This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203874.roa File: AS203874.roa (raw, json) Hash identifier: l7AxqPG6tjwncHRZbToTPxns/pMpigUbvpTK+epWD80= Subject key identifier: E3:10:A3:1A:80:1A:9A:1B:83:B3:31:F9:4A:02:FC:D8:01:E3:A9:E5 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7F2789BE3E6EEC673801C184854F1C26326FC3BE Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203874.roa Signing time: Tue 25 Nov 2025 19:32:29 +0000 ROA not before: Tue 25 Nov 2025 19:27:29 +0000 ROA not after: Tue 24 Nov 2026 19:32:29 +0000 asID: 203874 IP address blocks: 82.39.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:27:89:be:3e:6e:ec:67:38:01:c1:84:85:4f:1c:26:32:6f:c3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 25 19:27:29 2025 GMT Not After : Nov 24 19:32:29 2026 GMT Subject: CN=E310A31A801A9A1B83B331F94A02FCD801E3A9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:a4:b9:3d:5c:88:2f:3d:44:e2:0e:05:69: 0a:eb:d5:17:2a:55:62:a4:41:22:ce:6a:76:27:47: 4e:a8:c3:e5:0f:64:8d:3c:5a:10:c6:cf:1d:90:cb: 0a:53:c0:88:27:79:bf:a9:5f:71:f1:75:8b:e1:e0: b1:4f:44:06:d5:bd:3c:fb:fe:ee:ae:b4:c2:cd:dc: ce:a4:d1:1b:18:02:0f:d1:53:f9:65:ca:df:70:25: 27:e7:f8:72:39:7e:12:72:a0:76:f6:70:37:3e:20: 1f:96:78:97:6e:1a:5a:56:4a:0a:b1:74:ba:cb:e0: b0:17:21:60:2b:88:e3:bc:01:f8:3d:86:a4:41:9d: 9f:eb:5b:1a:71:12:a5:6e:22:d6:59:ac:f4:51:e3: 90:f1:20:82:2d:9d:b8:b5:48:93:f6:0b:78:64:13: b5:b0:3b:bc:0f:03:35:67:16:76:46:34:63:16:1b: 87:de:ba:fc:c2:ba:76:12:4c:ed:ee:1c:d2:31:1a: b1:34:5b:0b:66:66:06:0a:69:3f:3d:fe:44:45:aa: 86:3f:73:63:64:60:57:77:07:4e:d2:42:3f:a5:6c: e4:4d:93:59:27:dd:11:78:a0:23:75:c0:d7:73:96: 81:0f:58:44:1b:8b:0b:6d:f4:75:25:08:12:1e:ff: 90:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:10:A3:1A:80:1A:9A:1B:83:B3:31:F9:4A:02:FC:D8:01:E3:A9:E5 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203874.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.115.0/24 Signature Algorithm: sha256WithRSAEncryption 07:bf:08:9a:eb:09:2a:8a:65:62:12:49:ca:4f:3b:5c:f5:3d: 38:7b:68:0d:cc:d7:ce:3f:10:95:78:06:0b:03:5f:8a:75:4e: f8:4f:93:ab:e0:e5:c1:03:72:90:f7:f2:7e:2b:f0:b7:1c:dd: d2:60:6a:56:01:3e:74:1d:6f:c9:2e:21:ff:62:fb:b8:9b:26: 66:8a:f6:b7:d6:58:5b:37:d6:d6:24:86:f2:9f:f1:80:bb:bb: df:41:2b:b3:19:51:a8:3d:cb:ad:31:04:1b:bd:68:fd:b4:20: a9:cb:10:e6:5d:2e:44:d1:9c:b3:ae:cc:cb:61:c1:9d:6d:d4: f0:c0:96:01:6b:e9:4f:08:89:e9:1a:69:f7:7b:97:5e:cb:bb: 50:f4:9e:fc:21:d2:c7:d9:f5:c8:14:e3:70:73:bd:54:19:cd: 1b:c5:5b:45:49:db:74:b3:b9:1e:b5:c0:74:a9:08:80:6e:a5: 8e:35:67:3c:0b:c5:71:e3:19:dc:97:90:c9:06:ce:b7:29:3f: ae:3c:a0:9b:62:bf:69:c7:aa:ec:04:fb:f6:6c:d8:fa:b2:a1: 3b:72:fe:68:4a:57:be:22:fe:5a:ae:08:8e:56:7e:f3:0a:15: 96:fc:62:ae:a1:79:bd:5f:92:a7:a4:91:1d:7f:da:ab:f0:0e: bf:34:f9:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUfyeJvj5u7Gc4AcGEhU8cJjJvw74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjUxOTI3MjlaFw0yNjExMjQxOTMyMjlaMDMxMTAvBgNV BAMTKEUzMTBBMzFBODAxQTlBMUI4M0IzMzFGOTRBMDJGQ0Q4MDFFM0E5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q6S5PVyILz1E4g4FaQrr1Rcq VWKkQSLOanYnR06ow+UPZI08WhDGzx2QywpTwIgneb+pX3HxdYvh4LFPRAbVvTz7 /u6utMLN3M6k0RsYAg/RU/llyt9wJSfn+HI5fhJyoHb2cDc+IB+WeJduGlpWSgqx dLrL4LAXIWAriOO8Afg9hqRBnZ/rWxpxEqVuItZZrPRR45DxIIItnbi1SJP2C3hk E7WwO7wPAzVnFnZGNGMWG4feuvzCunYSTO3uHNIxGrE0WwtmZgYKaT89/kRFqoY/ c2NkYFd3B07SQj+lbORNk1kn3RF4oCN1wNdzloEPWEQbiwtt9HUlCBIe/5BRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU4xCjGoAamhuDszH5SgL82AHjqeUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzODc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidz MA0GCSqGSIb3DQEBCwUAA4IBAQAHvwia6wkqimViEknKTztc9T04e2gNzNfOPxCV eAYLA1+KdU74T5Or4OXBA3KQ9/J+K/C3HN3SYGpWAT50HW/JLiH/Yvu4myZmiva3 1lhbN9bWJIbyn/GAu7vfQSuzGVGoPcutMQQbvWj9tCCpyxDmXS5E0ZyzrszLYcGd bdTwwJYBa+lPCInpGmn3e5dey7tQ9J78IdLH2fXIFONwc71UGc0bxVtFSdt0s7ke tcB0qQiAbqWONWc8C8Vx4xncl5DJBs63KT+uPKCbYr9px6rsBPv2bNj6sqE7cv5o Sle+Iv5argiOVn7zChWW/GKuoXm9X5KnpJEdf9qr8A6/NPld -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:00 2025 by rpki-client