This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400618.roa File: AS400618.roa (raw, json) Hash identifier: mA0PxHhzRzPRQtRgLBpixQIbEGJhWsoFKxM7GwbCpTw= Subject key identifier: F9:13:6A:C5:86:69:6A:51:B4:58:7C:F9:3A:BE:6A:F0:7D:DC:65:09 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 787444EE0EE103484BCF40F9719522551F0C8E17 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400618.roa Signing time: Thu 01 Jan 2026 16:04:23 +0000 ROA not before: Thu 01 Jan 2026 15:59:23 +0000 ROA not after: Thu 31 Dec 2026 16:04:23 +0000 asID: 400618 IP address blocks: 82.40.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:74:44:ee:0e:e1:03:48:4b:cf:40:f9:71:95:22:55:1f:0c:8e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 1 15:59:23 2026 GMT Not After : Dec 31 16:04:23 2026 GMT Subject: CN=F9136AC586696A51B4587CF93ABE6AF07DDC6509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:07:bf:d9:fa:8d:94:da:1a:fc:3c:3d:9f: 94:cf:6f:ac:a6:56:98:5c:93:f8:83:8d:f2:63:70: c8:b9:3c:06:ef:9d:b4:94:c4:f6:48:f5:8e:57:cc: 2e:1b:aa:a8:32:40:80:d2:d4:b7:63:0c:25:b4:0c: 8d:2d:e2:eb:36:c5:8e:90:3d:1b:3c:ea:93:32:a5: 77:8f:c8:a2:90:ef:ba:15:bc:97:c3:26:d1:a9:23: 75:9e:7d:64:ef:35:a9:28:a8:9f:f5:21:4f:ee:48: 1c:0b:f6:84:fc:2b:e0:f7:8c:f2:90:d9:03:c8:bf: 58:55:ea:ce:9f:2a:81:a4:ca:04:4c:41:39:82:fa: 24:7b:2c:98:e0:cf:48:0a:bf:f4:cf:68:a1:b7:90: fc:fa:12:68:ae:da:ec:5e:a0:28:36:84:57:6d:08: ad:d4:c1:18:7e:17:a5:12:28:c3:18:e8:fb:9e:db: 21:c1:84:83:54:b5:c5:bb:76:76:ca:6d:46:1d:59: 67:5f:2b:5d:d5:62:b6:2f:79:d0:ce:a6:02:b3:58: aa:e1:75:10:d2:0d:86:06:09:47:f3:5a:c7:a3:c6: 21:0a:c2:60:af:05:f2:12:e2:3c:28:3f:4e:d5:5f: 81:5c:4a:8b:c4:60:20:57:6a:a1:da:77:3d:36:3d: 3c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:13:6A:C5:86:69:6A:51:B4:58:7C:F9:3A:BE:6A:F0:7D:DC:65:09 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.40.32.0/22 Signature Algorithm: sha256WithRSAEncryption 31:b7:b9:aa:d8:1d:53:86:09:ad:8a:7f:6b:d9:1e:4a:79:10: 5a:db:bd:17:52:52:a4:81:89:62:4e:d1:62:ac:b3:ad:74:70: c3:3b:73:2c:97:dd:df:06:2b:40:0f:30:23:99:bf:66:85:1c: ad:9e:cd:32:32:cd:6c:fb:ce:1c:d9:74:40:56:da:4c:59:8c: 89:a2:63:01:86:cd:98:29:45:6e:88:a4:92:32:3d:3a:e3:57: 08:92:36:5e:a9:3a:bb:e8:c4:3c:a6:c9:64:53:0c:a0:4d:9d: d2:6a:95:50:74:b5:69:0f:32:da:6c:06:74:3b:4b:ef:63:9a: 37:23:b7:db:de:b9:62:0e:7c:a0:fb:ff:57:90:d5:8c:ff:43: d3:6d:ab:2c:ac:27:13:ee:57:9f:20:00:ef:55:b9:6f:e2:24: 4d:3b:5c:28:f2:09:68:c1:16:00:23:36:1d:3d:1c:12:96:26: ef:62:9b:c0:1e:0d:a2:cf:c8:06:1b:b7:42:24:d3:9e:52:2d: d4:13:c0:0a:d9:e5:62:f5:00:6c:58:25:87:a0:c8:72:c9:1e: b9:7c:38:32:9b:ef:62:f3:16:b8:0f:63:60:ae:7d:90:47:09: 4f:b3:44:c9:59:44:c7:bd:95:26:f5:25:0d:f6:a6:aa:aa:e6: 30:9e:49:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUeHRE7g7hA0hLz0D5cZUiVR8MjhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDExNTU5MjNaFw0yNjEyMzExNjA0MjNaMDMxMTAvBgNV BAMTKEY5MTM2QUM1ODY2OTZBNTFCNDU4N0NGOTNBQkU2QUYwN0REQzY1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGge/2fqNlNoa/Dw9n5TPb6ym Vphck/iDjfJjcMi5PAbvnbSUxPZI9Y5XzC4bqqgyQIDS1LdjDCW0DI0t4us2xY6Q PRs86pMypXePyKKQ77oVvJfDJtGpI3WefWTvNakoqJ/1IU/uSBwL9oT8K+D3jPKQ 2QPIv1hV6s6fKoGkygRMQTmC+iR7LJjgz0gKv/TPaKG3kPz6Emiu2uxeoCg2hFdt CK3UwRh+F6USKMMY6Pue2yHBhINUtcW7dnbKbUYdWWdfK13VYrYvedDOpgKzWKrh dRDSDYYGCUfzWsejxiEKwmCvBfIS4jwoP07VX4FcSovEYCBXaqHadz02PTwTAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU+RNqxYZpalG0WHz5Or5q8H3cZQkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAwNjE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUigg MA0GCSqGSIb3DQEBCwUAA4IBAQAxt7mq2B1Thgmtin9r2R5KeRBa270XUlKkgYli TtFirLOtdHDDO3Msl93fBitADzAjmb9mhRytns0yMs1s+84c2XRAVtpMWYyJomMB hs2YKUVuiKSSMj0641cIkjZeqTq76MQ8pslkUwygTZ3SapVQdLVpDzLabAZ0O0vv Y5o3I7fb3rliDnyg+/9XkNWM/0PTbassrCcT7lefIADvVblv4iRNO1wo8glowRYA IzYdPRwSlibvYpvAHg2iz8gGG7dCJNOeUi3UE8AK2eVi9QBsWCWHoMhyyR65fDgy m+9i8xa4D2Ngrn2QRwlPs0TJWUTHvZUm9SUN9qaqquYwnknM -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:24 2026 by rpki-client