This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32620.roa File: AS32620.roa (raw, json) Hash identifier: BZyNgwgiQtAjkbz/6evR+waZGVhSdJZq/kpis4SRdqs= Subject key identifier: B0:27:86:B1:6A:E7:1C:24:31:D4:BE:2D:06:A0:05:D2:1B:79:23:47 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 76192AB904074BFEAAF869CF6E2E47835AFBFC83 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32620.roa Signing time: Thu 13 Nov 2025 14:21:54 +0000 ROA not before: Thu 13 Nov 2025 14:16:54 +0000 ROA not after: Thu 12 Nov 2026 14:21:54 +0000 asID: 32620 IP address blocks: 82.38.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 14:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:19:2a:b9:04:07:4b:fe:aa:f8:69:cf:6e:2e:47:83:5a:fb:fc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 13 14:16:54 2025 GMT Not After : Nov 12 14:21:54 2026 GMT Subject: CN=B02786B16AE71C2431D4BE2D06A005D21B792347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:b6:9d:5c:a4:28:6a:8f:cb:17:ea:33:a7: 17:b7:3a:95:90:e8:f4:c1:c2:91:c9:6c:e0:8a:5f: 94:ab:17:c3:4c:d4:83:43:ce:9f:48:26:0f:7d:2c: 93:c5:b6:dd:63:1b:b6:f9:29:53:71:8f:31:4a:66: d2:3e:fc:e9:2c:5a:e2:3f:41:8b:5b:79:4e:74:49: 65:06:84:4a:c9:99:e1:e7:68:09:34:5e:09:29:0c: c7:8c:2e:8c:78:15:c1:b9:54:e8:00:31:d7:2f:79: 79:58:f4:21:43:f2:e8:28:46:b4:fc:c1:a1:12:9f: 54:61:02:13:4a:78:04:ca:af:95:d1:bc:89:40:3b: 0f:ad:0e:07:f5:70:b9:ae:0b:5e:68:99:f4:0f:e6: 73:88:36:bb:00:fe:8f:3a:0c:ef:c3:37:e4:fc:59: b4:1b:50:08:4e:bf:5b:78:ea:d6:d7:50:d5:70:7c: 6c:ed:76:90:a0:57:77:26:a2:a3:fc:1d:98:c1:1b: 4f:1b:ef:18:ba:94:d9:80:13:13:a3:05:c0:19:90: 0e:72:d1:ec:95:a9:5d:00:67:1b:25:1c:fa:c7:d2: c0:65:76:9d:54:83:10:05:ee:29:9c:1b:6d:75:f5: ab:98:03:0a:c9:c6:cc:9c:d7:d9:36:b1:35:04:8c: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:27:86:B1:6A:E7:1C:24:31:D4:BE:2D:06:A0:05:D2:1B:79:23:47 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS32620.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.20.0/22 Signature Algorithm: sha256WithRSAEncryption 60:1b:5b:3e:54:4c:8a:a9:3c:00:37:fc:22:b3:82:c3:4d:e3: 85:cf:64:2d:26:71:8f:54:85:99:70:57:9e:ee:5f:80:f9:f4: 29:25:1e:28:13:0e:83:4d:77:99:02:ae:80:38:47:6e:ff:f2: ea:53:e7:3d:b3:45:d4:ad:fd:a0:76:ff:34:5a:58:ae:11:b6: 69:b1:11:a4:75:c6:26:2e:ff:6d:49:51:df:2f:ab:5f:6b:e4: ca:a8:55:ea:4c:92:b5:4d:6e:f1:ee:2c:77:47:b8:3e:d5:73: 24:41:fc:8c:84:ff:3c:7c:67:6e:8d:9b:15:4c:91:ec:8b:71: 45:1a:47:f3:d1:12:97:c2:cf:97:a6:28:0b:89:f9:3d:21:1f: 16:b0:ce:cf:3f:bc:e2:1c:5f:95:a7:ec:b2:9a:33:8a:62:b0: 97:e2:a6:74:72:34:88:16:12:c1:32:59:72:a7:03:4d:59:1e: 2c:34:f3:4c:01:9f:3b:b8:3d:e7:d2:ef:79:35:5d:00:1a:0f: a2:73:f5:32:a5:a6:be:05:b9:ee:8c:e1:a2:5c:23:c8:02:9f: 69:54:de:3f:59:6f:60:13:e5:c6:af:97:4c:3b:4d:33:89:a3: 74:3e:c3:29:f6:82:f4:c6:c8:19:87:22:50:f0:3b:d3:a9:ce: 40:85:80:62 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUdhkquQQHS/6q+GnPbi5Hg1r7/IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTMxNDE2NTRaFw0yNjExMTIxNDIxNTRaMDMxMTAvBgNV BAMTKEIwMjc4NkIxNkFFNzFDMjQzMUQ0QkUyRDA2QTAwNUQyMUI3OTIzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK7adXKQoao/LF+ozpxe3OpWQ 6PTBwpHJbOCKX5SrF8NM1INDzp9IJg99LJPFtt1jG7b5KVNxjzFKZtI+/OksWuI/ QYtbeU50SWUGhErJmeHnaAk0XgkpDMeMLox4FcG5VOgAMdcveXlY9CFD8ugoRrT8 waESn1RhAhNKeATKr5XRvIlAOw+tDgf1cLmuC15omfQP5nOINrsA/o86DO/DN+T8 WbQbUAhOv1t46tbXUNVwfGztdpCgV3cmoqP8HZjBG08b7xi6lNmAExOjBcAZkA5y 0eyVqV0AZxslHPrH0sBldp1UgxAF7imcG2119auYAwrJxsyc19k2sTUEjF1RAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUsCeGsWrnHCQx1L4tBqAF0ht5I0cwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzI2MjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJSJhQw DQYJKoZIhvcNAQELBQADggEBAGAbWz5UTIqpPAA3/CKzgsNN44XPZC0mcY9UhZlw V57uX4D59CklHigTDoNNd5kCroA4R27/8upT5z2zRdSt/aB2/zRaWK4RtmmxEaR1 xiYu/21JUd8vq19r5MqoVepMkrVNbvHuLHdHuD7VcyRB/IyE/zx8Z26NmxVMkeyL cUUaR/PREpfCz5emKAuJ+T0hHxawzs8/vOIcX5Wn7LKaM4pisJfipnRyNIgWEsEy WXKnA01ZHiw080wBnzu4PefS73k1XQAaD6Jz9TKlpr4Fue6M4aJcI8gCn2lU3j9Z b2AT5cavl0w7TTOJo3Q+wyn2gvTGyBmHIlDwO9OpzkCFgGI= -----END CERTIFICATE-----Generated at Tue Nov 25 17:52:16 2025 by rpki-client