This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205548.roa File: AS205548.roa (raw, json) Hash identifier: iMk62d8N4HA79VVy1kJiOiuwpLcs6JDNsbise/XybjE= Subject key identifier: 0B:60:86:9A:63:5E:A0:B3:13:6F:C0:57:A0:67:B3:19:97:4D:55:BC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4E54E3D951C00D647D495F5BBEB64BBD8359E429 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205548.roa Signing time: Thu 27 Nov 2025 08:47:18 +0000 ROA not before: Thu 27 Nov 2025 08:42:18 +0000 ROA not after: Thu 26 Nov 2026 08:47:18 +0000 asID: 205548 IP address blocks: 82.39.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:54:e3:d9:51:c0:0d:64:7d:49:5f:5b:be:b6:4b:bd:83:59:e4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 27 08:42:18 2025 GMT Not After : Nov 26 08:47:18 2026 GMT Subject: CN=0B60869A635EA0B3136FC057A067B319974D55BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:85:de:78:94:a0:cd:7f:da:bc:cf:8f:25: 3d:c6:98:ea:ff:3b:87:16:ec:98:b8:ee:40:3e:c5: a8:9b:e8:e5:b0:d3:ed:94:7a:20:82:81:32:f3:18: d2:b0:ee:27:f2:8f:91:30:05:83:32:39:24:74:c8: b8:9e:69:a8:e7:bd:14:87:8a:fc:e7:19:fb:b6:e1: 68:d5:77:4d:26:08:9b:42:30:85:cb:ea:74:bf:6a: 06:0e:7e:05:4e:d2:09:ac:80:16:74:15:43:06:73: 32:60:98:f3:76:83:6a:16:96:35:fa:87:a6:e6:2e: 57:3d:67:9d:4f:2e:51:8c:20:51:40:e9:84:48:5c: cc:e4:d3:c2:a1:c5:35:f4:ad:9a:51:f0:7e:58:90: 90:57:2a:7a:c6:96:39:3e:8e:19:ff:45:71:55:67: 77:ec:59:99:cf:d2:d4:de:ae:2c:41:e8:d9:33:73: b3:27:d7:94:dc:e4:c6:5f:cd:4f:a7:79:81:62:45: 72:6b:e1:46:c8:a6:b1:88:9c:b1:9f:fe:6b:a4:e9: 2a:c8:41:b8:65:16:e0:db:0d:73:9e:1b:77:fb:d0: ea:db:e9:f5:16:40:48:c2:83:f1:9b:1c:06:48:03: be:f4:4a:c8:af:be:4d:cb:72:7f:ed:1c:ae:38:f4: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:60:86:9A:63:5E:A0:B3:13:6F:C0:57:A0:67:B3:19:97:4D:55:BC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.139.0/24 Signature Algorithm: sha256WithRSAEncryption 24:db:ef:a7:0d:3f:f4:73:7a:1b:a1:bf:06:95:6d:e3:b4:af: 07:b4:b6:71:30:3c:f6:c1:29:0b:32:86:c7:24:2f:44:16:f4: bb:03:e0:3c:3a:ba:b5:2d:58:70:2d:25:b3:a7:1f:60:cf:7e: 35:85:eb:f0:38:6c:70:4f:6e:a4:d0:f1:00:64:b9:3e:8c:ff: 40:25:23:4c:32:ba:0c:6e:c2:8d:38:4f:c9:09:31:83:ae:21: 07:13:1e:f9:b0:67:61:25:0c:45:b5:08:5c:3c:03:f6:50:1f: bf:ac:69:6b:34:e7:d3:61:e3:11:c9:17:0a:05:ef:85:1b:ba: 41:f7:2f:9b:04:2d:2d:04:a7:4a:c6:05:38:98:09:4d:8a:16: b5:64:48:a8:22:b2:8a:c4:f4:47:c1:76:36:5d:6e:84:04:40: 21:27:30:21:17:f9:70:39:6e:1b:a5:8f:90:e2:be:cc:52:19: a8:10:0c:15:11:be:1d:e3:d6:89:9e:07:ca:0d:ef:2d:d7:d3: d9:be:57:ca:97:88:b9:de:b0:59:6a:19:1b:72:94:78:ad:cb: 60:54:94:dc:9f:2d:16:f6:f9:2e:7b:16:f5:ff:ff:1f:bc:df: 54:95:20:91:86:1b:d2:5d:5f:5d:26:97:56:31:38:bb:34:18: 06:4f:4e:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTlTj2VHADWR9SV9bvrZLvYNZ5CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjcwODQyMThaFw0yNjExMjYwODQ3MThaMDMxMTAvBgNV BAMTKDBCNjA4NjlBNjM1RUEwQjMxMzZGQzA1N0EwNjdCMzE5OTc0RDU1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ34XeeJSgzX/avM+PJT3GmOr/ O4cW7Ji47kA+xaib6OWw0+2UeiCCgTLzGNKw7ifyj5EwBYMyOSR0yLieaajnvRSH ivznGfu24WjVd00mCJtCMIXL6nS/agYOfgVO0gmsgBZ0FUMGczJgmPN2g2oWljX6 h6bmLlc9Z51PLlGMIFFA6YRIXMzk08KhxTX0rZpR8H5YkJBXKnrGljk+jhn/RXFV Z3fsWZnP0tTerixB6Nkzc7Mn15Tc5MZfzU+neYFiRXJr4UbIprGInLGf/muk6SrI QbhlFuDbDXOeG3f70Orb6fUWQEjCg/GbHAZIA770Ssivvk3Lcn/tHK449GTbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUC2CGmmNeoLMTb8BXoGezGZdNVbwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1NTQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUieL MA0GCSqGSIb3DQEBCwUAA4IBAQAk2++nDT/0c3obob8GlW3jtK8HtLZxMDz2wSkL MobHJC9EFvS7A+A8Orq1LVhwLSWzpx9gz341hevwOGxwT26k0PEAZLk+jP9AJSNM MroMbsKNOE/JCTGDriEHEx75sGdhJQxFtQhcPAP2UB+/rGlrNOfTYeMRyRcKBe+F G7pB9y+bBC0tBKdKxgU4mAlNiha1ZEioIrKKxPRHwXY2XW6EBEAhJzAhF/lwOW4b pY+Q4r7MUhmoEAwVEb4d49aJngfKDe8t19PZvlfKl4i53rBZahkbcpR4rctgVJTc ny0W9vkuexb1//8fvN9UlSCRhhvSXV9dJpdWMTi7NBgGT05C -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:58 2025 by rpki-client