This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS24875.roa
File: AS24875.roa (raw, json)
Hash identifier: k1TzBySn1Z0HjHey3NZpF78y+Rqi9tIsi4RdwphO6BU=
Subject key identifier: 61:C7:0E:27:A2:79:03:C9:6D:9B:07:30:14:29:EB:D9:10:DE:15:3A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2CEA19661195DD0A7CA566C0CB3161D66162B6E2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS24875.roa
Signing time: Wed 28 Jan 2026 00:30:16 +0000
ROA not before: Wed 28 Jan 2026 00:25:16 +0000
ROA not after: Wed 27 Jan 2027 00:30:16 +0000
asID: 24875
IP address blocks: 82.39.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ea:19:66:11:95:dd:0a:7c:a5:66:c0:cb:31:61:d6:61:62:b6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 28 00:25:16 2026 GMT
Not After : Jan 27 00:30:16 2027 GMT
Subject: CN=61C70E27A27903C96D9B07301429EBD910DE153A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:54:24:b1:13:0f:26:fa:6b:50:cc:08:1e:
6e:84:3f:c2:9d:fb:db:f0:d7:e4:60:91:51:af:19:
78:d3:22:40:2c:bb:2e:ed:b7:33:1f:ff:e5:22:a8:
91:da:32:74:37:ac:26:b5:93:69:c8:a1:23:58:fb:
99:a2:e3:88:e1:c8:d4:6c:85:8f:cd:ac:97:8d:76:
a6:d6:db:8e:24:50:35:6c:39:9f:ea:83:be:73:6f:
00:ad:18:6f:d2:20:b1:1c:00:bb:d8:13:e9:9f:cc:
10:1a:4d:5a:8f:35:ad:7f:4b:17:c9:a2:e7:a4:91:
f9:f5:e6:44:46:3d:e6:f0:90:b3:bb:e1:10:22:23:
89:d7:7b:ac:f3:8c:96:c6:ef:2d:47:98:75:ca:c6:
8e:cd:b1:44:17:ca:8b:d3:aa:7a:1f:52:90:9f:a9:
8b:48:6e:87:6d:fb:39:33:93:fa:0b:f0:17:25:ba:
67:c7:70:a6:57:3b:5a:29:d9:c3:4b:4c:f8:52:83:
3c:b7:fc:c8:2b:c3:02:f4:6e:24:db:0b:bb:7d:6a:
85:29:75:fb:6e:ae:3c:9e:05:cb:55:ac:9c:a3:4e:
f5:2b:0b:97:d9:85:bb:da:9f:52:95:ef:3a:ad:ab:
d0:93:18:a6:0d:e8:5c:11:bf:13:7a:3d:8c:b2:c6:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:0E:27:A2:79:03:C9:6D:9B:07:30:14:29:EB:D9:10:DE:15:3A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS24875.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.175.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c9:45:41:25:fa:ac:f9:fc:8a:df:c0:44:6f:c1:ff:01:4b:
d4:96:4a:10:98:d0:f8:e3:1a:fc:83:cd:ae:c7:bb:d8:12:08:
ff:88:f6:e1:94:24:84:2a:c8:00:40:77:89:53:38:b9:e0:da:
82:3c:cc:f9:71:e5:6b:84:ea:64:b0:72:05:fa:d1:f9:34:6e:
b2:f9:c3:5d:ea:18:f2:0d:c3:55:bf:34:08:97:51:88:8d:31:
84:a2:20:a7:71:55:10:70:4b:80:c4:ba:9c:d0:36:19:fd:2d:
19:18:1b:92:02:0b:85:0f:0f:a7:dc:f1:92:85:7a:36:d3:a0:
4d:6c:c2:41:e0:15:5a:89:6e:a2:2c:c9:36:4a:69:d0:ee:fe:
78:5b:68:ad:bf:a0:8a:69:0b:c3:9f:9f:c0:83:83:ae:26:b2:
64:5c:e7:46:f8:2a:ef:b5:50:34:05:2a:f7:3f:03:aa:83:19:
e9:78:13:d5:1f:6b:45:61:19:13:80:26:f1:65:f2:ee:06:ac:
16:c9:28:66:01:a7:cf:33:94:ba:9d:e3:d1:f7:c6:be:ff:84:
95:3e:ae:17:60:6f:8c:71:24:c5:6b:4f:4a:44:73:65:87:4a:
a3:7c:f8:c9:30:b8:47:5c:0f:89:03:11:76:9c:ef:56:64:e4:
14:f1:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:55 2026 by rpki-client