This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa File: AS199524.roa (raw, json) Hash identifier: Qwnwo2t/hzjl7OqIuf1inccOnTmFjfXX6EBPih+l2kU= Subject key identifier: 86:A7:C7:5C:5A:4F:BE:28:01:8F:54:20:C8:50:B8:D3:B6:E7:7A:25 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3483A04533554490E14C9B74229B30A565E8B29E Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa Signing time: Thu 06 Nov 2025 13:19:27 +0000 ROA not before: Thu 06 Nov 2025 13:14:27 +0000 ROA not after: Thu 05 Nov 2026 13:19:27 +0000 asID: 199524 IP address blocks: 82.25.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:83:a0:45:33:55:44:90:e1:4c:9b:74:22:9b:30:a5:65:e8:b2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 6 13:14:27 2025 GMT Not After : Nov 5 13:19:27 2026 GMT Subject: CN=86A7C75C5A4FBE28018F5420C850B8D3B6E77A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:9f:5c:4c:5e:a5:af:e6:b0:92:c9:20:0a: cc:7f:16:6d:9c:f1:52:30:c3:5e:db:40:ec:5d:ae: 2c:f7:55:82:bb:1c:bb:61:65:4a:d6:c1:2d:4c:95: 5a:02:f9:7c:54:58:ed:a0:65:35:61:03:a3:10:b1: 1c:3f:fb:82:91:ff:4b:5e:d1:9b:73:57:7b:57:b7: e7:9c:8b:b4:33:7a:ce:1c:f9:0c:48:fd:43:3f:2f: 93:a0:40:ab:14:7e:1d:57:fc:3d:f9:e6:7c:40:20: 0f:61:8d:14:88:91:52:56:16:99:e3:c0:9a:31:65: a6:30:31:97:34:24:00:6d:d8:44:16:06:d3:19:47: 49:88:fd:51:d8:70:17:2c:20:04:7e:98:07:3c:df: 84:2a:b9:91:6d:8d:7f:7d:28:51:a1:b3:bc:d7:92: c7:fb:24:41:cd:cb:1f:3b:90:f7:0d:d5:9f:29:45: 77:11:bb:40:ea:a6:84:01:dc:5f:cf:b0:47:3b:4d: 77:e6:76:c4:03:f6:c5:44:ae:d6:68:9b:66:3f:6f: 0f:6e:16:60:eb:50:32:d2:c3:2b:c2:58:c7:f8:f0: 23:0f:5b:a8:c7:cb:0d:f1:00:c0:d5:3e:97:7f:aa: 55:d5:b0:3d:ac:a2:dd:d2:d8:6b:cd:c0:fa:7e:08: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A7:C7:5C:5A:4F:BE:28:01:8F:54:20:C8:50:B8:D3:B6:E7:7A:25 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.36.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ac:bc:23:20:a6:98:6b:f6:20:b9:e9:47:06:b2:f7:1e:79: 79:0b:14:9c:a1:8b:7d:42:08:ec:34:f4:1e:13:a6:12:29:13: a0:99:0b:29:83:d3:e2:92:99:a4:da:32:d6:21:d4:fc:77:f8: d0:15:d9:1b:6b:a1:7b:eb:98:c9:9a:8c:5d:66:e6:74:5c:a9: f8:19:7b:f6:04:34:90:21:73:24:1a:be:5a:dd:6d:7f:07:8b: 65:90:2d:5a:60:c4:9c:af:c4:13:c8:38:c9:94:a2:17:78:8e: 71:94:79:d5:33:26:91:8b:94:a1:c8:d5:cd:34:c0:6b:c3:23: b6:a1:cd:bd:73:54:b5:a2:9a:90:dc:72:bf:1b:58:c8:c7:ad: cb:36:94:2e:ac:2d:b7:22:38:cb:cb:a1:56:c6:d1:87:e5:61: 67:33:7a:90:3c:65:c3:fb:35:2b:dd:8a:19:54:ec:22:27:ac: 98:0d:38:05:a9:39:6b:6e:eb:e2:ad:8a:6d:bf:bc:5e:f2:da: b7:61:ff:29:a8:be:c9:d1:dd:ef:91:77:b7:94:1d:34:5f:ed: 3e:66:a0:71:b7:1b:fa:bd:63:ba:18:55:3e:a1:8f:f5:6e:51: 9a:a7:25:f1:d3:ef:fa:fe:64:1c:d4:37:0a:48:5b:3d:18:c8: 79:04:af:17 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUNIOgRTNVRJDhTJt0IpswpWXosp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDYxMzE0MjdaFw0yNjExMDUxMzE5MjdaMDMxMTAvBgNV BAMTKDg2QTdDNzVDNUE0RkJFMjgwMThGNTQyMEM4NTBCOEQzQjZFNzdBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrJ9cTF6lr+awkskgCsx/Fm2c 8VIww17bQOxdriz3VYK7HLthZUrWwS1MlVoC+XxUWO2gZTVhA6MQsRw/+4KR/0te 0ZtzV3tXt+eci7Qzes4c+QxI/UM/L5OgQKsUfh1X/D355nxAIA9hjRSIkVJWFpnj wJoxZaYwMZc0JABt2EQWBtMZR0mI/VHYcBcsIAR+mAc834QquZFtjX99KFGhs7zX ksf7JEHNyx87kPcN1Z8pRXcRu0DqpoQB3F/PsEc7TXfmdsQD9sVErtZom2Y/bw9u FmDrUDLSwyvCWMf48CMPW6jHyw3xAMDVPpd/qlXVsD2sot3S2GvNwPp+CBFlAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUhqfHXFpPvigBj1QgyFC407bneiUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5NTI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhkk MA0GCSqGSIb3DQEBCwUAA4IBAQBSrLwjIKaYa/YguelHBrL3Hnl5CxScoYt9Qgjs NPQeE6YSKROgmQspg9Pikpmk2jLWIdT8d/jQFdkba6F765jJmoxdZuZ0XKn4GXv2 BDSQIXMkGr5a3W1/B4tlkC1aYMScr8QTyDjJlKIXeI5xlHnVMyaRi5ShyNXNNMBr wyO2oc29c1S1opqQ3HK/G1jIx63LNpQurC23IjjLy6FWxtGH5WFnM3qQPGXD+zUr 3YoZVOwiJ6yYDTgFqTlrbuvirYptv7xe8tq3Yf8pqL7J0d3vkXe3lB00X+0+ZqBx txv6vWO6GFU+oY/1blGapyXx0+/6/mQc1DcKSFs9GMh5BK8X -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client