This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa File: AS42689.roa (raw, json) Hash identifier: NxNNUhNSZCZ411XjlbXr04xXH9HubHzYZbu1Y0AifXs= Subject key identifier: 5A:96:F0:76:67:98:3F:60:AB:9A:62:43:AB:1D:67:1F:E2:62:3B:43 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6DB7B9D25EED37FFB6F83BBAC85CD3A92DCB1DC7 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa Signing time: Tue 25 Nov 2025 07:47:59 +0000 ROA not before: Tue 25 Nov 2025 07:42:59 +0000 ROA not after: Tue 24 Nov 2026 07:47:59 +0000 asID: 42689 IP address blocks: 82.24.188.0/24 maxlen: 24 82.25.137.0/24 maxlen: 24 82.25.141.0/24 maxlen: 24 82.25.144.0/24 maxlen: 24 82.25.184.0/24 maxlen: 24 82.27.9.0/24 maxlen: 24 82.27.99.0/24 maxlen: 24 82.27.104.0/24 maxlen: 24 82.27.120.0/24 maxlen: 24 82.27.206.0/24 maxlen: 24 82.39.230.0/24 maxlen: 24 82.39.231.0/24 maxlen: 24 82.39.246.0/24 maxlen: 24 82.39.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b7:b9:d2:5e:ed:37:ff:b6:f8:3b:ba:c8:5c:d3:a9:2d:cb:1d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 25 07:42:59 2025 GMT Not After : Nov 24 07:47:59 2026 GMT Subject: CN=5A96F07667983F60AB9A6243AB1D671FE2623B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:2d:8c:82:d1:2b:c8:2e:2f:9e:fb:6d:82: e3:f5:10:16:da:b6:50:86:44:0d:25:38:92:60:0c: 19:d8:13:85:9e:3d:e6:e5:e9:14:44:fd:46:56:fa: 2b:c1:e5:c4:9f:10:69:d1:7a:78:24:ce:0b:d5:bb: 23:ba:7b:4d:55:49:da:8e:ee:7e:3a:5a:65:fa:9b: 79:09:f6:4e:61:aa:61:b0:37:5e:fe:00:c1:e1:08: 75:c7:b2:8a:ed:6e:c8:7e:4c:51:10:8c:d8:2f:8e: 91:2a:f7:0e:80:87:ad:2c:d1:f1:c5:65:6d:fd:73: 47:55:78:7a:b2:1a:4b:df:e6:bb:0c:df:a3:de:25: d9:19:63:1f:0f:ac:41:58:87:82:46:1f:7c:0e:c6: 58:0b:5f:6c:42:fb:02:55:15:0a:19:ae:d5:79:9d: 3e:5c:b4:06:6f:1d:ce:b1:7d:16:b6:25:da:19:f6: c9:c7:6d:35:b5:04:4b:82:d8:85:05:44:ad:c0:71: 75:46:8c:c0:98:1a:3c:ea:d0:6d:f2:aa:81:a4:88: 6b:c4:b2:7b:0b:70:ab:b7:2d:31:86:c4:df:44:2c: 94:bf:c1:55:60:d4:15:d5:92:11:ec:d9:91:af:e9: 6b:ea:83:bb:f3:d9:f2:3e:c7:c2:28:09:f9:2a:8b: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:96:F0:76:67:98:3F:60:AB:9A:62:43:AB:1D:67:1F:E2:62:3B:43 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.24.188.0/24 82.25.137.0/24 82.25.141.0/24 82.25.144.0/24 82.25.184.0/24 82.27.9.0/24 82.27.99.0/24 82.27.104.0/24 82.27.120.0/24 82.27.206.0/24 82.39.230.0/23 82.39.246.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:38:09:df:6c:70:7f:c1:7e:8e:7c:1a:02:0a:f7:35:e9:aa: 51:dc:33:db:f6:90:0e:1e:20:5b:9a:94:77:50:e2:7b:5f:ef: 13:db:35:f5:b0:b8:74:5f:c8:1b:e7:5e:79:a2:6f:79:8b:c2: b4:2e:75:89:0e:c4:1d:4d:9e:25:33:34:b0:47:cf:4d:e3:0a: 11:2f:6a:c8:72:8b:a7:71:d8:cf:c7:9f:e7:9e:43:cf:d6:3e: fd:91:b2:eb:c1:20:df:39:2d:39:b4:80:87:fb:33:7f:82:f0: 6e:0b:c1:c1:dc:af:32:b0:83:68:a9:ae:5b:28:9c:4b:72:a2: cb:07:ac:8b:6d:5f:fe:64:ea:cf:63:25:5f:86:fd:15:9a:70: 5a:f3:c0:fc:c7:55:c0:ea:b1:10:a3:ee:0b:a7:d3:d4:ae:c5: ed:a2:9b:7e:02:1f:2a:ce:44:83:5a:3c:1d:85:9c:b2:92:fc: 38:12:01:a2:b5:d4:65:b2:3c:c4:fd:e8:4e:9c:67:2f:14:31: b8:8b:75:24:08:68:a5:01:be:3f:2c:62:c8:81:d0:38:5e:42: ee:a5:50:28:05:2f:1d:8d:20:cb:9a:76:06:c0:41:c5:77:62: 8b:ec:e9:ee:1f:73:9a:b7:45:db:f8:f8:a2:04:c7:66:a4:2f: d0:cd:67:ec -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUbbe50l7tN/+2+Du6yFzTqS3LHccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjUwNzQyNTlaFw0yNjExMjQwNzQ3NTlaMDMxMTAvBgNV BAMTKDVBOTZGMDc2Njc5ODNGNjBBQjlBNjI0M0FCMUQ2NzFGRTI2MjNCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47i2MgtEryC4vnvttguP1EBba tlCGRA0lOJJgDBnYE4WePebl6RRE/UZW+ivB5cSfEGnRengkzgvVuyO6e01VSdqO 7n46WmX6m3kJ9k5hqmGwN17+AMHhCHXHsortbsh+TFEQjNgvjpEq9w6Ah60s0fHF ZW39c0dVeHqyGkvf5rsM36PeJdkZYx8PrEFYh4JGH3wOxlgLX2xC+wJVFQoZrtV5 nT5ctAZvHc6xfRa2JdoZ9snHbTW1BEuC2IUFRK3AcXVGjMCYGjzq0G3yqoGkiGvE snsLcKu3LTGGxN9ELJS/wVVg1BXVkhHs2ZGv6Wvqg7vz2fI+x8IoCfkqi0x9AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUWpbwdmeYP2CrmmJDqx1nH+JiO0MwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwYQYIKwYBBQUHAQcBAf8EUjBQME4EAgABMEgDBABSGLwD BABSGYkDBABSGY0DBABSGZADBABSGbgDBABSGwkDBABSG2MDBABSG2gDBABSG3gD BABSG84DBAFSJ+YDBAFSJ/YwDQYJKoZIhvcNAQELBQADggEBABs4Cd9scH/Bfo58 GgIK9zXpqlHcM9v2kA4eIFualHdQ4ntf7xPbNfWwuHRfyBvnXnmib3mLwrQudYkO xB1NniUzNLBHz03jChEvashyi6dx2M/Hn+eeQ8/WPv2RsuvBIN85LTm0gIf7M3+C 8G4LwcHcrzKwg2iprlsonEtyossHrIttX/5k6s9jJV+G/RWacFrzwPzHVcDqsRCj 7gun09Suxe2im34CHyrORINaPB2FnLKS/DgSAaK11GWyPMT96E6cZy8UMbiLdSQI aKUBvj8sYsiB0DheQu6lUCgFLx2NIMuadgbAQcV3Yovs6e4fc5q3Rdv4+KIEx2ak L9DNZ+w= -----END CERTIFICATE-----Generated at Thu Dec 4 06:02:00 2025 by rpki-client