This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400556.roa File: AS400556.roa (raw, json) Hash identifier: KIUzWe7Hed1XfLC8SzF0p4558C/BOfIaExGlCn4o9kU= Subject key identifier: D5:AA:E3:91:E4:88:7A:C2:4F:4A:AC:8B:A4:65:9A:0F:37:93:5C:01 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 58C011C06775CF700BC4C78E25E0067AC5D93B60 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400556.roa Signing time: Sat 29 Nov 2025 12:05:09 +0000 ROA not before: Sat 29 Nov 2025 12:00:09 +0000 ROA not after: Sat 28 Nov 2026 12:05:09 +0000 asID: 400556 IP address blocks: 82.22.19.0/24 maxlen: 24 82.22.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c0:11:c0:67:75:cf:70:0b:c4:c7:8e:25:e0:06:7a:c5:d9:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 29 12:00:09 2025 GMT Not After : Nov 28 12:05:09 2026 GMT Subject: CN=D5AAE391E4887AC24F4AAC8BA4659A0F37935C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:a0:49:6b:d5:0a:d6:30:07:08:ac:78:5d: 21:7f:6e:34:ff:70:b8:e4:e2:4d:bc:08:83:b5:23: 94:61:bd:e6:20:07:ad:0b:03:6f:e4:5d:a4:14:a5: 1e:fa:06:79:f3:8d:dd:30:46:21:89:d0:61:96:8f: 17:11:8d:e2:96:40:92:96:f5:3f:ce:7e:07:6c:33: a1:d1:35:07:68:55:bc:78:ea:07:d9:7c:ba:77:b7: 06:09:7b:af:5a:6f:81:81:2e:8c:fb:53:25:94:6b: e9:c2:4f:30:73:f2:9a:2f:36:ca:87:7e:78:ae:6e: ab:79:69:cc:a5:19:7a:a7:f9:43:d1:a9:d5:13:9b: a1:36:85:e3:b9:19:aa:90:58:b6:24:79:82:98:94: 10:9b:14:79:68:02:31:44:29:f7:2c:e8:60:f4:df: 34:e4:21:f4:98:c8:90:ba:09:aa:c3:22:40:58:b8: 70:f8:4d:3e:f6:1b:52:83:49:ba:2e:3e:0d:c6:72: e2:6d:19:b1:07:e0:cd:c9:ac:63:64:7c:d8:88:7d: 5e:d2:b4:10:fb:4c:16:16:bf:b6:2b:c2:c2:94:1e: d8:3d:d4:3a:ac:a6:4d:59:01:0f:6d:ac:15:88:45: 65:48:0a:db:41:29:8a:27:28:73:35:8f:4d:41:ff: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AA:E3:91:E4:88:7A:C2:4F:4A:AC:8B:A4:65:9A:0F:37:93:5C:01 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400556.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.19.0/24 82.22.24.0/24 Signature Algorithm: sha256WithRSAEncryption a3:6f:16:a2:61:7f:48:f0:fb:c0:41:2e:35:b3:c8:a1:3d:74: b1:5d:39:cb:5e:71:67:ff:a1:4b:4f:6e:b8:3d:cc:7d:81:89: ca:c5:cc:01:fd:a8:73:27:ee:e2:42:bf:a6:a6:b2:dd:9f:4c: 4a:14:6e:cd:b5:74:59:40:52:a8:df:0e:64:0b:b5:48:a4:93: bc:16:b4:7e:e7:75:15:5e:61:1e:93:68:9a:21:69:9b:c2:f1: 5d:54:df:09:3a:93:fd:e8:8d:1c:c4:ea:c7:ac:02:1a:6f:97: 56:65:7e:4f:ec:c2:8e:f0:96:da:ac:c7:e7:d2:6e:a3:ff:aa: d3:c9:14:3b:61:d0:d5:7e:11:f9:a2:26:5c:99:89:1a:54:9f: 2f:3f:70:3e:9d:c0:de:b9:32:d3:91:26:9c:75:a6:81:15:d0: c3:ff:3a:fb:ad:61:56:47:b7:83:f6:85:a6:4e:0a:30:b0:c8: ac:3d:9e:60:d4:7d:60:52:81:18:22:61:5c:8a:23:5d:79:2d: b6:d0:42:69:fc:eb:d2:b6:5e:6b:15:40:98:7f:41:ba:fb:4a: 75:6a:f4:8b:fd:f1:95:3f:da:59:17:36:69:60:1b:1d:c1:3b: 08:fc:43:a9:de:c7:0b:e7:c1:fd:f9:b7:b7:5a:69:0a:31:18: 81:59:a4:5b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUWMARwGd1z3ALxMeOJeAGesXZO2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjkxMjAwMDlaFw0yNjExMjgxMjA1MDlaMDMxMTAvBgNV BAMTKEQ1QUFFMzkxRTQ4ODdBQzI0RjRBQUM4QkE0NjU5QTBGMzc5MzVDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDqBJa9UK1jAHCKx4XSF/bjT/ cLjk4k28CIO1I5RhveYgB60LA2/kXaQUpR76Bnnzjd0wRiGJ0GGWjxcRjeKWQJKW 9T/OfgdsM6HRNQdoVbx46gfZfLp3twYJe69ab4GBLoz7UyWUa+nCTzBz8povNsqH fniubqt5acylGXqn+UPRqdUTm6E2heO5GaqQWLYkeYKYlBCbFHloAjFEKfcs6GD0 3zTkIfSYyJC6CarDIkBYuHD4TT72G1KDSbouPg3GcuJtGbEH4M3JrGNkfNiIfV7S tBD7TBYWv7YrwsKUHtg91Dqspk1ZAQ9trBWIRWVICttBKYonKHM1j01B/5QrAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU1arjkeSIesJPSqyLpGWaDzeTXAEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAwNTU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYT AwQAUhYYMA0GCSqGSIb3DQEBCwUAA4IBAQCjbxaiYX9I8PvAQS41s8ihPXSxXTnL XnFn/6FLT264Pcx9gYnKxcwB/ahzJ+7iQr+mprLdn0xKFG7NtXRZQFKo3w5kC7VI pJO8FrR+53UVXmEek2iaIWmbwvFdVN8JOpP96I0cxOrHrAIab5dWZX5P7MKO8Jba rMfn0m6j/6rTyRQ7YdDVfhH5oiZcmYkaVJ8vP3A+ncDeuTLTkSacdaaBFdDD/zr7 rWFWR7eD9oWmTgowsMisPZ5g1H1gUoEYImFciiNdeS220EJp/OvStl5rFUCYf0G6 +0p1avSL/fGVP9pZFzZpYBsdwTsI/EOp3scL58H9+be3WmkKMRiBWaRb -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client