This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203910.roa File: AS203910.roa (raw, json) Hash identifier: o4i1Ag9SoJ50+nOdm7rTI/zsuxvjKOdJnorK4k3lxTA= Subject key identifier: CD:0E:6E:AE:B2:7F:35:1D:E4:3F:15:B2:90:71:B7:2D:80:1A:DA:BD Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 105CCD451EB95D18298092C30563503B98E72E7E Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203910.roa Signing time: Tue 11 Nov 2025 18:56:33 +0000 ROA not before: Tue 11 Nov 2025 18:51:33 +0000 ROA not after: Tue 10 Nov 2026 18:56:33 +0000 asID: 203910 IP address blocks: 82.25.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5c:cd:45:1e:b9:5d:18:29:80:92:c3:05:63:50:3b:98:e7:2e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 11 18:51:33 2025 GMT Not After : Nov 10 18:56:33 2026 GMT Subject: CN=CD0E6EAEB27F351DE43F15B29071B72D801ADABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:33:09:f1:90:a4:a5:6c:e3:4d:9a:b7:fe: ff:50:41:41:bc:e2:c3:54:59:b8:a0:82:b4:d3:79: 4e:b5:ed:cb:11:b3:36:9a:37:5c:53:29:dd:ec:c8: 18:c5:ac:2e:69:23:37:08:ee:6a:ae:40:a7:84:3d: 8a:70:7c:63:7e:85:fc:9b:d3:69:75:56:ea:3a:29: 7c:35:db:ed:dd:80:51:7a:3b:ca:1b:b3:e1:10:10: a0:2d:af:26:0b:c1:a2:8e:33:91:0d:69:f2:cd:73: 0a:2c:12:06:b1:c5:97:00:d1:dc:7e:b1:6c:06:b8: 36:ef:ca:e6:df:c7:d5:e4:45:db:ad:5b:5b:2e:00: 81:73:3b:0f:9f:2f:df:c8:57:1d:6f:30:da:68:65: 57:29:36:a9:06:78:27:d3:9e:84:a7:c6:ec:b9:c4: e6:52:ac:a2:2b:82:99:6f:3c:81:5e:e1:39:74:6e: 33:7e:d5:17:13:32:fc:5e:95:62:f7:9d:16:eb:c1: 8b:d4:cc:2c:93:e2:30:c9:8e:7b:5f:f3:f1:a7:a3: 58:14:45:bb:9a:99:ba:af:82:b0:b9:d0:4e:fa:41: 83:d8:8e:60:7b:b5:dd:71:87:d1:01:f9:38:fe:84: 9a:f4:81:b8:90:50:7e:07:4a:66:0b:c4:be:05:3d: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:6E:AE:B2:7F:35:1D:E4:3F:15:B2:90:71:B7:2D:80:1A:DA:BD X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203910.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.57.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:a0:c7:9d:e6:c6:3f:f6:b8:4b:1f:81:74:31:98:d0:0b:ab: a6:e6:d4:3a:53:7e:78:a4:f0:30:2c:5e:b2:34:33:98:78:65: d2:0a:11:35:57:85:96:8d:d1:29:3e:9f:21:58:44:ef:df:f8: cd:94:36:dd:79:d9:a0:c2:98:2f:97:15:a6:7a:74:89:8a:a6: 8b:e6:26:0a:f2:da:58:af:10:00:72:8d:66:55:4f:ec:bb:fb: da:6d:f2:57:b3:48:20:28:f7:56:d7:74:d0:54:97:ab:10:2c: 93:46:87:f9:0b:45:bd:9b:ad:d2:a6:a8:0b:71:12:50:f7:ac: a6:5a:00:69:5c:0c:e2:2a:bc:c4:ed:c8:51:30:a6:30:0d:32: 8f:b9:29:f0:0a:5a:ea:0a:1b:a3:21:87:94:94:21:2a:f3:ed: 49:f8:be:6c:08:15:e7:94:09:99:10:0c:43:8c:bc:75:e4:0f: ed:eb:2d:ce:1f:99:8e:3e:6a:ba:bd:b2:61:bd:27:24:30:2c: 92:54:d6:3d:45:70:e4:33:ac:fe:11:b8:7c:ae:a4:2e:8a:c4: df:fd:9a:9e:91:95:e8:3d:74:d0:e3:15:6e:76:9b:b8:ad:bb: 8e:f1:b5:df:0f:77:15:8b:1d:49:b5:85:3b:05:4f:fe:1f:cc: b2:f3:65:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUEFzNRR65XRgpgJLDBWNQO5jnLn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTExODUxMzNaFw0yNjExMTAxODU2MzNaMDMxMTAvBgNV BAMTKENEMEU2RUFFQjI3RjM1MURFNDNGMTVCMjkwNzFCNzJEODAxQURBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdmDMJ8ZCkpWzjTZq3/v9QQUG8 4sNUWbiggrTTeU617csRszaaN1xTKd3syBjFrC5pIzcI7mquQKeEPYpwfGN+hfyb 02l1Vuo6KXw12+3dgFF6O8obs+EQEKAtryYLwaKOM5ENafLNcwosEgaxxZcA0dx+ sWwGuDbvyubfx9XkRdutW1suAIFzOw+fL9/IVx1vMNpoZVcpNqkGeCfTnoSnxuy5 xOZSrKIrgplvPIFe4Tl0bjN+1RcTMvxelWL3nRbrwYvUzCyT4jDJjntf8/Gno1gU RbuambqvgrC50E76QYPYjmB7td1xh9EB+Tj+hJr0gbiQUH4HSmYLxL4FPaMDAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUzQ5urrJ/NR3kPxWykHG3LYAa2r0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzOTEwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhk5 MA0GCSqGSIb3DQEBCwUAA4IBAQCPoMed5sY/9rhLH4F0MZjQC6um5tQ6U354pPAw LF6yNDOYeGXSChE1V4WWjdEpPp8hWETv3/jNlDbdedmgwpgvlxWmenSJiqaL5iYK 8tpYrxAAco1mVU/su/vabfJXs0ggKPdW13TQVJerECyTRof5C0W9m63SpqgLcRJQ 96ymWgBpXAziKrzE7chRMKYwDTKPuSnwClrqChujIYeUlCEq8+1J+L5sCBXnlAmZ EAxDjLx15A/t6y3OH5mOPmq6vbJhvSckMCySVNY9RXDkM6z+Ebh8rqQuisTf/Zqe kZXoPXTQ4xVudpu4rbuO8bXfD3cVix1JtYU7BU/+H8yy82Us -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:44 2025 by rpki-client