This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273242.roa File: AS273242.roa (raw, json) Hash identifier: JkYi5LymADll1HQTbT4t7gAyPgOlxsZJniLC0rVimqk= Subject key identifier: C4:6C:50:DC:67:E2:5C:61:93:D3:B9:2C:15:DB:E0:32:ED:6B:5B:52 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4F70C12CBEE6B46A40776A60F122CD114F2D73A3 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273242.roa Signing time: Wed 03 Dec 2025 04:53:57 +0000 ROA not before: Wed 03 Dec 2025 04:48:57 +0000 ROA not after: Wed 02 Dec 2026 04:53:57 +0000 asID: 273242 IP address blocks: 82.22.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:70:c1:2c:be:e6:b4:6a:40:77:6a:60:f1:22:cd:11:4f:2d:73:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 3 04:48:57 2025 GMT Not After : Dec 2 04:53:57 2026 GMT Subject: CN=C46C50DC67E25C6193D3B92C15DBE032ED6B5B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fa:66:cd:60:f8:c7:1a:c0:88:e7:c1:1c:6a: a4:07:6f:5f:43:51:17:9d:6e:be:db:67:77:ad:b9: f9:83:a9:bd:42:e8:e8:f0:0e:0a:e7:5c:1a:63:db: a7:d5:4d:83:5c:06:e2:28:d2:bd:1c:52:aa:f7:6b: 40:f6:e3:c9:17:4e:ba:77:10:88:33:cb:ae:df:8d: c4:80:f4:77:6b:f4:72:b2:fe:de:26:f8:b6:73:7e: cd:f1:4f:1a:32:03:92:df:a9:1c:bb:8a:54:0a:a6: a5:c0:ff:5c:de:30:52:66:73:74:18:58:ef:21:9b: 2e:56:a9:c5:71:31:27:fa:f4:56:12:1d:76:7a:2f: 80:8d:ad:c2:5d:76:d3:fc:d1:65:3a:cd:90:3e:59: e7:8f:0b:a7:49:8c:9d:a7:91:4f:13:77:02:6c:5a: 65:24:9f:21:5e:02:39:fc:8d:59:08:8c:90:a5:a4: 9d:c1:90:2f:38:b9:96:1a:4e:4d:d8:06:5f:92:05: 96:2f:bb:d2:e9:8c:cb:3a:71:8d:4e:99:7f:b8:63: 06:be:8e:0c:97:96:28:81:97:7b:fd:c5:de:b7:69: 23:af:37:c8:21:01:b1:63:6f:97:8f:1c:11:81:d0: 01:05:03:84:9f:c2:6a:8c:93:44:a1:a9:5e:e0:b2: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:50:DC:67:E2:5C:61:93:D3:B9:2C:15:DB:E0:32:ED:6B:5B:52 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.37.0/24 Signature Algorithm: sha256WithRSAEncryption 44:f6:56:f2:3d:fd:98:23:0a:a8:3e:c0:15:ac:d1:27:bf:a5: c5:1d:54:ba:2a:a8:3b:c6:fc:41:49:71:73:d2:13:1f:ec:74: 71:90:4c:04:23:22:9b:2a:9c:d8:55:cf:64:df:4c:00:ed:2e: fd:bb:0c:b8:4b:be:6d:35:cb:70:df:64:b9:bd:2d:6e:a4:ff: 6d:85:16:46:39:00:5e:9b:a5:d0:48:53:73:5c:4b:65:fb:89: bd:c8:11:e7:fa:48:97:b8:90:6c:c8:a6:e1:49:3b:8a:a9:43: 3b:6d:30:62:a3:76:cc:a9:22:b7:2b:dd:26:9e:35:f6:31:33: b8:f6:95:58:08:32:fa:72:92:48:e4:11:a5:c2:e5:42:10:54: c7:8e:1d:6e:90:4c:e8:09:39:e9:78:9f:b7:34:7b:0c:39:b2: 30:94:fc:b3:20:5b:17:f8:b8:b7:c7:b7:01:b7:2a:51:3f:6b: d6:7a:1e:da:61:b6:0f:9b:1d:2a:78:14:3b:d4:b1:4f:f2:eb: 63:1a:51:70:43:cd:fd:98:91:f2:21:d1:0b:cf:f6:06:6b:09: b7:8b:16:80:02:a5:96:f7:1d:e8:6a:41:e7:e8:1a:c4:ed:d3: ee:d6:b8:8a:4e:99:d8:cc:ec:6a:c0:f9:e0:2a:15:89:fe:3f: 04:61:73:79 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUT3DBLL7mtGpAd2pg8SLNEU8tc6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDMwNDQ4NTdaFw0yNjEyMDIwNDUzNTdaMDMxMTAvBgNV BAMTKEM0NkM1MERDNjdFMjVDNjE5M0QzQjkyQzE1REJFMDMyRUQ2QjVCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1+mbNYPjHGsCI58EcaqQHb19D URedbr7bZ3etufmDqb1C6OjwDgrnXBpj26fVTYNcBuIo0r0cUqr3a0D248kXTrp3 EIgzy67fjcSA9Hdr9HKy/t4m+LZzfs3xTxoyA5LfqRy7ilQKpqXA/1zeMFJmc3QY WO8hmy5WqcVxMSf69FYSHXZ6L4CNrcJddtP80WU6zZA+WeePC6dJjJ2nkU8TdwJs WmUknyFeAjn8jVkIjJClpJ3BkC84uZYaTk3YBl+SBZYvu9LpjMs6cY1OmX+4Ywa+ jgyXliiBl3v9xd63aSOvN8ghAbFjb5ePHBGB0AEFA4SfwmqMk0ShqV7gstntAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUxGxQ3GfiXGGT07ksFdvgMu1rW1IwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjczMjQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYl MA0GCSqGSIb3DQEBCwUAA4IBAQBE9lbyPf2YIwqoPsAVrNEnv6XFHVS6Kqg7xvxB SXFz0hMf7HRxkEwEIyKbKpzYVc9k30wA7S79uwy4S75tNctw32S5vS1upP9thRZG OQBem6XQSFNzXEtl+4m9yBHn+kiXuJBsyKbhSTuKqUM7bTBio3bMqSK3K90mnjX2 MTO49pVYCDL6cpJI5BGlwuVCEFTHjh1ukEzoCTnpeJ+3NHsMObIwlPyzIFsX+Li3 x7cBtypRP2vWeh7aYbYPmx0qeBQ71LFP8utjGlFwQ839mJHyIdELz/YGawm3ixaA AqWW9x3oakHn6BrE7dPu1riKTpnYzOxqwPngKhWJ/j8EYXN5 -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:18 2025 by rpki-client