This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20236.roa File: AS20236.roa (raw, json) Hash identifier: YpBMmdkqgAKD1zHj6HPp3mY6CkBqKUEHdjT4NNYeSms= Subject key identifier: C5:69:6D:23:74:9D:1C:F1:44:2F:CC:BE:92:EB:D4:49:47:96:BD:87 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 77B7EF99F88D1C9B79EB91CCADE48E7590ED6D13 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20236.roa Signing time: Tue 02 Dec 2025 16:17:50 +0000 ROA not before: Tue 02 Dec 2025 16:12:50 +0000 ROA not after: Tue 01 Dec 2026 16:17:50 +0000 asID: 20236 IP address blocks: 82.21.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b7:ef:99:f8:8d:1c:9b:79:eb:91:cc:ad:e4:8e:75:90:ed:6d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 16:12:50 2025 GMT Not After : Dec 1 16:17:50 2026 GMT Subject: CN=C5696D23749D1CF1442FCCBE92EBD4494796BD87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:f8:16:54:c8:74:a0:0b:5d:35:e3:63:4c: 0a:4f:c2:12:e5:b5:91:57:6c:8e:33:ec:01:58:48: e7:ff:c7:ad:e4:64:78:58:1e:40:33:4a:2a:b8:ed: 9a:8b:6c:bf:a6:d8:1a:3d:fb:4a:c7:d3:d5:4e:e3: 6a:25:9d:cf:86:28:a4:02:ac:6f:1f:c2:5f:55:5c: a0:47:b1:24:a4:44:0d:86:7a:e2:b5:d2:f4:1a:83: bd:5d:d1:d7:23:28:0a:ec:d6:13:5f:90:3e:2a:f1: 3f:e7:8b:e7:47:a0:7d:de:7d:5d:57:ee:52:e2:26: 42:e6:b7:dc:67:10:eb:31:32:a2:38:fb:1d:9b:ad: 57:9d:c8:32:2e:c8:5c:07:81:18:7d:ca:be:10:f7: 01:06:2b:be:38:8d:f3:d6:58:4d:c1:ba:b8:ea:a8: 25:88:b4:e5:18:fc:d9:2f:b3:e7:cd:5c:2c:c9:f7: 8f:c8:75:b7:8b:dd:4c:66:74:c2:3e:d5:13:34:82: 7f:f6:17:7a:cd:62:1e:27:1a:42:cf:53:95:a7:b0: 28:b6:82:d2:22:5a:b1:5a:b9:f0:12:fb:c8:90:9c: 78:8d:53:d6:bf:f7:27:5e:88:69:3d:89:31:9e:80: 47:f7:93:28:8d:37:7a:6a:1a:30:4c:a0:88:7d:34: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:69:6D:23:74:9D:1C:F1:44:2F:CC:BE:92:EB:D4:49:47:96:BD:87 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.125.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:92:bc:6d:a9:01:04:ba:8c:f8:c2:67:f0:2b:89:99:4c:1f: 70:e8:f5:04:43:d6:3e:8c:ba:7b:c8:f1:0f:84:50:9e:63:9a: f4:1d:fa:cd:18:c6:18:0a:23:01:e0:0f:6e:58:9f:07:1f:1d: ac:6a:0e:b4:f5:94:9e:72:54:0c:0f:e1:78:b1:ae:a6:23:c8: 08:6d:1f:e5:ae:17:85:1c:74:ff:d3:55:52:6c:fa:dd:2a:56: 6c:05:76:12:35:43:6c:6f:ef:3b:e6:f4:23:b5:77:67:77:6e: be:6d:2f:7a:40:17:ee:fd:b1:51:34:f7:be:1c:39:cb:42:73: b9:55:63:ef:9e:40:50:39:07:14:93:09:98:7f:3a:4c:d4:42: 11:82:64:07:83:0f:6e:22:8f:32:1a:71:4e:12:62:b9:49:48: c4:01:f8:a7:1e:12:1a:bd:f8:b9:7c:1a:c3:fc:ed:ec:63:1b: 91:25:1f:12:36:cf:0f:04:ea:99:41:8a:12:aa:c7:18:6c:e8: 61:a4:59:bf:58:aa:d2:c4:5f:ee:fb:b7:b9:0b:c3:48:17:76: d0:65:56:54:2c:1b:b9:1b:57:ff:d4:91:13:b5:f8:44:d1:9d: 33:a6:9e:77:39:54:72:dc:dd:3f:b6:7a:c0:d7:64:aa:a5:70: e3:b0:f8:19 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUd7fvmfiNHJt565HMreSOdZDtbRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIxNjEyNTBaFw0yNjEyMDExNjE3NTBaMDMxMTAvBgNV BAMTKEM1Njk2RDIzNzQ5RDFDRjE0NDJGQ0NCRTkyRUJENDQ5NDc5NkJEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCfgWVMh0oAtdNeNjTApPwhLl tZFXbI4z7AFYSOf/x63kZHhYHkAzSiq47ZqLbL+m2Bo9+0rH09VO42olnc+GKKQC rG8fwl9VXKBHsSSkRA2GeuK10vQag71d0dcjKArs1hNfkD4q8T/ni+dHoH3efV1X 7lLiJkLmt9xnEOsxMqI4+x2brVedyDIuyFwHgRh9yr4Q9wEGK744jfPWWE3Burjq qCWItOUY/Nkvs+fNXCzJ94/IdbeL3UxmdMI+1RM0gn/2F3rNYh4nGkLPU5WnsCi2 gtIiWrFaufAS+8iQnHiNU9a/9ydeiGk9iTGegEf3kyiNN3pqGjBMoIh9NOA3AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUxWltI3SdHPFEL8y+kuvUSUeWvYcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAyMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSFX0w DQYJKoZIhvcNAQELBQADggEBAB+SvG2pAQS6jPjCZ/AriZlMH3Do9QRD1j6MunvI 8Q+EUJ5jmvQd+s0YxhgKIwHgD25YnwcfHaxqDrT1lJ5yVAwP4XixrqYjyAhtH+Wu F4UcdP/TVVJs+t0qVmwFdhI1Q2xv7zvm9CO1d2d3br5tL3pAF+79sVE0974cOctC c7lVY++eQFA5BxSTCZh/OkzUQhGCZAeDD24ijzIacU4SYrlJSMQB+KceEhq9+Ll8 GsP87exjG5ElHxI2zw8E6plBihKqxxhs6GGkWb9YqtLEX+77t7kLw0gXdtBlVlQs G7kbV//UkRO1+ETRnTOmnnc5VHLc3T+2esDXZKqlcOOw+Bk= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:19 2025 by rpki-client