This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa File: AS396982.roa (raw, json) Hash identifier: J91l6+7rPQk0UvwdCiLWH0sdyy0uC9RX5E72VLgaCgw= Subject key identifier: AD:3D:06:A1:9D:38:B2:B6:62:F8:1B:7B:03:D2:67:2D:21:38:9A:E4 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 23BCC13AB323BCC7251AEF53094840341570B42C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa Signing time: Wed 26 Nov 2025 05:12:33 +0000 ROA not before: Wed 26 Nov 2025 05:07:33 +0000 ROA not after: Wed 25 Nov 2026 05:12:33 +0000 asID: 396982 IP address blocks: 82.39.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bc:c1:3a:b3:23:bc:c7:25:1a:ef:53:09:48:40:34:15:70:b4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 05:07:33 2025 GMT Not After : Nov 25 05:12:33 2026 GMT Subject: CN=AD3D06A19D38B2B662F81B7B03D2672D21389AE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:b1:eb:13:5f:5b:8f:9b:dc:b6:29:55:86: d0:f5:8f:5a:89:14:3a:bc:64:b1:f3:77:bd:4d:64: d1:60:6e:df:eb:0b:1e:7e:c5:cd:fe:13:79:21:e1: 59:58:75:31:b0:cd:81:94:80:a5:91:6c:72:ed:a0: 15:78:16:1d:e3:76:16:84:2a:da:50:73:b6:36:3f: 3c:60:88:02:7b:06:9b:0f:ed:5c:ab:ac:f2:7d:82: 4f:08:2c:60:19:ca:b5:55:5f:43:ee:a5:c3:c4:95: d7:00:90:43:c3:00:18:35:b3:42:59:9c:93:e9:07: bc:42:a5:e2:f0:00:10:07:96:48:3a:6a:de:34:09: 64:c6:b2:23:5e:05:22:f9:39:f9:fc:54:42:64:71: f5:ef:08:38:57:38:62:78:d6:55:bf:03:09:50:6d: 6f:2b:e9:ba:ad:c7:0d:98:42:9f:3f:24:b9:1c:7b: 3b:7a:a9:b8:d0:25:de:e0:44:aa:0d:1f:7d:29:0f: b8:56:1c:22:93:f9:9e:58:9a:f7:e2:33:5c:40:15: b7:4e:17:8a:0b:a8:d5:23:2f:7e:44:24:58:45:6f: 1e:9f:a0:64:a6:94:2c:56:c2:29:da:d0:26:81:99: fc:b8:fa:8d:7e:75:44:56:af:ff:76:ac:3f:09:2b: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3D:06:A1:9D:38:B2:B6:62:F8:1B:7B:03:D2:67:2D:21:38:9A:E4 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.118.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:bb:51:a3:98:83:fa:da:94:43:71:f8:47:b5:6b:67:03:ba: 05:83:75:10:54:ff:04:ea:34:46:18:26:e6:b7:b5:7a:e0:a4: 73:f4:54:39:1a:7c:4b:81:43:32:e7:f6:c8:a9:5b:8d:6c:64: 26:d0:c9:58:60:9f:a3:4c:12:23:65:74:f6:3f:88:67:c2:69: 7b:c0:06:bf:e9:14:3d:ac:b0:74:ea:d5:23:c4:03:27:56:de: 1d:0d:03:6f:0b:2d:eb:22:ea:b4:01:6e:0e:71:0a:bd:d9:4f: 47:2f:63:ea:95:0b:95:aa:07:16:38:2e:b3:f6:53:c7:fe:f3: 4f:c4:f6:0e:48:6d:62:e3:91:51:e4:c9:35:7d:84:e6:5e:ce: a4:d0:8a:93:2c:4c:c5:2a:1a:18:26:48:7d:ef:1e:03:22:e7: ab:1d:98:35:97:4e:d8:55:53:f0:0b:c1:64:81:ec:d8:48:04: bc:8e:78:f0:45:be:0e:b3:4b:a4:63:6a:3a:b0:c1:d8:91:c9: 6b:2a:a0:4b:6f:3f:a0:4d:cc:47:26:c7:17:10:bf:aa:04:fd: 3e:3d:45:c5:36:1a:ee:f3:56:68:59:b5:d2:f0:9b:bf:b2:2e: 3f:b3:ae:b3:f1:8e:69:bd:46:d5:0c:0f:3c:86:54:1a:c4:67: 3d:77:ed:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUI7zBOrMjvMclGu9TCUhANBVwtCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYwNTA3MzNaFw0yNjExMjUwNTEyMzNaMDMxMTAvBgNV BAMTKEFEM0QwNkExOUQzOEIyQjY2MkY4MUI3QjAzRDI2NzJEMjEzODlBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYLHrE19bj5vctilVhtD1j1qJ FDq8ZLHzd71NZNFgbt/rCx5+xc3+E3kh4VlYdTGwzYGUgKWRbHLtoBV4Fh3jdhaE KtpQc7Y2PzxgiAJ7BpsP7VyrrPJ9gk8ILGAZyrVVX0PupcPEldcAkEPDABg1s0JZ nJPpB7xCpeLwABAHlkg6at40CWTGsiNeBSL5Ofn8VEJkcfXvCDhXOGJ41lW/AwlQ bW8r6bqtxw2YQp8/JLkcezt6qbjQJd7gRKoNH30pD7hWHCKT+Z5YmvfiM1xAFbdO F4oLqNUjL35EJFhFbx6foGSmlCxWwina0CaBmfy4+o1+dURWr/92rD8JK3djAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUrT0GoZ04srZi+Bt7A9JnLSE4muQwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk2OTgyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUid2 MA0GCSqGSIb3DQEBCwUAA4IBAQAfu1GjmIP62pRDcfhHtWtnA7oFg3UQVP8E6jRG GCbmt7V64KRz9FQ5GnxLgUMy5/bIqVuNbGQm0MlYYJ+jTBIjZXT2P4hnwml7wAa/ 6RQ9rLB06tUjxAMnVt4dDQNvCy3rIuq0AW4OcQq92U9HL2PqlQuVqgcWOC6z9lPH /vNPxPYOSG1i45FR5Mk1fYTmXs6k0IqTLEzFKhoYJkh97x4DIuerHZg1l07YVVPw C8FkgezYSAS8jnjwRb4Os0ukY2o6sMHYkclrKqBLbz+gTcxHJscXEL+qBP0+PUXF Nhru81ZoWbXS8Ju/si4/s66z8Y5pvUbVDA88hlQaxGc9d+0V -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:00 2025 by rpki-client