This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273408.roa File: AS273408.roa (raw, json) Hash identifier: W4Rl+Amt6nfhE0NjuuaEKM6MBzXvqx3dhxsXMCy8N4s= Subject key identifier: A3:35:48:34:3C:4E:F8:D8:95:F5:E8:02:27:6D:49:96:EE:50:24:5C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4BD4CA4734CD906B1E60ECDACE157B35567CFA2C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273408.roa Signing time: Tue 02 Dec 2025 16:47:31 +0000 ROA not before: Tue 02 Dec 2025 16:42:31 +0000 ROA not after: Tue 01 Dec 2026 16:47:31 +0000 asID: 273408 IP address blocks: 82.22.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d4:ca:47:34:cd:90:6b:1e:60:ec:da:ce:15:7b:35:56:7c:fa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 16:42:31 2025 GMT Not After : Dec 1 16:47:31 2026 GMT Subject: CN=A33548343C4EF8D895F5E802276D4996EE50245C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:c5:8e:18:ef:a9:0a:72:98:43:53:f0:8a: 83:df:aa:6c:e6:ec:5c:1c:ad:fa:38:eb:e2:17:f8: e9:da:8f:8d:d9:03:de:20:b5:af:ee:57:f0:74:42: 30:d2:f9:27:1a:6e:27:ef:cb:a0:7e:bd:0c:ff:cc: 9d:3a:88:ac:21:cb:27:3b:20:12:3f:ed:13:02:7a: 4b:59:11:b0:81:44:f2:c9:87:40:6a:70:af:46:49: cf:ff:90:c2:5b:76:ed:86:cd:55:08:16:ad:b7:0a: 8a:2a:59:7b:eb:7b:28:53:9b:85:19:f6:74:36:56: 8d:5d:68:bf:66:c2:4e:61:fd:05:30:d6:e7:e8:2b: 07:44:e3:df:4e:aa:d2:a1:14:08:4f:49:d6:9a:d1: 4c:4b:4b:2c:f4:6c:eb:ab:05:13:4a:58:e3:a0:18: 45:3d:a8:ee:2a:bc:d0:99:45:2a:3e:46:16:65:52: d3:b2:46:7d:aa:e4:42:a2:37:a2:fc:61:e2:ee:b4: 37:5a:09:09:ce:42:2c:8f:39:0a:44:b4:ec:ce:dd: 2d:5f:3e:72:14:5f:3c:ca:c0:0a:b3:ab:fe:1c:f6: 7d:fd:d0:d6:17:f8:ad:b2:3c:4e:8b:12:63:fb:b4: fe:8f:75:c6:4b:cd:7a:2f:ce:0e:2c:16:f0:d2:17: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:48:34:3C:4E:F8:D8:95:F5:E8:02:27:6D:49:96:EE:50:24:5C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273408.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.29.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c3:78:91:ad:d9:95:46:1d:70:cf:0c:1e:ae:4b:42:93:84: d8:73:58:e0:28:65:f6:4b:6f:bb:04:e1:2c:2c:1f:10:ad:0c: e3:22:08:2b:a7:25:7c:8f:16:c3:86:8f:90:93:ce:db:10:bf: 28:2a:c4:6d:c5:cd:3d:73:f6:ac:72:c1:b2:54:74:cd:59:5a: 73:81:83:6a:7d:b9:1e:e2:23:1a:6f:ba:c4:bc:e0:ee:31:a5: 4d:7b:c7:69:5d:1c:65:58:da:ef:c0:ad:5e:ce:d2:5d:8d:96: d2:a1:c8:23:08:2e:2e:29:af:c9:94:28:26:4c:25:a2:54:51: 90:0e:f3:c1:34:20:cc:35:29:80:4d:40:44:3d:35:7b:ad:de: 14:d8:ff:41:5c:82:07:01:a5:c1:af:3b:c7:5c:59:37:a1:f5: cd:4c:36:8e:80:89:b5:a6:54:07:c9:79:3c:40:e6:3d:40:31: c4:ca:a1:eb:84:27:cc:59:37:fa:37:e2:16:15:60:a0:ca:b6: 7f:09:7f:b9:b8:9e:7e:47:79:b6:e9:63:e1:0e:fe:a0:d4:79: 27:67:5d:9a:a2:c7:1a:7a:d8:4e:d3:cd:bd:a3:37:e8:5d:96: 29:fc:2c:a1:0e:2d:2f:35:f7:c3:73:bc:29:43:a9:03:8b:22: d1:9f:4d:f7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUS9TKRzTNkGseYOzazhV7NVZ8+iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIxNjQyMzFaFw0yNjEyMDExNjQ3MzFaMDMxMTAvBgNV BAMTKEEzMzU0ODM0M0M0RUY4RDg5NUY1RTgwMjI3NkQ0OTk2RUU1MDI0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+8WOGO+pCnKYQ1PwioPfqmzm 7Fwcrfo46+IX+Onaj43ZA94gta/uV/B0QjDS+Scabifvy6B+vQz/zJ06iKwhyyc7 IBI/7RMCektZEbCBRPLJh0BqcK9GSc//kMJbdu2GzVUIFq23CooqWXvreyhTm4UZ 9nQ2Vo1daL9mwk5h/QUw1ufoKwdE499OqtKhFAhPSdaa0UxLSyz0bOurBRNKWOOg GEU9qO4qvNCZRSo+RhZlUtOyRn2q5EKiN6L8YeLutDdaCQnOQiyPOQpEtOzO3S1f PnIUXzzKwAqzq/4c9n390NYX+K2yPE6LEmP7tP6PdcZLzXovzg4sFvDSF8cdAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUozVINDxO+NiV9egCJ21Jlu5QJFwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjczNDA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYd MA0GCSqGSIb3DQEBCwUAA4IBAQAuw3iRrdmVRh1wzwwerktCk4TYc1jgKGX2S2+7 BOEsLB8QrQzjIggrpyV8jxbDho+Qk87bEL8oKsRtxc09c/ascsGyVHTNWVpzgYNq fbke4iMab7rEvODuMaVNe8dpXRxlWNrvwK1eztJdjZbSocgjCC4uKa/JlCgmTCWi VFGQDvPBNCDMNSmATUBEPTV7rd4U2P9BXIIHAaXBrzvHXFk3ofXNTDaOgIm1plQH yXk8QOY9QDHEyqHrhCfMWTf6N+IWFWCgyrZ/CX+5uJ5+R3m26WPhDv6g1HknZ12a oscaethO0829ozfoXZYp/CyhDi0vNffDc7wpQ6kDiyLRn033 -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:58 2025 by rpki-client