This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: z3aUpeibmvsp6hDpo25DXEjBP4kzF7YQlMgLNSdr2zE=
Subject key identifier: 27:65:A8:82:64:32:38:D0:43:BC:6F:2A:89:E1:BE:7B:E3:48:F4:A9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6022791E65F27231ED2AE9DC93CA5CCF7C6C2B99
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
Signing time: Fri 07 Nov 2025 06:58:26 +0000
ROA not before: Fri 07 Nov 2025 06:53:26 +0000
ROA not after: Fri 06 Nov 2026 06:58:26 +0000
asID: 202736
IP address blocks: 82.39.196.0/22 maxlen: 24
82.39.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Nov 2025 14:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:22:79:1e:65:f2:72:31:ed:2a:e9:dc:93:ca:5c:cf:7c:6c:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 7 06:53:26 2025 GMT
Not After : Nov 6 06:58:26 2026 GMT
Subject: CN=2765A882643238D043BC6F2A89E1BE7BE348F4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:ff:39:e0:a6:15:bc:1c:52:e9:be:77:b8:
e1:e4:f8:4d:1f:d6:41:65:da:e7:15:37:9b:ff:5b:
81:38:1b:85:89:b2:c5:d2:da:b9:1e:fc:e6:0f:d8:
1b:b4:dd:75:e9:7f:43:c9:8a:04:62:0a:08:6f:78:
90:3b:d7:3d:6b:62:2f:8c:01:d5:d7:82:cc:08:c7:
9c:13:e6:78:10:63:20:e3:f2:ff:ab:f8:df:3b:e5:
8f:8b:88:38:67:78:d5:57:6f:c6:74:e8:f3:de:f1:
da:50:4e:b7:8f:a7:90:0a:98:5f:96:44:71:7f:60:
47:ea:4d:5e:40:44:2c:d3:75:e2:b0:f6:dc:bd:44:
0e:e9:b7:a1:2f:9b:84:1d:45:be:2d:0c:7a:37:13:
e8:b1:e9:91:f9:fe:c4:19:3b:71:97:ec:11:b3:43:
fc:d2:dc:8f:78:07:63:5d:37:19:da:80:78:f0:a5:
cd:c6:37:f8:2c:fb:45:7c:9e:5c:83:79:f2:1c:98:
85:db:17:7c:d9:31:6c:75:3b:14:ff:bf:52:03:5c:
82:48:60:aa:74:ef:50:82:ee:ef:cd:48:6e:f8:29:
3b:6c:01:8e:d4:e5:27:3e:6e:00:bf:07:b7:48:9c:
4e:1d:33:8d:69:69:fa:13:0b:4b:59:b2:9b:f8:c9:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:A8:82:64:32:38:D0:43:BC:6F:2A:89:E1:BE:7B:E3:48:F4:A9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.196.0/22
82.39.248.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:68:ed:82:09:c5:9e:aa:da:18:b7:6a:3a:4f:00:7d:5b:6b:
19:49:32:f9:43:fe:6e:ac:9d:86:f7:6c:e4:f1:18:6d:98:5d:
3e:f1:1e:79:04:72:93:da:d3:b6:de:0a:40:3e:f9:00:03:4f:
8d:4f:37:9d:4a:63:43:45:dd:7b:c8:16:9a:bb:ba:a8:98:8a:
0e:b2:73:16:d6:83:36:88:67:22:4d:a8:94:83:59:5d:72:8e:
ac:52:24:d0:21:d7:25:d2:24:a8:9a:f1:5c:82:81:91:8f:7a:
a6:72:2b:91:80:3f:77:b5:53:45:a1:7c:72:76:be:89:59:9a:
a0:75:06:5e:e5:de:11:a2:b2:03:be:27:b4:e8:44:92:3f:db:
49:8a:5a:d9:5d:8c:a1:76:14:6a:27:29:8d:ed:d5:75:18:cd:
f7:73:20:71:f1:57:d4:5b:3a:ca:e8:98:36:49:37:68:73:a9:
6a:ed:56:c8:05:97:a3:84:4d:1e:08:3d:78:9e:25:e3:9e:09:
38:cd:77:8f:e7:da:d6:5a:07:d2:e1:7d:0b:5e:e1:d1:71:7c:
ab:f9:fe:30:1c:f3:58:71:97:64:ca:f8:9c:b0:7e:39:7e:c3:
ba:fc:dd:9e:0e:94:bd:3e:ee:c1:c1:75:ec:eb:8a:0b:8c:4e:
2f:85:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:41:14 2025 by rpki-client