This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa File: AS25369.roa (raw, json) Hash identifier: wRJauBFO6bKcq4xJoO++OSKiIz9HVSanaD0owOaZx+U= Subject key identifier: BF:97:9C:44:08:C9:37:4E:D3:59:0D:C7:A3:B1:42:25:E0:97:38:1F Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 78325DAF7F6C242E51CFC49D89928623BD2E74CA Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa Signing time: Thu 27 Nov 2025 10:43:26 +0000 ROA not before: Thu 27 Nov 2025 10:38:26 +0000 ROA not after: Thu 26 Nov 2026 10:43:26 +0000 asID: 25369 IP address blocks: 82.38.130.0/24 maxlen: 24 82.38.199.0/24 maxlen: 24 82.39.141.0/24 maxlen: 24 82.39.189.0/24 maxlen: 24 82.39.209.0/24 maxlen: 24 82.39.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:32:5d:af:7f:6c:24:2e:51:cf:c4:9d:89:92:86:23:bd:2e:74:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 27 10:38:26 2025 GMT Not After : Nov 26 10:43:26 2026 GMT Subject: CN=BF979C4408C9374ED3590DC7A3B14225E097381F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:58:91:39:f8:66:02:92:3b:1f:3c:ac:af: 80:77:3a:f1:e5:41:11:a4:30:80:83:20:fa:80:58: 78:8e:d1:9e:24:94:17:4e:a7:33:8b:09:56:72:3e: 1b:f1:f8:ac:52:c9:d6:0b:52:8d:36:02:f6:68:ea: 89:34:18:2b:67:e6:a8:84:d6:e3:28:be:ae:c5:00: 9b:05:3a:ce:e8:7b:b7:79:5b:e8:f4:1c:90:2c:e0: a2:63:79:20:0f:ef:4a:e6:4c:ce:7d:46:3f:d4:e6: 8f:38:8c:94:8d:2f:a1:67:81:33:69:a6:48:72:a2: 0e:50:9f:61:14:7e:59:89:c5:ef:89:73:c1:c5:6c: f7:69:ce:7e:c9:ba:af:95:2c:7c:da:0b:35:ec:d5: a5:7b:20:72:2d:a6:14:41:cc:74:ed:d8:34:e2:ed: 1c:fc:cb:2c:ad:d1:ca:a2:ef:7d:d0:84:2a:63:6e: af:f3:3b:ef:a6:b2:96:b7:33:7c:24:3f:94:35:f0: ad:2c:14:66:1e:52:da:59:91:d4:fc:93:38:cc:13: 18:01:c1:69:17:d3:99:57:28:22:61:21:35:15:4b: 30:8a:dd:a0:f9:95:f2:5f:e7:10:2a:be:b2:8e:f7: 5e:a6:92:43:e6:18:8f:c1:a2:99:ed:04:9f:b7:f7: ae:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:97:9C:44:08:C9:37:4E:D3:59:0D:C7:A3:B1:42:25:E0:97:38:1F X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.130.0/24 82.38.199.0/24 82.39.141.0/24 82.39.189.0/24 82.39.209.0/24 82.39.250.0/24 Signature Algorithm: sha256WithRSAEncryption 03:fb:47:ec:89:3f:25:0b:03:3f:1f:a7:ce:04:5e:13:b9:5b: f4:bd:e4:ab:5d:75:a2:b5:10:9e:c1:3c:f4:21:21:f1:cf:ef: 78:10:82:f3:b2:ae:b6:85:7d:b8:31:e2:c7:d2:25:16:50:f7: b1:11:6d:0d:61:56:e1:9d:b1:00:d5:1b:6d:5d:b3:55:37:ed: 03:10:de:17:6c:f8:2e:f3:e0:a4:55:8b:f0:16:8e:69:a6:20: 48:a8:d8:99:8d:bf:10:16:07:0f:9e:ce:08:db:5d:48:ba:52: 92:91:71:bf:27:a8:c1:f2:8d:7d:9d:da:70:3c:94:6d:e4:96: 59:6f:a7:10:f1:e6:3e:d0:a1:57:ca:87:80:8c:11:3d:38:d2: b6:86:80:53:ef:26:d9:72:ef:b0:17:dc:ef:33:6f:8d:6a:c4: 39:12:84:f1:2d:df:cf:db:63:eb:ae:a8:c8:68:d0:ae:3c:fc: 0e:9f:d1:8a:17:03:a6:01:62:bb:b7:93:3b:2d:d6:16:58:30: 6c:4d:c7:c0:ac:fd:0c:e5:cf:8f:3d:0b:f2:76:63:c4:49:cb: 67:a2:f2:dc:5c:e6:61:9b:32:15:b9:5c:4e:65:1f:16:e0:d7: 54:a4:ac:95:e8:36:42:a0:56:59:5f:0e:a4:d9:88:65:fb:11: a6:d6:be:f2 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUeDJdr39sJC5Rz8SdiZKGI70udMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjcxMDM4MjZaFw0yNjExMjYxMDQzMjZaMDMxMTAvBgNV BAMTKEJGOTc5QzQ0MDhDOTM3NEVEMzU5MERDN0EzQjE0MjI1RTA5NzM4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMM1iROfhmApI7Hzysr4B3OvHl QRGkMICDIPqAWHiO0Z4klBdOpzOLCVZyPhvx+KxSydYLUo02AvZo6ok0GCtn5qiE 1uMovq7FAJsFOs7oe7d5W+j0HJAs4KJjeSAP70rmTM59Rj/U5o84jJSNL6FngTNp pkhyog5Qn2EUflmJxe+Jc8HFbPdpzn7Juq+VLHzaCzXs1aV7IHItphRBzHTt2DTi 7Rz8yyyt0cqi733QhCpjbq/zO++mspa3M3wkP5Q18K0sFGYeUtpZkdT8kzjMExgB wWkX05lXKCJhITUVSzCK3aD5lfJf5xAqvrKO916mkkPmGI/BopntBJ+3965/AgMB AAGjggInMIICIzAdBgNVHQ4EFgQUv5ecRAjJN07TWQ3Ho7FCJeCXOB8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjUzNjkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABSJoID BABSJscDBABSJ40DBABSJ70DBABSJ9EDBABSJ/owDQYJKoZIhvcNAQELBQADggEB AAP7R+yJPyULAz8fp84EXhO5W/S95KtddaK1EJ7BPPQhIfHP73gQgvOyrraFfbgx 4sfSJRZQ97ERbQ1hVuGdsQDVG21ds1U37QMQ3hds+C7z4KRVi/AWjmmmIEio2JmN vxAWBw+ezgjbXUi6UpKRcb8nqMHyjX2d2nA8lG3klllvpxDx5j7QoVfKh4CMET04 0raGgFPvJtly77AX3O8zb41qxDkShPEt38/bY+uuqMho0K48/A6f0YoXA6YBYru3 kzst1hZYMGxNx8Cs/Qzlz489C/J2Y8RJy2ei8txc5mGbMhW5XE5lHxbg11SkrJXo NkKgVllfDqTZiGX7EabWvvI= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:00 2025 by rpki-client