This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41717.roa File: AS41717.roa (raw, json) Hash identifier: 2fT86iMGsBoxLJRh/E22gaRzDZL8fmWSPOcT4jKKq6E= Subject key identifier: A9:11:74:89:09:9E:9E:D7:D8:5A:81:90:BE:65:9C:32:5E:63:06:FC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4FCB61C6A4154B125FF68C6B50666404E7C6C55F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41717.roa Signing time: Sun 23 Nov 2025 18:22:06 +0000 ROA not before: Sun 23 Nov 2025 18:17:06 +0000 ROA not after: Sun 22 Nov 2026 18:22:06 +0000 asID: 41717 IP address blocks: 82.29.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:61:c6:a4:15:4b:12:5f:f6:8c:6b:50:66:64:04:e7:c6:c5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 23 18:17:06 2025 GMT Not After : Nov 22 18:22:06 2026 GMT Subject: CN=A9117489099E9ED7D85A8190BE659C325E6306FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:34:22:3e:6e:a2:5b:05:db:f5:cb:cf:6f: c2:27:55:df:f1:26:26:78:40:8f:60:1f:2f:60:b7: ad:52:fe:12:86:ab:41:4c:05:eb:15:12:94:a0:86: 1b:81:ce:bc:5b:23:7d:32:d6:41:10:ea:93:5f:5a: d1:f0:d8:61:d5:65:34:2b:e9:ca:50:e5:f0:db:fa: ed:99:09:71:2d:d4:4d:e2:c9:7c:b0:c4:13:af:69: 24:20:bf:d3:98:80:43:1b:cf:70:9c:26:dc:b2:cd: 80:6a:e9:3d:56:84:a4:53:d9:83:77:60:35:a3:cb: 5e:db:86:3c:bb:77:b4:a3:04:3e:0c:2c:a2:33:7a: a5:f6:38:63:4a:8a:94:94:a0:07:a7:88:54:2c:c4: 79:b7:ef:87:bc:c6:02:7e:68:59:29:84:02:75:34: 74:45:28:23:22:24:ff:ff:eb:22:3c:17:e5:b6:50: 24:66:42:80:bb:d7:f0:4e:4c:ac:6c:f0:35:e6:da: 62:80:65:37:9d:5d:1a:b4:cd:79:c8:94:be:ac:51: 5b:cd:e9:e4:c4:38:c6:83:b5:ab:8f:36:95:58:7f: 22:c1:11:f3:2f:3f:bc:0c:2a:46:47:c9:c8:11:c2: 2b:de:92:aa:0d:16:6a:5b:b1:13:99:10:12:52:32: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:11:74:89:09:9E:9E:D7:D8:5A:81:90:BE:65:9C:32:5E:63:06:FC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.29.41.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:86:c2:76:dc:11:8f:ae:b5:51:33:08:30:5c:ba:cf:5c:69: 31:7e:fb:9a:90:36:bc:6b:07:75:dc:f2:3d:ab:32:9a:84:f3: 8e:96:0c:58:be:70:c9:70:19:fe:33:3c:49:94:c7:15:73:95: ce:95:21:fe:a3:7d:27:9a:ae:4c:f7:52:e8:07:d6:16:25:ee: 67:14:fc:d4:05:36:1d:a6:15:e5:a4:bf:35:0c:97:c5:95:f1: 58:70:ea:42:8f:2b:7f:75:cd:c0:29:6c:19:c4:5f:dc:db:08: 6f:99:67:e0:b0:59:26:21:db:04:d1:e6:d0:19:81:2c:c0:a2: 54:f5:fe:4e:6c:c1:e4:cf:3d:f3:2c:af:ec:27:b8:6c:4f:8a: 76:7a:86:71:0c:ec:f8:24:a5:ae:25:3c:db:e3:bb:de:88:ec: f4:16:60:41:ef:40:13:80:52:8f:09:62:a3:86:d1:3f:74:bf: 33:1e:d9:5a:ff:10:44:5f:0b:fd:7f:51:9f:86:9e:f6:5c:6f: bd:24:37:63:d8:72:e5:fa:eb:64:4d:cb:0e:13:45:87:5a:32: af:34:3a:b7:6f:5d:f4:23:f1:0f:ab:ec:15:f5:6f:93:58:49: 42:da:54:77:b6:b4:f0:53:94:1c:76:41:e8:4e:6e:78:c1:b8: 95:a7:85:a4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUT8thxqQVSxJf9oxrUGZkBOfGxV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjMxODE3MDZaFw0yNjExMjIxODIyMDZaMDMxMTAvBgNV BAMTKEE5MTE3NDg5MDk5RTlFRDdEODVBODE5MEJFNjU5QzMyNUU2MzA2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3TQiPm6iWwXb9cvPb8InVd/x JiZ4QI9gHy9gt61S/hKGq0FMBesVEpSghhuBzrxbI30y1kEQ6pNfWtHw2GHVZTQr 6cpQ5fDb+u2ZCXEt1E3iyXywxBOvaSQgv9OYgEMbz3CcJtyyzYBq6T1WhKRT2YN3 YDWjy17bhjy7d7SjBD4MLKIzeqX2OGNKipSUoAeniFQsxHm374e8xgJ+aFkphAJ1 NHRFKCMiJP//6yI8F+W2UCRmQoC71/BOTKxs8DXm2mKAZTedXRq0zXnIlL6sUVvN 6eTEOMaDtauPNpVYfyLBEfMvP7wMKkZHycgRwivekqoNFmpbsROZEBJSMg0RAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUqRF0iQmentfYWoGQvmWcMl5jBvwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDE3MTcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSHSkw DQYJKoZIhvcNAQELBQADggEBAB+GwnbcEY+utVEzCDBcus9caTF++5qQNrxrB3Xc 8j2rMpqE846WDFi+cMlwGf4zPEmUxxVzlc6VIf6jfSearkz3UugH1hYl7mcU/NQF Nh2mFeWkvzUMl8WV8Vhw6kKPK391zcApbBnEX9zbCG+ZZ+CwWSYh2wTR5tAZgSzA olT1/k5sweTPPfMsr+wnuGxPinZ6hnEM7Pgkpa4lPNvju96I7PQWYEHvQBOAUo8J YqOG0T90vzMe2Vr/EERfC/1/UZ+GnvZcb70kN2PYcuX662RNyw4TRYdaMq80Ordv XfQj8Q+r7BX1b5NYSULaVHe2tPBTlBx2QehObnjBuJWnhaQ= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:44 2025 by rpki-client