This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399486.roa File: AS399486.roa (raw, json) Hash identifier: NjytHg08PVubdpGh5W7EOkGdxD/aqxIYwwybIr0IGTg= Subject key identifier: 46:CF:24:2A:68:A4:99:91:A8:E7:60:A1:C0:55:E9:18:51:8D:1F:E5 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 5255CF09B8E7CFE6F74E98EC26CD9C33A2C7C7DF Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399486.roa Signing time: Tue 02 Dec 2025 20:35:45 +0000 ROA not before: Tue 02 Dec 2025 20:30:45 +0000 ROA not after: Tue 01 Dec 2026 20:35:45 +0000 asID: 399486 IP address blocks: 82.25.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:55:cf:09:b8:e7:cf:e6:f7:4e:98:ec:26:cd:9c:33:a2:c7:c7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 20:30:45 2025 GMT Not After : Dec 1 20:35:45 2026 GMT Subject: CN=46CF242A68A49991A8E760A1C055E918518D1FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:6f:cf:96:30:56:1a:7b:10:15:46:95:1d: d5:64:5f:29:1d:35:75:cc:ae:bd:1c:d4:fc:0f:a6: 3d:6e:c1:f1:b9:74:c3:5d:39:0e:67:0a:86:1e:9e: e3:60:fb:b6:6e:21:0c:6b:2e:00:b3:a5:9d:4e:ce: 8e:f2:97:d4:02:96:1d:44:23:c9:fa:91:77:4b:35: 11:60:5d:ae:ff:22:67:79:10:ec:de:50:af:66:45: 49:23:f2:6e:f8:71:e2:b0:1d:c7:4a:17:46:ef:e7: 5d:0a:ac:cb:32:60:e7:5c:31:8e:3e:13:a7:6e:c5: 1b:70:31:fe:32:a6:d1:92:20:9e:e4:95:aa:05:15: 86:08:48:cf:ba:fe:3b:88:54:9b:f9:89:a0:3d:bc: b6:73:02:dd:e9:ab:36:1f:63:16:dd:f6:c5:e3:9c: a0:e4:63:d2:a0:8b:57:7f:75:07:09:25:7a:0b:14: 6a:8f:92:b8:b2:22:c1:41:71:cd:26:73:c8:29:8e: ed:6a:8a:1a:70:82:ed:08:7e:0a:5e:f3:d4:d5:7b: 8d:ca:db:67:d3:57:c7:c7:68:6d:ea:ea:1d:3b:2b: ae:bd:19:74:31:18:a3:e9:a0:00:95:44:e9:da:85: bf:9a:00:e1:61:ab:58:7b:b1:25:61:d0:ac:1a:3e: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CF:24:2A:68:A4:99:91:A8:E7:60:A1:C0:55:E9:18:51:8D:1F:E5 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.175.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:09:0d:de:6f:76:dc:2b:c0:98:37:1f:c9:61:ec:b5:aa:97: 98:74:cb:a3:05:a4:e7:7f:f5:9f:a6:6f:c4:65:c9:01:da:84: c5:da:a3:6c:33:ea:c3:06:41:63:78:7a:ba:4a:70:d5:51:e5: 7f:d2:10:43:4c:cf:8f:d0:2a:d4:f3:31:a5:18:16:34:ea:02: ff:a1:5b:cc:98:88:74:5e:54:28:51:b1:c0:7d:a2:62:25:03: 93:a7:13:f9:51:72:27:c8:c7:d9:88:13:e7:e0:f1:d1:28:98: 0c:18:aa:67:3d:02:b3:f9:84:68:a5:69:83:2c:b4:d2:f6:5c: 90:2b:68:5f:00:3a:54:7e:c6:93:fc:50:78:a0:49:ba:29:16: b7:8c:de:0c:e8:90:da:79:0d:37:8d:56:67:44:2c:ab:8b:73: 83:15:c8:bc:ff:61:08:4a:ac:31:d2:b1:30:d6:d2:90:3f:4d: 52:4e:1c:8d:d9:e5:fe:49:ab:3e:d7:25:f4:09:19:1e:6f:45: 12:7b:ff:5a:76:06:8c:bb:04:f6:76:21:07:62:56:49:06:ba: 64:87:e1:39:a0:55:f4:ea:bd:8e:81:5a:9c:08:aa:f0:e0:83: c0:85:cd:d3:48:37:e3:3e:d8:de:dc:e3:6f:1e:67:94:8a:f0: 9b:d6:62:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUUlXPCbjnz+b3TpjsJs2cM6LHx98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIyMDMwNDVaFw0yNjEyMDEyMDM1NDVaMDMxMTAvBgNV BAMTKDQ2Q0YyNDJBNjhBNDk5OTFBOEU3NjBBMUMwNTVFOTE4NTE4RDFGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBW/PljBWGnsQFUaVHdVkXykd NXXMrr0c1PwPpj1uwfG5dMNdOQ5nCoYenuNg+7ZuIQxrLgCzpZ1Ozo7yl9QClh1E I8n6kXdLNRFgXa7/Imd5EOzeUK9mRUkj8m74ceKwHcdKF0bv510KrMsyYOdcMY4+ E6duxRtwMf4yptGSIJ7klaoFFYYISM+6/juIVJv5iaA9vLZzAt3pqzYfYxbd9sXj nKDkY9Kgi1d/dQcJJXoLFGqPkriyIsFBcc0mc8gpju1qihpwgu0Ifgpe89TVe43K 22fTV8fHaG3q6h07K669GXQxGKPpoACVROnahb+aAOFhq1h7sSVh0KwaPoQ1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQURs8kKmikmZGo52ChwFXpGFGNH+UwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk5NDg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhmv MA0GCSqGSIb3DQEBCwUAA4IBAQCMCQ3eb3bcK8CYNx/JYey1qpeYdMujBaTnf/Wf pm/EZckB2oTF2qNsM+rDBkFjeHq6SnDVUeV/0hBDTM+P0CrU8zGlGBY06gL/oVvM mIh0XlQoUbHAfaJiJQOTpxP5UXInyMfZiBPn4PHRKJgMGKpnPQKz+YRopWmDLLTS 9lyQK2hfADpUfsaT/FB4oEm6KRa3jN4M6JDaeQ03jVZnRCyri3ODFci8/2EISqwx 0rEw1tKQP01SThyN2eX+Sas+1yX0CRkeb0USe/9adgaMuwT2diEHYlZJBrpkh+E5 oFX06r2OgVqcCKrw4IPAhc3TSDfjPtje3ONvHmeUivCb1mLb -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client