This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29066.roa File: AS29066.roa (raw, json) Hash identifier: +lNdIwpzGkRkpn+oqyv4QHWbEW4XTrEllBv/x87bBOc= Subject key identifier: 98:30:4F:EA:37:0F:D8:8D:DC:24:48:0C:D1:AD:C5:58:BE:0B:7B:D9 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 093C65283633E027DAD084B940EE5321EF77C66A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29066.roa Signing time: Mon 24 Nov 2025 15:11:42 +0000 ROA not before: Mon 24 Nov 2025 15:06:42 +0000 ROA not after: Mon 23 Nov 2026 15:11:42 +0000 asID: 29066 IP address blocks: 82.39.93.0/24 maxlen: 24 82.39.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3c:65:28:36:33:e0:27:da:d0:84:b9:40:ee:53:21:ef:77:c6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 15:06:42 2025 GMT Not After : Nov 23 15:11:42 2026 GMT Subject: CN=98304FEA370FD88DDC24480CD1ADC558BE0B7BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:ac:13:92:14:da:f1:53:af:ff:51:31:15: 8e:f5:74:77:34:2e:de:12:4f:b8:70:da:36:3c:9c: b6:55:b9:56:d9:30:7c:c1:e7:0f:db:1e:7d:8e:b4: 47:50:a5:66:0f:37:de:82:a5:88:9b:24:bb:74:22: 56:02:7d:80:0f:00:08:bf:8d:6e:21:f3:20:25:d7: f3:28:fb:01:3c:1d:7b:32:68:ed:6f:cf:a8:e8:1e: 3b:27:7e:9d:07:59:5c:34:6c:aa:98:fb:40:55:3c: 73:ff:a0:f3:42:e8:95:1f:76:5d:27:b2:cd:79:81: d1:e7:1e:a2:9e:05:a8:4a:9a:65:88:47:98:ea:e1: f8:2c:13:46:dd:74:ff:80:b0:4c:7c:3a:34:86:a1: d3:4f:36:da:5c:37:bc:fa:26:a1:c5:d9:c3:21:ff: bd:17:23:4c:38:90:d2:03:c0:f9:88:d4:58:4c:32: b4:50:87:d0:c8:ff:84:e0:68:3a:f9:13:13:35:93: 2e:ca:37:37:50:80:5e:36:49:53:9e:7d:b5:2c:19: 5c:b4:3e:7b:df:bf:ce:5e:8c:44:59:7d:45:f9:8c: 07:30:7b:c5:b3:cc:64:85:68:c6:ab:57:17:9d:09: cb:24:92:e1:23:45:47:5a:11:d4:a8:2e:fb:1b:a6: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:30:4F:EA:37:0F:D8:8D:DC:24:48:0C:D1:AD:C5:58:BE:0B:7B:D9 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.93.0/24 82.39.165.0/24 Signature Algorithm: sha256WithRSAEncryption 06:10:1d:1e:fc:24:a6:87:ee:c1:62:e2:bb:68:f1:da:ae:d2: 9d:8b:bb:28:c9:65:f5:b9:45:39:f8:b0:b9:a8:61:f5:12:e8: b0:38:a2:aa:d4:5a:8b:d0:7d:83:7f:22:26:dd:35:14:22:b9: 2a:d8:99:a1:1e:f6:4f:9c:7c:4e:0a:4a:0a:1f:64:4e:bf:fc: 13:db:3e:9a:1d:3e:c6:00:4b:84:f6:dc:ce:4c:b4:49:19:99: c5:13:4c:16:5b:46:53:b8:cd:ec:73:b6:f6:98:61:f7:21:e6: a4:93:78:58:51:75:06:62:38:a6:ae:f1:63:84:3f:a4:83:a6: 05:cf:61:d3:fd:6b:9e:f9:dc:69:55:e8:55:45:21:f3:1a:16: db:a3:f6:43:3e:41:fb:49:bd:c5:87:bb:d2:7e:c7:f0:d9:a1: fd:6f:90:2d:1d:08:04:03:92:ef:39:3b:98:f7:f2:e2:c2:76: 14:88:01:1d:46:be:03:12:27:e5:30:e3:bf:b7:e3:c8:5a:d1: ff:bc:68:0b:fc:89:3a:ea:88:e3:a2:69:51:b1:43:94:ae:b2: 27:3a:8b:cc:4c:25:26:6e:d4:c7:14:a6:0e:21:ac:22:2c:36: 3b:c8:2d:99:a0:39:b1:48:e4:52:c5:af:ed:ca:2b:7b:00:db: 5a:ca:4f:c6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUCTxlKDYz4Cfa0IS5QO5TIe93xmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQxNTA2NDJaFw0yNjExMjMxNTExNDJaMDMxMTAvBgNV BAMTKDk4MzA0RkVBMzcwRkQ4OEREQzI0NDgwQ0QxQURDNTU4QkUwQjdCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCleqwTkhTa8VOv/1ExFY71dHc0 Lt4ST7hw2jY8nLZVuVbZMHzB5w/bHn2OtEdQpWYPN96CpYibJLt0IlYCfYAPAAi/ jW4h8yAl1/Mo+wE8HXsyaO1vz6joHjsnfp0HWVw0bKqY+0BVPHP/oPNC6JUfdl0n ss15gdHnHqKeBahKmmWIR5jq4fgsE0bddP+AsEx8OjSGodNPNtpcN7z6JqHF2cMh /70XI0w4kNIDwPmI1FhMMrRQh9DI/4TgaDr5ExM1ky7KNzdQgF42SVOefbUsGVy0 Pnvfv85ejERZfUX5jAcwe8WzzGSFaMarVxedCcskkuEjRUdaEdSoLvsbpkQrAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUmDBP6jcP2I3cJEgM0a3FWL4Le9kwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjkwNjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSJ10D BABSJ6UwDQYJKoZIhvcNAQELBQADggEBAAYQHR78JKaH7sFi4rto8dqu0p2LuyjJ ZfW5RTn4sLmoYfUS6LA4oqrUWovQfYN/IibdNRQiuSrYmaEe9k+cfE4KSgofZE6/ /BPbPpodPsYAS4T23M5MtEkZmcUTTBZbRlO4zexztvaYYfch5qSTeFhRdQZiOKau 8WOEP6SDpgXPYdP9a5753GlV6FVFIfMaFtuj9kM+QftJvcWHu9J+x/DZof1vkC0d CAQDku85O5j38uLCdhSIAR1GvgMSJ+Uw47+348ha0f+8aAv8iTrqiOOiaVGxQ5Su sic6i8xMJSZu1McUpg4hrCIsNjvILZmgObFI5FLFr+3KK3sA21rKT8Y= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:44 2025 by rpki-client