This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398547.roa File: AS398547.roa (raw, json) Hash identifier: GO9uJlSkgoUiAQBxzbHcbrzAr06E4gGjg93jVdMy+QE= Subject key identifier: D5:0D:29:72:B1:2E:F8:C8:4D:81:D9:BB:26:18:F9:2D:35:22:B6:96 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4EAFE38C829F7282DEB25A04CFB7C525BC5E702D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398547.roa Signing time: Tue 02 Dec 2025 03:49:35 +0000 ROA not before: Tue 02 Dec 2025 03:44:35 +0000 ROA not after: Tue 01 Dec 2026 03:49:35 +0000 asID: 398547 IP address blocks: 82.22.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:af:e3:8c:82:9f:72:82:de:b2:5a:04:cf:b7:c5:25:bc:5e:70:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 03:44:35 2025 GMT Not After : Dec 1 03:49:35 2026 GMT Subject: CN=D50D2972B12EF8C84D81D9BB2618F92D3522B696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:d7:2b:50:30:5d:59:62:ee:c2:56:41:43: 96:04:60:3e:8d:34:e2:22:20:66:14:c4:75:50:c8: c0:c5:8d:92:6a:ec:ae:7d:01:13:a1:58:5d:0d:63: 31:35:5a:38:c0:ab:df:1a:a5:e9:95:ca:0c:c2:a3: 1d:a4:7b:95:8b:35:2c:be:33:ae:e9:9e:0d:be:99: b2:f2:3a:5b:28:ba:76:a1:fd:8e:74:62:d4:d6:3d: 61:38:4e:f7:18:45:82:3c:8f:64:cf:9e:73:6c:81: 57:68:24:ef:08:e0:3e:13:4e:5f:17:fe:78:41:8a: a3:53:e8:a1:4b:28:10:0c:9d:e9:6a:43:35:76:89: a6:26:9e:a0:07:3f:3d:d0:e2:2b:cb:b1:5c:10:07: fb:54:9d:1a:a9:63:85:4e:98:ce:6f:ae:8a:93:64: 3b:14:98:3f:bc:33:da:d6:92:ba:b7:ed:42:bc:e4: 02:b6:68:23:b2:37:c7:56:02:a0:ab:bc:52:df:a3: 88:5d:e5:58:ef:2a:d1:74:4b:b3:66:dc:9f:93:4e: 1d:b8:f2:ba:b7:2c:04:56:ef:48:e0:c8:43:57:96: 9f:61:96:b4:b8:55:9c:ef:51:a0:11:9d:8b:47:e8: 5a:b2:f1:5a:a7:e5:62:27:33:8c:26:7c:31:a2:d6: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0D:29:72:B1:2E:F8:C8:4D:81:D9:BB:26:18:F9:2D:35:22:B6:96 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.35.0/24 Signature Algorithm: sha256WithRSAEncryption 41:58:28:b4:9c:79:21:ca:d6:68:f1:3d:f3:13:bf:c3:0d:da: 8b:ae:be:c7:a2:3a:4a:8d:44:ce:fb:e4:2e:6c:b8:69:59:46: 8a:c2:2e:a5:11:14:c2:b7:18:af:47:0c:9d:ed:34:5f:8c:e2: 8b:b9:15:49:bf:8a:6a:b1:ff:08:dd:be:79:05:7c:83:91:32: 78:9e:d1:47:79:97:40:42:d7:3b:f5:07:99:0a:4d:3a:b5:ac: f4:eb:4c:19:bd:cb:26:3e:e6:b9:0b:06:16:92:01:e8:3a:65: 14:3c:7c:91:10:ca:11:49:98:9b:ac:9f:be:c4:7d:e6:78:24: 29:02:56:22:4e:98:51:19:7c:a5:8a:7c:93:40:27:89:6e:b6: 4d:3f:6e:c0:98:2e:0d:6a:64:8d:80:4b:27:52:e9:81:43:d5: a6:57:96:73:78:6f:e2:80:72:56:ee:14:7a:9f:28:11:42:ad: 4e:b8:68:70:e3:8f:a9:20:79:b9:57:95:23:85:aa:b7:4a:8a: 76:be:df:bb:57:e2:72:02:26:5d:38:dc:65:2c:51:ba:22:fc: 15:f7:3b:09:a2:37:36:07:8d:9b:fb:70:8a:23:f3:7f:f8:8c: ea:e1:59:11:07:bc:29:4c:d2:3f:c5:20:7f:ae:fc:be:59:7d: 32:82:31:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTq/jjIKfcoLesloEz7fFJbxecC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIwMzQ0MzVaFw0yNjEyMDEwMzQ5MzVaMDMxMTAvBgNV BAMTKEQ1MEQyOTcyQjEyRUY4Qzg0RDgxRDlCQjI2MThGOTJEMzUyMkI2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC19crUDBdWWLuwlZBQ5YEYD6N NOIiIGYUxHVQyMDFjZJq7K59AROhWF0NYzE1WjjAq98apemVygzCox2ke5WLNSy+ M67png2+mbLyOlsounah/Y50YtTWPWE4TvcYRYI8j2TPnnNsgVdoJO8I4D4TTl8X /nhBiqNT6KFLKBAMnelqQzV2iaYmnqAHPz3Q4ivLsVwQB/tUnRqpY4VOmM5vroqT ZDsUmD+8M9rWkrq37UK85AK2aCOyN8dWAqCrvFLfo4hd5VjvKtF0S7Nm3J+TTh24 8rq3LARW70jgyENXlp9hlrS4VZzvUaARnYtH6Fqy8Vqn5WInM4wmfDGi1mXnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU1Q0pcrEu+MhNgdm7Jhj5LTUitpYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk4NTQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYj MA0GCSqGSIb3DQEBCwUAA4IBAQBBWCi0nHkhytZo8T3zE7/DDdqLrr7HojpKjUTO ++QubLhpWUaKwi6lERTCtxivRwyd7TRfjOKLuRVJv4pqsf8I3b55BXyDkTJ4ntFH eZdAQtc79QeZCk06taz060wZvcsmPua5CwYWkgHoOmUUPHyREMoRSZibrJ++xH3m eCQpAlYiTphRGXylinyTQCeJbrZNP27AmC4NamSNgEsnUumBQ9WmV5ZzeG/igHJW 7hR6nygRQq1OuGhw44+pIHm5V5Ujhaq3Sop2vt+7V+JyAiZdONxlLFG6IvwV9zsJ ojc2B42b+3CKI/N/+Izq4VkRB7wpTNI/xSB/rvy+WX0ygjFy -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client