This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398256.roa File: AS398256.roa (raw, json) Hash identifier: NMQH94vGSjtE3IXr5F9onhv27XoAsI9c8z4Ft+j9BVU= Subject key identifier: 84:4D:F8:CF:A0:C2:9C:93:9B:85:37:84:7F:9F:D7:8E:19:87:9A:09 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 01C91111901441D871C9F2FA9BBC18FC428C4DF7 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398256.roa Signing time: Sun 16 Nov 2025 13:54:09 +0000 ROA not before: Sun 16 Nov 2025 13:49:09 +0000 ROA not after: Sun 15 Nov 2026 13:54:09 +0000 asID: 398256 IP address blocks: 2a13:9500:10b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c9:11:11:90:14:41:d8:71:c9:f2:fa:9b:bc:18:fc:42:8c:4d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 16 13:49:09 2025 GMT Not After : Nov 15 13:54:09 2026 GMT Subject: CN=844DF8CFA0C29C939B8537847F9FD78E19879A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:de:43:b4:cc:48:0c:69:5c:a3:68:23:54: a0:1f:8e:95:91:e2:bf:4b:a0:32:b9:fc:46:82:da: e8:cb:02:0b:83:21:29:75:7a:0d:d2:2f:26:74:9c: d7:66:56:f9:03:3d:44:1e:4e:e5:11:9c:59:df:4a: fa:b0:d4:b5:23:ba:de:10:c6:60:8c:00:03:60:8a: ae:dd:c2:0b:e6:be:4f:1d:ee:89:17:34:6a:77:a6: a5:b2:24:97:27:d8:ab:e2:8d:50:8e:23:1d:1d:c0: 22:49:a0:4a:1a:30:bd:bf:69:64:7e:af:1a:6c:d9: 41:af:39:0d:ae:ad:91:99:be:16:a0:99:01:41:f8: a6:ed:a1:f0:72:97:34:11:d2:4e:45:bd:b4:bf:60: 09:07:8a:a5:cf:ee:20:36:8a:5a:71:69:52:6f:11: d2:8d:08:f8:19:01:66:da:c3:f3:3d:a4:03:44:77: 73:1b:10:71:dd:bc:bc:5d:e2:7e:f4:92:54:8d:ef: c2:38:bd:9b:1e:bd:df:d6:b0:cb:c3:de:d3:f8:39: b1:a0:b0:10:a6:e4:bd:4a:93:99:7a:12:ab:b1:6c: 26:8e:0d:db:11:9c:45:fb:1f:d6:f7:05:d4:b7:5e: 88:25:6b:89:90:03:b4:43:13:e3:97:a0:9b:a3:27: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:F8:CF:A0:C2:9C:93:9B:85:37:84:7F:9F:D7:8E:19:87:9A:09 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398256.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:10b::/48 Signature Algorithm: sha256WithRSAEncryption 94:9b:fd:ee:c8:0f:b9:5d:3b:16:2c:9e:5c:85:7a:8f:3e:5b: 4d:9f:a5:12:60:86:4c:1b:08:ed:e7:49:79:d6:08:87:35:07: 5a:8f:c6:d4:ca:86:06:e2:27:0a:26:72:51:0f:4d:24:2c:f1: 4f:fe:e6:04:ce:e1:50:18:20:64:f4:cf:c2:92:15:1e:61:c2: 18:b9:75:ce:80:f8:c7:77:3b:9c:42:b1:c7:7b:a1:3a:af:e4: c9:9e:6e:e2:56:cf:47:48:60:61:39:3e:61:f8:b9:a9:6e:6b: d3:73:f3:12:44:a5:28:46:cf:ca:7c:6d:21:31:ee:7c:9d:0c: 5b:f8:05:7e:d7:b5:eb:ab:23:f1:ad:63:53:3a:3e:69:52:1d: ff:cc:d8:6f:25:29:b9:3a:e9:0a:52:b0:9a:f3:dd:32:39:a2: 72:f4:d1:6e:1b:0a:ce:da:f8:a3:17:8d:20:1b:fe:9d:93:96: e8:87:95:69:9f:41:98:d5:63:10:cd:9b:d6:11:aa:db:89:8b: 2e:9b:b0:60:72:4e:71:2c:e6:9f:66:36:3d:41:6b:84:f1:d8: af:d8:cd:ec:be:95:65:83:32:09:b2:33:22:91:e6:12:43:4d: 56:d0:58:dc:2e:c0:b3:92:0d:f4:1b:94:28:68:29:ca:e8:ec: 72:f8:78:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUAckREZAUQdhxyfL6m7wY/EKMTfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTYxMzQ5MDlaFw0yNjExMTUxMzU0MDlaMDMxMTAvBgNV BAMTKDg0NERGOENGQTBDMjlDOTM5Qjg1Mzc4NDdGOUZENzhFMTk4NzlBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGN5DtMxIDGlco2gjVKAfjpWR 4r9LoDK5/EaC2ujLAguDISl1eg3SLyZ0nNdmVvkDPUQeTuURnFnfSvqw1LUjut4Q xmCMAANgiq7dwgvmvk8d7okXNGp3pqWyJJcn2KvijVCOIx0dwCJJoEoaML2/aWR+ rxps2UGvOQ2urZGZvhagmQFB+KbtofBylzQR0k5FvbS/YAkHiqXP7iA2ilpxaVJv EdKNCPgZAWbaw/M9pANEd3MbEHHdvLxd4n70klSN78I4vZsevd/WsMvD3tP4ObGg sBCm5L1Kk5l6EquxbCaODdsRnEX7H9b3BdS3Xogla4mQA7RDE+OXoJujJ11DAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUhE34z6DCnJObhTeEf5/XjhmHmgkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk4MjU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAELMA0GCSqGSIb3DQEBCwUAA4IBAQCUm/3uyA+5XTsWLJ5chXqPPltNn6USYIZM Gwjt50l51giHNQdaj8bUyoYG4icKJnJRD00kLPFP/uYEzuFQGCBk9M/CkhUeYcIY uXXOgPjHdzucQrHHe6E6r+TJnm7iVs9HSGBhOT5h+LmpbmvTc/MSRKUoRs/KfG0h Me58nQxb+AV+17XrqyPxrWNTOj5pUh3/zNhvJSm5OukKUrCa890yOaJy9NFuGwrO 2vijF40gG/6dk5boh5Vpn0GY1WMQzZvWEarbiYsum7Bgck5xLOafZjY9QWuE8div 2M3svpVlgzIJsjMikeYSQ01W0FjcLsCzkg30G5QoaCnK6Oxy+Hga -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:42 2025 by rpki-client