This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38136.roa File: AS38136.roa (raw, json) Hash identifier: WlxyH4fGLmpR6/PbMXKX4eyHmABNw6751ND65t61UwQ= Subject key identifier: 54:3B:25:96:96:75:40:7B:31:3B:6D:BC:15:78:69:67:F8:D9:50:60 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 208AF824CA1ADCB0ED895D663F79028A39AA3A2F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38136.roa Signing time: Tue 11 Nov 2025 09:24:56 +0000 ROA not before: Tue 11 Nov 2025 09:19:56 +0000 ROA not after: Tue 10 Nov 2026 09:24:56 +0000 asID: 38136 IP address blocks: 82.22.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8a:f8:24:ca:1a:dc:b0:ed:89:5d:66:3f:79:02:8a:39:aa:3a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 11 09:19:56 2025 GMT Not After : Nov 10 09:24:56 2026 GMT Subject: CN=543B25969675407B313B6DBC15786967F8D95060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:85:ed:52:ba:8d:43:0c:21:78:b8:ab:8f: ec:f1:14:c0:44:4e:98:87:e1:6c:9b:65:fa:b4:28: 9c:07:ff:b4:a0:55:de:23:5b:0a:09:d1:0b:95:77: 70:6a:1d:49:37:c3:bd:3c:02:ec:f5:fe:d1:30:7c: 61:9c:90:21:b9:2d:8c:a9:93:f9:18:c4:1b:53:f9: 0a:de:81:fc:23:c6:be:a2:7c:d3:70:a4:98:e7:37: 45:a4:dd:96:d1:7d:8f:01:d7:d7:e0:0e:43:02:9c: df:ab:87:81:4a:fd:33:af:0a:22:b5:bd:ff:65:57: fa:06:4d:7d:f0:c0:78:87:ee:b9:df:ce:08:f8:d7: ad:6f:c7:5a:9a:28:98:9b:18:ab:7d:0e:84:8e:44: 79:c9:39:9a:98:de:38:80:a0:99:24:39:d7:58:10: 8b:03:91:15:f4:27:86:8e:24:3e:4f:1a:e9:9a:e7: e7:55:a2:bf:2d:e4:71:8a:fe:c5:62:40:54:8d:be: 21:7e:99:03:a1:ce:5d:13:08:18:0f:51:30:e1:02: 11:b8:8f:45:bb:21:c8:01:e5:4f:96:74:f1:ea:21: 4d:20:cd:ae:c3:98:0e:e1:26:44:c0:94:20:09:31: 7a:ad:cd:bf:98:d6:47:50:3e:2d:f7:ff:cc:58:da: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:25:96:96:75:40:7B:31:3B:6D:BC:15:78:69:67:F8:D9:50:60 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.30.0/23 Signature Algorithm: sha256WithRSAEncryption 40:f6:e9:42:30:e5:8e:9f:d8:57:89:28:d8:b9:18:de:00:b2: 54:39:5c:ad:d9:e2:37:86:9a:11:c7:f0:c3:4e:75:9c:4e:ff: 01:0e:b3:49:ed:89:e2:e0:a0:fa:a2:c0:5a:7e:03:b8:05:9f: 49:66:60:ba:63:cd:87:b4:d6:ba:41:45:2e:2e:c9:94:3e:16: 1a:7f:72:ca:c7:66:a6:ea:be:e2:c4:a5:4b:c7:21:60:9f:5a: 82:4b:19:c8:34:e2:cc:8b:61:2a:0a:d0:df:9d:70:32:c6:35: 65:c2:9a:85:33:3e:51:16:ad:e3:05:a1:00:76:d9:02:12:d4: e3:0a:8c:53:97:d1:b2:0e:dc:bb:77:4d:15:ca:1b:4d:4c:1c: 1c:8c:6c:9c:8e:40:5d:a6:af:7a:8b:e8:35:1d:5c:bf:c1:db: 98:84:99:5f:1f:a8:60:c7:26:7f:72:dd:14:d3:45:ab:c5:4a: 02:1e:cf:c7:31:73:a9:57:b4:8d:84:12:cc:ea:e8:7f:cf:1b: b2:d1:63:83:fd:05:c9:fe:82:8b:1d:f0:f9:7f:69:e8:5a:3c: f4:f8:64:fd:b6:20:94:ef:39:79:ce:ea:a9:34:6f:e0:6c:c8: 9f:58:f5:2c:f1:73:ac:f9:6d:08:32:f1:03:73:46:37:57:2a: b1:a4:85:d6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUIIr4JMoa3LDtiV1mP3kCijmqOi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTEwOTE5NTZaFw0yNjExMTAwOTI0NTZaMDMxMTAvBgNV BAMTKDU0M0IyNTk2OTY3NTQwN0IzMTNCNkRCQzE1Nzg2OTY3RjhEOTUwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmYXtUrqNQwwheLirj+zxFMBE TpiH4WybZfq0KJwH/7SgVd4jWwoJ0QuVd3BqHUk3w708Auz1/tEwfGGckCG5LYyp k/kYxBtT+Qregfwjxr6ifNNwpJjnN0Wk3ZbRfY8B19fgDkMCnN+rh4FK/TOvCiK1 vf9lV/oGTX3wwHiH7rnfzgj4161vx1qaKJibGKt9DoSORHnJOZqY3jiAoJkkOddY EIsDkRX0J4aOJD5PGuma5+dVor8t5HGK/sViQFSNviF+mQOhzl0TCBgPUTDhAhG4 j0W7IcgB5U+WdPHqIU0gza7DmA7hJkTAlCAJMXqtzb+Y1kdQPi33/8xY2lAFAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUVDsllpZ1QHsxO228FXhpZ/jZUGAwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzgxMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFSFh4w DQYJKoZIhvcNAQELBQADggEBAED26UIw5Y6f2FeJKNi5GN4AslQ5XK3Z4jeGmhHH 8MNOdZxO/wEOs0ntieLgoPqiwFp+A7gFn0lmYLpjzYe01rpBRS4uyZQ+Fhp/csrH ZqbqvuLEpUvHIWCfWoJLGcg04syLYSoK0N+dcDLGNWXCmoUzPlEWreMFoQB22QIS 1OMKjFOX0bIO3Lt3TRXKG01MHByMbJyOQF2mr3qL6DUdXL/B25iEmV8fqGDHJn9y 3RTTRavFSgIez8cxc6lXtI2EEszq6H/PG7LRY4P9Bcn+gosd8Pl/aehaPPT4ZP22 IJTvOXnO6qk0b+BsyJ9Y9Szxc6z5bQgy8QNzRjdXKrGkhdY= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:45 2025 by rpki-client