.0/24 82.22.16.0/24 82.22.77.0/24 82.26.157.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:f5:8f:f0:e7:e1:cf:bd:39:94:84:6a:89:0a:8d:1c:eb:aa: c9:59:2c:a9:67:19:cc:e8:9d:b3:c5:e3:e5:e9:02:c8:4c:b5: 7d:62:7f:a6:7d:69:bb:aa:5f:81:4a:ff:4e:55:dd:84:73:69: e2:f7:03:9a:66:00:e6:1d:be:09:4f:39:0f:d4:aa:98:c4:8c: 1b:59:82:b1:b3:73:a7:a5:e5:5b:69:8c:9d:0c:49:86:4f:60: f3:db:99:f6:d1:69:87:f3:da:9e:fd:09:58:d6:bf:93:0e:86: 94:e6:9d:0b:62:c5:91:6a:46:d1:84:69:12:d9:a5:62:90:35: a5:46:7a:d7:ca:ce:eb:01:be:67:98:57:36:38:16:41:fa:86: 63:78:af:e6:1a:5a:4c:1d:e1:d6:e6:7a:a4:46:68:86:2e:23: 43:ad:ef:8e:dc:4c:46:e5:49:4e:ed:bc:39:81:cb:2b:b6:4d: 00:c1:77:00:47:99:29:c2:25:8f:38:4e:fa:47:57:53:1e:c1: 2c:f8:76:f3:ee:0e:56:2f:2e:65:89:a1:bb:3b:4c:32:1a:f2: 3c:a9:8b:cb:e1:01:42:fd:48:f6:4b:7e:6e:eb:e5:6d:c3:ae: 9e:bf:3b:94:4b:27:a9:d1:b2:45:25:e0:f0:e6:36:27:e7:3b: 20:3a:72:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUZBxr5O2C8qIsyhW7viBQs9+qWLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDcyMDE0NTVaFw0yNjExMDYyMDE5NTVaMDMxMTAvBgNV BAMTKEI0NEUzMEVFOTQ3NjZBNUU1MEZBREIwQUIxQTY5MTA0RDAyRENEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbY8u6ocTHi35kXGTnk8zNhfrm EOFFjR0z3H+8mrywlVn8NGNAXlS0Gjs9CyJbu5jkgKizLL3g4TkCTPEQ/jJc46XT nRMAZ/qUwIavzS70uBY5DLFofr5olkff79AizHsDPiDUXUOnkWE+m71GE97TebZ/ hOk5qUdQT569GHLScD/Dtg7SHz6w51RaMAbqP4JrwmRkxgHNHQdib1X+7x5KcNBU E6OaslKoktYM0C2kMC4dps8xWunNMTC76jOtmKoR0Xb/dRwZGG1JJiaEIRGt+8hF MbsPByF9xbkiZVrf6pCa4zyVV6vKrm7OXq5TsgLOu1FLC8StOuuKz9vR/9CjAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUtE4w7pR2al5Q+tsKsaaRBNAtzZcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk4ODI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUhYH AwQAUhYQAwQAUhZNAwQAUhqdMA0GCSqGSIb3DQEBCwUAA4IBAQCa9Y/w5+HPvTmU hGqJCo0c66rJWSypZxnM6J2zxePl6QLITLV9Yn+mfWm7ql+BSv9OVd2Ec2ni9wOa ZgDmHb4JTzkP1KqYxIwbWYKxs3OnpeVbaYydDEmGT2Dz25n20WmH89qe/QlY1r+T DoaU5p0LYsWRakbRhGkS2aVikDWlRnrXys7rAb5nmFc2OBZB+oZjeK/mGlpMHeHW 5nqkRmiGLiNDre+O3ExG5UlO7bw5gcsrtk0AwXcAR5kpwiWPOE76R1dTHsEs+Hbz 7g5WLy5liaG7O0wyGvI8qYvL4QFC/Uj2S35u6+Vtw66evzuUSyep0bJFJeDw5jYn 5zsgOnJl -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:59 2025 by rpki-client