This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: T7UurRwTFKXvr/ssioKX0JdXyfnnTIDi0OCqgmf5ozY= Subject key identifier: 93:1E:29:4F:E3:12:43:66:77:D1:8B:5A:4E:C3:E8:FF:91:04:92:C5 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7AFE4D53CD5AB9AD391122E00D3C60A5CE77F2ED Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa Signing time: Mon 01 Dec 2025 08:50:56 +0000 ROA not before: Mon 01 Dec 2025 08:45:56 +0000 ROA not after: Mon 30 Nov 2026 08:50:56 +0000 asID: 401776 IP address blocks: 82.21.199.0/24 maxlen: 24 82.24.144.0/24 maxlen: 24 82.25.39.0/24 maxlen: 24 82.27.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fe:4d:53:cd:5a:b9:ad:39:11:22:e0:0d:3c:60:a5:ce:77:f2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 1 08:45:56 2025 GMT Not After : Nov 30 08:50:56 2026 GMT Subject: CN=931E294FE312436677D18B5A4EC3E8FF910492C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:aa:79:57:aa:51:ef:0c:06:16:72:6b:c9: 81:84:7b:ae:3c:96:1c:b0:49:a1:82:8c:f7:e2:f2: bb:a8:f8:b3:0a:f5:43:f6:ac:1a:03:93:5e:3d:c3: 09:8b:53:0d:2e:bc:bb:c3:f8:59:ef:4b:8b:42:7e: df:54:c4:fd:d1:9e:48:d7:99:88:83:b5:62:19:24: 1d:60:5a:72:3e:10:d9:dd:21:c7:45:b5:59:ea:e3: c5:76:ea:2e:01:4d:a0:12:5f:b0:d6:a7:ad:bf:ca: bf:ce:e0:8e:c5:96:e1:6c:dd:5a:64:68:ef:b3:04: 4f:b8:f5:df:3b:f9:8b:40:7a:32:a4:60:f8:92:c2: 97:33:65:af:3b:48:fc:c7:03:cc:ec:88:ce:95:31: 9b:f2:62:34:3c:f3:52:3a:17:6a:10:f0:d8:43:28: f7:8e:1a:22:d9:a1:72:c9:63:58:33:17:ec:ad:57: 37:80:e6:70:3a:8f:31:9e:17:0f:ee:ad:63:5f:9e: f6:6f:aa:63:36:6a:18:88:dd:ff:04:24:7e:b5:a9: 20:d3:d2:75:6f:ed:4d:25:f3:81:b7:7d:5b:3c:ce: 8d:cf:8e:66:4c:f4:ed:70:38:2f:17:35:cd:76:c8: 7f:ae:ea:73:c5:e3:e7:7e:40:5e:8d:c3:25:a3:86: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1E:29:4F:E3:12:43:66:77:D1:8B:5A:4E:C3:E8:FF:91:04:92:C5 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.199.0/24 82.24.144.0/24 82.25.39.0/24 82.27.3.0/24 Signature Algorithm: sha256WithRSAEncryption 99:bd:f9:68:76:c1:b3:cd:90:92:28:2a:7c:ec:04:c9:e5:b3: 25:8e:31:dd:17:d9:5f:f6:36:fc:6d:02:82:7f:2a:d6:17:97: 4d:7a:e3:03:a9:58:b0:be:5f:23:8e:32:b1:72:2a:6f:18:7d: bd:48:ad:92:bf:cf:6b:93:2d:28:08:86:2a:b3:72:c6:9e:bb: 95:68:74:60:4a:ab:da:46:ea:1c:79:43:73:66:46:47:7c:ec: 04:7e:db:50:ad:b8:17:3e:53:5f:11:39:db:1d:6b:b9:8a:db: e2:01:26:46:81:3e:c4:3d:65:4e:bf:99:71:c7:01:6a:4f:b8: 3f:ae:0d:46:4f:6e:0a:1d:32:b6:ab:7b:9f:f3:3d:e5:57:07: 9b:c5:10:d9:ed:8e:97:27:87:46:3a:14:98:d7:7a:ce:f9:2c: 54:d4:21:e4:d2:b4:3e:f7:cd:f0:ac:48:76:79:17:c7:28:1a: d1:cf:3e:f8:c6:34:f9:df:52:35:37:4b:ed:e7:28:b0:96:7e: 51:b2:46:87:c3:e6:1f:35:fa:0b:7a:50:a6:9f:07:ce:32:54: f2:55:bf:b0:57:1e:47:dd:e4:a6:00:6f:b2:93:8f:a8:4e:f9: de:f4:11:33:9c:da:07:7c:fd:cf:79:00:84:d9:cd:29:3f:96: 5a:a4:91:48 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUev5NU81aua05ESLgDTxgpc538u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDEwODQ1NTZaFw0yNjExMzAwODUwNTZaMDMxMTAvBgNV BAMTKDkzMUUyOTRGRTMxMjQzNjY3N0QxOEI1QTRFQzNFOEZGOTEwNDkyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eqp5V6pR7wwGFnJryYGEe648 lhywSaGCjPfi8ruo+LMK9UP2rBoDk149wwmLUw0uvLvD+FnvS4tCft9UxP3RnkjX mYiDtWIZJB1gWnI+ENndIcdFtVnq48V26i4BTaASX7DWp62/yr/O4I7FluFs3Vpk aO+zBE+49d87+YtAejKkYPiSwpczZa87SPzHA8zsiM6VMZvyYjQ881I6F2oQ8NhD KPeOGiLZoXLJY1gzF+ytVzeA5nA6jzGeFw/urWNfnvZvqmM2ahiI3f8EJH61qSDT 0nVv7U0l84G3fVs8zo3PjmZM9O1wOC8XNc12yH+u6nPF4+d+QF6NwyWjhkp/AgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUkx4pT+MSQ2Z30YtaTsPo/5EEksUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUhXH AwQAUhiQAwQAUhknAwQAUhsDMA0GCSqGSIb3DQEBCwUAA4IBAQCZvflodsGzzZCS KCp87ATJ5bMljjHdF9lf9jb8bQKCfyrWF5dNeuMDqViwvl8jjjKxcipvGH29SK2S v89rky0oCIYqs3LGnruVaHRgSqvaRuoceUNzZkZHfOwEfttQrbgXPlNfETnbHWu5 itviASZGgT7EPWVOv5lxxwFqT7g/rg1GT24KHTK2q3uf8z3lVwebxRDZ7Y6XJ4dG OhSY13rO+SxU1CHk0rQ+983wrEh2eRfHKBrRzz74xjT531I1N0vt5yiwln5RskaH w+YfNfoLelCmnwfOMlTyVb+wVx5H3eSmAG+yk4+oTvne9BEznNoHfP3PeQCE2c0p P5ZapJFI -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:59 2025 by rpki-client