This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400529.roa File: AS400529.roa (raw, json) Hash identifier: KiimUNtlJ5xPi6A3NDHmhaxgwiq9IE+adgiSHvsvZz8= Subject key identifier: 9C:81:23:E4:89:EA:8F:E0:1E:54:C0:7B:83:2F:9D:D6:5B:01:E3:B6 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 17729AF1F0969AFBE39EBB230C96DC72E9910E5F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400529.roa Signing time: Wed 26 Nov 2025 22:37:21 +0000 ROA not before: Wed 26 Nov 2025 22:32:21 +0000 ROA not after: Wed 25 Nov 2026 22:37:21 +0000 asID: 400529 IP address blocks: 82.39.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:72:9a:f1:f0:96:9a:fb:e3:9e:bb:23:0c:96:dc:72:e9:91:0e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 22:32:21 2025 GMT Not After : Nov 25 22:37:21 2026 GMT Subject: CN=9C8123E489EA8FE01E54C07B832F9DD65B01E3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:03:34:93:82:42:81:4c:a3:0d:ab:eb:62: 5f:ca:b5:78:41:3e:aa:7d:5a:ef:5b:4a:b8:5f:30: 0a:2c:59:bc:ec:7b:17:da:18:11:e4:15:b6:c7:5f: db:b3:01:0e:92:92:b8:b6:e6:0d:b3:79:93:ae:2b: 35:22:f9:a6:bf:98:a9:67:54:c5:bf:d1:73:74:31: 06:c8:36:8b:b0:2a:8c:f5:01:2d:97:aa:da:00:ac: be:6f:91:ad:e8:e5:b5:1c:c6:eb:eb:9f:62:b6:88: 6a:bd:1e:82:d8:d9:28:2c:af:dd:5f:fb:39:7c:04: 82:80:14:58:46:27:a7:2b:aa:56:7b:65:9b:c1:b2: d8:51:21:cd:c2:35:d3:f5:68:78:c2:1d:79:b0:c6: ed:7e:91:e3:34:3f:dc:b1:9b:64:d9:fa:88:43:96: 29:5d:28:6a:d4:bf:8c:95:76:b6:a3:86:fd:fe:bf: ee:12:09:93:b0:3b:01:f1:31:44:15:e9:32:c7:de: 2d:97:34:fd:61:2b:0c:45:be:25:9d:37:37:e1:a5: 9d:ae:c7:61:64:9c:c8:c5:a1:eb:13:1b:15:ec:b9: fb:d9:df:b4:9f:b4:6e:80:76:f0:08:67:72:90:db: a7:f5:c9:df:88:9b:3a:9a:0a:92:2e:02:ba:b1:a5: ef:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:81:23:E4:89:EA:8F:E0:1E:54:C0:7B:83:2F:9D:D6:5B:01:E3:B6 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.132.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ac:80:72:3b:3e:26:9f:f7:a9:b5:66:83:d3:39:c2:7d:66: 14:93:fd:49:3f:01:6f:53:fa:83:d8:1b:09:e0:2d:a9:6e:45: fd:9a:2f:ec:4b:79:35:b1:e4:90:c6:3a:d0:44:ae:17:03:04: 5d:6d:95:5d:3e:6f:44:bc:7b:7d:6a:3b:d2:7b:3b:c4:bf:77: 04:ad:61:04:54:5b:f2:2d:68:37:8e:1f:0d:b6:02:d1:f1:04: 65:44:dd:34:85:46:73:a2:66:e4:8c:69:25:9e:ae:67:54:c7: a9:3e:05:5a:72:bc:61:f8:dd:2f:88:c8:9b:2c:77:5b:32:4b: cd:90:14:4a:5b:c1:13:b7:44:d1:d2:3c:41:22:dd:97:a4:51: 61:20:8a:8b:fd:82:8d:b1:c0:b1:fe:ad:4e:2e:6b:6b:f0:9c: 80:64:50:04:7a:c4:d2:13:6c:63:79:b5:19:b1:8e:03:9a:db: 79:0f:29:47:76:f3:28:09:c5:85:dd:db:09:88:ac:d4:41:e8: 04:0a:ea:00:2d:69:de:40:b2:93:20:74:2c:cf:31:61:a2:54: 87:85:ab:c9:b7:fe:60:01:fd:c6:01:f4:c9:ad:1b:83:8f:0d: 45:a0:06:61:8b:9d:33:a9:d7:81:59:5e:f6:8b:ec:a0:71:bf: c0:3d:da:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUF3Ka8fCWmvvjnrsjDJbccumRDl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYyMjMyMjFaFw0yNjExMjUyMjM3MjFaMDMxMTAvBgNV BAMTKDlDODEyM0U0ODlFQThGRTAxRTU0QzA3QjgzMkY5REQ2NUIwMUUzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrAM0k4JCgUyjDavrYl/KtXhB Pqp9Wu9bSrhfMAosWbzsexfaGBHkFbbHX9uzAQ6Skri25g2zeZOuKzUi+aa/mKln VMW/0XN0MQbINouwKoz1AS2XqtoArL5vka3o5bUcxuvrn2K2iGq9HoLY2Sgsr91f +zl8BIKAFFhGJ6crqlZ7ZZvBsthRIc3CNdP1aHjCHXmwxu1+keM0P9yxm2TZ+ohD lildKGrUv4yVdrajhv3+v+4SCZOwOwHxMUQV6TLH3i2XNP1hKwxFviWdNzfhpZ2u x2FknMjFoesTGxXsufvZ37SftG6AdvAIZ3KQ26f1yd+ImzqaCpIuArqxpe+xAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUnIEj5Inqj+AeVMB7gy+d1lsB47YwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAwNTI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUieE MA0GCSqGSIb3DQEBCwUAA4IBAQB3rIByOz4mn/eptWaD0znCfWYUk/1JPwFvU/qD 2BsJ4C2pbkX9mi/sS3k1seSQxjrQRK4XAwRdbZVdPm9EvHt9ajvSezvEv3cErWEE VFvyLWg3jh8NtgLR8QRlRN00hUZzombkjGklnq5nVMepPgVacrxh+N0viMibLHdb MkvNkBRKW8ETt0TR0jxBIt2XpFFhIIqL/YKNscCx/q1OLmtr8JyAZFAEesTSE2xj ebUZsY4Dmtt5DylHdvMoCcWF3dsJiKzUQegECuoALWneQLKTIHQszzFholSHhavJ t/5gAf3GAfTJrRuDjw1FoAZhi50zqdeBWV72i+ygcb/APdpb -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:42 2025 by rpki-client