This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39855.roa File: AS39855.roa (raw, json) Hash identifier: ttsBirIDBc9N7oppmSg7lTJAiC+hdanpjec1JEyCtEw= Subject key identifier: E0:A0:17:70:7D:3E:6D:FD:E6:AA:B2:82:73:8E:95:11:3D:43:AF:DC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 5FEDCBEC03BD82259324B50B4162659B03A3DB8E Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39855.roa Signing time: Mon 10 Nov 2025 13:56:22 +0000 ROA not before: Mon 10 Nov 2025 13:51:22 +0000 ROA not after: Mon 09 Nov 2026 13:56:22 +0000 asID: 39855 IP address blocks: 82.38.192.0/24 maxlen: 24 82.38.193.0/24 maxlen: 24 82.38.194.0/24 maxlen: 24 82.38.195.0/24 maxlen: 24 82.41.216.0/24 maxlen: 24 82.41.217.0/24 maxlen: 24 82.41.218.0/24 maxlen: 24 82.41.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ed:cb:ec:03:bd:82:25:93:24:b5:0b:41:62:65:9b:03:a3:db:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 10 13:51:22 2025 GMT Not After : Nov 9 13:56:22 2026 GMT Subject: CN=E0A017707D3E6DFDE6AAB282738E95113D43AFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:f4:ef:63:e6:69:d5:b7:ff:dd:99:85:b9: 06:9b:1e:9b:40:58:a2:9d:0a:75:a5:32:a7:6a:00: bc:6e:e8:84:54:d8:09:4a:a4:d4:72:e2:ed:10:57: b7:cd:5d:93:8b:4a:73:1a:a5:c4:e3:ee:33:ef:ac: 6a:3e:91:56:3e:89:22:6a:e1:d7:f7:87:37:83:65: 4b:c1:1a:7b:d6:82:a1:1a:25:e0:db:e9:43:14:d2: 20:c6:3e:72:08:6f:f1:b3:a1:6a:c5:b0:6b:c3:0c: 93:09:3c:2d:fe:cf:75:2e:49:77:f1:b8:c0:1a:eb: 4b:97:bd:3b:84:8e:8b:87:18:d8:24:a6:21:59:f5: a1:7e:49:0a:73:ee:f4:ac:b2:e1:b2:d8:70:16:ff: f8:fd:92:42:ca:f0:73:91:9e:c5:3f:05:05:f0:a7: e6:bb:e4:d1:da:72:62:04:a9:8d:f7:81:13:93:ce: 30:fa:0e:9f:2a:70:04:d3:1a:ea:fa:14:41:5b:b7: 75:cf:d9:d5:2e:b5:f1:4c:51:4f:ae:32:6d:5b:89: 8d:df:f3:c8:1b:37:19:66:1d:49:9c:05:f6:60:60: 97:94:dd:76:b6:03:d1:8c:67:47:9e:d1:c4:ed:2a: 39:14:99:f8:05:5a:54:7d:00:5b:1f:38:d4:10:f3: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A0:17:70:7D:3E:6D:FD:E6:AA:B2:82:73:8E:95:11:3D:43:AF:DC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39855.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.192.0/22 82.41.216.0/22 Signature Algorithm: sha256WithRSAEncryption 74:5d:41:cf:ce:8e:57:1b:97:91:54:2f:a4:af:86:ae:9b:02: 39:2e:1d:61:00:61:b1:45:da:32:26:65:7b:3a:53:ae:44:b4: 85:04:7e:a5:dc:5d:73:0f:44:e4:4e:64:8d:33:1e:6c:46:8f: 54:08:6b:ef:75:bf:b4:32:02:16:ba:f1:b5:9a:5d:05:c8:13: 0d:a5:6f:8b:a9:16:a9:a4:cf:d7:db:97:dd:97:07:e6:2f:06: 6e:54:8d:3d:83:0d:f0:24:25:14:d3:ef:e5:57:a2:7a:f1:2f: ed:e8:4f:ce:c2:84:61:c3:7c:84:ca:70:cb:99:67:cb:aa:66: 02:f3:20:cf:ba:c6:da:80:90:a6:57:fc:24:66:18:de:95:86: 98:bb:be:d9:a4:1a:4e:20:c9:1d:50:40:69:15:64:ee:e2:09: 0f:95:bc:db:ee:3f:0a:4e:aa:0f:dc:34:e2:3e:af:bc:7f:81: ec:fe:bf:0f:ed:84:76:86:24:de:b2:73:44:db:b3:dd:1a:24: e9:b5:fa:a1:bb:0b:38:5f:48:67:0f:e2:ec:c8:6b:08:49:85: 76:9e:56:eb:54:ce:a6:c2:6d:2d:24:39:c9:95:e0:f4:04:59: 0d:42:63:1f:18:ec:96:13:3a:f9:7e:e9:53:42:c4:9c:3c:f6: 4c:fd:15:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUX+3L7AO9giWTJLULQWJlmwOj244wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTAxMzUxMjJaFw0yNjExMDkxMzU2MjJaMDMxMTAvBgNV BAMTKEUwQTAxNzcwN0QzRTZERkRFNkFBQjI4MjczOEU5NTExM0Q0M0FGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JfTvY+Zp1bf/3ZmFuQabHptA WKKdCnWlMqdqALxu6IRU2AlKpNRy4u0QV7fNXZOLSnMapcTj7jPvrGo+kVY+iSJq 4df3hzeDZUvBGnvWgqEaJeDb6UMU0iDGPnIIb/GzoWrFsGvDDJMJPC3+z3UuSXfx uMAa60uXvTuEjouHGNgkpiFZ9aF+SQpz7vSssuGy2HAW//j9kkLK8HORnsU/BQXw p+a75NHacmIEqY33gROTzjD6Dp8qcATTGur6FEFbt3XP2dUutfFMUU+uMm1biY3f 88gbNxlmHUmcBfZgYJeU3Xa2A9GMZ0ee0cTtKjkUmfgFWlR9AFsfONQQ84bFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU4KAXcH0+bf3mqrKCc46VET1Dr9wwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk4NTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJSJsAD BAJSKdgwDQYJKoZIhvcNAQELBQADggEBAHRdQc/Ojlcbl5FUL6Svhq6bAjkuHWEA YbFF2jImZXs6U65EtIUEfqXcXXMPROROZI0zHmxGj1QIa+91v7QyAha68bWaXQXI Ew2lb4upFqmkz9fbl92XB+YvBm5UjT2DDfAkJRTT7+VXonrxL+3oT87ChGHDfITK cMuZZ8uqZgLzIM+6xtqAkKZX/CRmGN6Vhpi7vtmkGk4gyR1QQGkVZO7iCQ+VvNvu PwpOqg/cNOI+r7x/gez+vw/thHaGJN6yc0Tbs90aJOm1+qG7CzhfSGcP4uzIawhJ hXaeVutUzqbCbS0kOcmV4PQEWQ1CYx8Y7JYTOvl+6VNCxJw89kz9Ffo= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client