This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399989.roa File: AS399989.roa (raw, json) Hash identifier: Q49/PRHbHmLJpIlV7gQB0mqefAOgBfaopnXhSetEpvQ= Subject key identifier: 58:7F:76:46:FA:0D:FA:7F:E9:35:9C:02:D4:C4:50:20:1B:03:2B:3D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3B5E4BFFB18D156B509EE766D1115BBDCC052B91 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399989.roa Signing time: Sun 21 Dec 2025 18:39:29 +0000 ROA not before: Sun 21 Dec 2025 18:34:29 +0000 ROA not after: Sun 20 Dec 2026 18:39:29 +0000 asID: 399989 IP address blocks: 82.38.176.0/22 maxlen: 24 82.38.184.0/22 maxlen: 24 82.38.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5e:4b:ff:b1:8d:15:6b:50:9e:e7:66:d1:11:5b:bd:cc:05:2b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 21 18:34:29 2025 GMT Not After : Dec 20 18:39:29 2026 GMT Subject: CN=587F7646FA0DFA7FE9359C02D4C450201B032B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:ef:bc:92:38:58:c3:e3:94:23:56:2e:bd: a1:c6:a2:28:4b:16:f8:8f:57:98:a4:ca:8b:66:10: 92:45:10:c1:f2:8b:06:e3:b2:75:43:78:ef:fe:03: 86:6d:e4:93:8b:31:1e:c3:45:40:7f:c5:d2:50:17: aa:f2:72:65:b2:56:41:b4:32:33:5e:5d:4b:f1:b7: b3:4d:53:52:78:56:06:d6:44:09:3e:fe:f8:6d:6b: c7:aa:b4:86:57:6e:ad:c3:41:ee:83:5b:75:92:ad: d7:4a:95:c4:65:26:7e:ff:a2:9c:23:0a:55:9b:f7: 13:81:8d:a7:8e:4c:70:bd:ca:93:bf:2e:77:d6:c4: 22:53:d6:f9:c8:86:08:8a:be:f5:fc:f6:8b:90:9d: 4f:a4:c0:1a:db:28:2d:a6:bc:ff:28:07:51:be:00: 65:75:8a:6b:52:01:20:1a:9c:5d:e1:3c:85:35:8e: e5:3a:be:03:73:8d:8a:fa:a5:4b:27:90:ff:0f:11: e4:8a:8a:05:cf:0c:1c:ff:44:1c:c6:36:be:ab:9d: 4a:9a:da:b4:cb:45:63:a7:43:5e:6e:31:97:3e:08: bf:d3:a8:1d:e4:b0:1d:44:69:d4:5e:16:da:49:d3: 82:26:38:85:c2:4a:40:63:67:07:83:88:87:0c:80: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:76:46:FA:0D:FA:7F:E9:35:9C:02:D4:C4:50:20:1B:03:2B:3D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.176.0/22 82.38.184.0/21 Signature Algorithm: sha256WithRSAEncryption 59:b3:2c:a0:ae:81:94:3c:e3:99:21:a7:9d:b2:38:ea:0c:4e: ce:71:16:5c:88:96:f2:b8:a8:0d:ea:58:17:9d:ab:06:34:7d: 3d:9f:bf:55:83:b2:1c:f8:c6:fa:ab:93:01:fa:13:d7:3e:2c: ee:60:b1:79:3b:75:f2:0b:73:08:86:81:62:5a:d1:d3:8b:5a: 7f:73:0a:23:54:39:57:3f:01:d1:f7:62:2d:36:35:84:21:b0: 1c:18:ff:ed:ed:65:c5:fc:48:73:67:eb:0f:46:6c:31:69:49: bf:ed:8c:b0:49:9f:2b:5e:59:de:03:c1:97:e2:87:ff:28:ae: 78:07:4e:df:fc:4f:68:08:43:23:3e:85:a5:db:28:ff:c1:ac: 46:9c:34:57:7b:aa:df:a7:7b:a2:29:8d:ee:8a:0e:de:aa:b4: b8:bb:88:68:ab:3a:98:44:33:f9:e2:7b:60:a5:bc:f9:d5:ef: 0f:84:4c:ef:de:85:10:87:e6:7a:06:46:28:11:43:05:02:a5: 15:dd:17:a0:86:41:7a:b8:f7:e5:d8:be:e0:74:92:50:ce:fe: ef:d7:7d:98:e6:38:8a:99:59:b1:9e:e1:e3:34:e3:a8:85:09: e4:53:ad:f6:80:c7:16:a6:ce:1f:fc:68:9b:15:6d:e1:0d:5b: 01:60:59:63 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUO15L/7GNFWtQnudm0RFbvcwFK5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjExODM0MjlaFw0yNjEyMjAxODM5MjlaMDMxMTAvBgNV BAMTKDU4N0Y3NjQ2RkEwREZBN0ZFOTM1OUMwMkQ0QzQ1MDIwMUIwMzJCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMe+8kjhYw+OUI1YuvaHGoihL FviPV5ikyotmEJJFEMHyiwbjsnVDeO/+A4Zt5JOLMR7DRUB/xdJQF6rycmWyVkG0 MjNeXUvxt7NNU1J4VgbWRAk+/vhta8eqtIZXbq3DQe6DW3WSrddKlcRlJn7/opwj ClWb9xOBjaeOTHC9ypO/LnfWxCJT1vnIhgiKvvX89ouQnU+kwBrbKC2mvP8oB1G+ AGV1imtSASAanF3hPIU1juU6vgNzjYr6pUsnkP8PEeSKigXPDBz/RBzGNr6rnUqa 2rTLRWOnQ15uMZc+CL/TqB3ksB1EadReFtpJ04ImOIXCSkBjZweDiIcMgLD/AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUWH92RvoN+n/pNZwC1MRQIBsDKz0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk5OTg5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUiaw AwQDUia4MA0GCSqGSIb3DQEBCwUAA4IBAQBZsyygroGUPOOZIaedsjjqDE7OcRZc iJbyuKgN6lgXnasGNH09n79Vg7Ic+Mb6q5MB+hPXPizuYLF5O3XyC3MIhoFiWtHT i1p/cwojVDlXPwHR92ItNjWEIbAcGP/t7WXF/EhzZ+sPRmwxaUm/7YywSZ8rXlne A8GX4of/KK54B07f/E9oCEMjPoWl2yj/waxGnDRXe6rfp3uiKY3uig7eqrS4u4ho qzqYRDP54ntgpbz51e8PhEzv3oUQh+Z6BkYoEUMFAqUV3ReghkF6uPfl2L7gdJJQ zv7v132Y5jiKmVmxnuHjNOOohQnkU632gMcWps4f/GibFW3hDVsBYFlj -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:14 2026 by rpki-client