This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43851.roa File: AS43851.roa (raw, json) Hash identifier: 9Cyk1go2tSTqzHgKS6rPYicbrZs9WrgBPMElR25Gbhg= Subject key identifier: 76:DB:25:C5:AE:C8:26:D9:E8:64:C9:61:DB:72:B2:86:83:E5:CA:EB Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 5B34394C290FAA488BCD067D569E8593AA32D6B5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43851.roa Signing time: Mon 24 Nov 2025 15:20:31 +0000 ROA not before: Mon 24 Nov 2025 15:15:31 +0000 ROA not after: Mon 23 Nov 2026 15:20:31 +0000 asID: 43851 IP address blocks: 82.38.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:34:39:4c:29:0f:aa:48:8b:cd:06:7d:56:9e:85:93:aa:32:d6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 15:15:31 2025 GMT Not After : Nov 23 15:20:31 2026 GMT Subject: CN=76DB25C5AEC826D9E864C961DB72B28683E5CAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:99:9b:d8:0c:d5:00:08:a1:72:73:fa:6b:2f: e5:c5:09:bb:c8:6c:8d:0d:9d:33:ba:42:da:03:6d: 91:a6:c9:98:21:24:ef:96:d1:c8:a2:c0:fd:dc:e6: 63:88:6d:2f:ce:58:5d:3c:c4:7f:28:1f:12:e8:4b: c0:12:4b:30:c0:1e:51:39:68:ca:2d:03:d7:6d:4c: 13:ec:0d:63:bf:78:c8:61:b3:3b:67:9e:10:ec:30: c9:36:ed:a2:70:fb:0c:91:89:d4:63:48:67:64:73: 55:6e:fa:b7:6b:3d:61:95:b9:e6:54:58:d6:6d:e3: e1:73:fd:e2:f1:99:9d:48:5c:dd:2a:9e:bf:39:79: 97:84:4f:8c:ee:21:71:10:8d:11:68:01:98:ca:6d: fd:1b:54:7f:90:ce:46:c6:0a:c1:57:d6:a8:05:4e: 13:a0:9d:02:7b:fe:e2:3e:b1:68:e7:52:f9:84:73: 38:34:e2:97:1c:02:a9:9d:c7:68:fa:2a:05:48:89: 5d:8e:ab:a5:9d:9a:f6:43:52:83:d6:a0:56:64:2f: b9:cf:17:d2:cb:e5:28:79:20:14:30:b4:30:4c:e0: 74:1a:78:7f:f6:97:7e:94:8b:10:44:b8:bf:ca:aa: bf:61:3b:54:4d:d1:71:3d:ce:82:b3:90:d0:49:dc: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:25:C5:AE:C8:26:D9:E8:64:C9:61:DB:72:B2:86:83:E5:CA:EB X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43851.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.0.0/24 Signature Algorithm: sha256WithRSAEncryption 30:73:ff:d0:1b:d1:2e:81:45:2f:8d:9d:5b:70:ca:65:85:00: c5:40:74:43:6e:e8:9f:1d:a4:5d:d2:b4:ef:a8:b4:6f:d2:12: 92:85:1d:90:dc:48:2c:a5:dd:76:89:b7:38:bc:c1:c5:94:86: 84:83:a9:6e:37:5a:20:2a:41:db:f0:4e:4b:be:fd:c3:39:f8: b0:48:7b:11:66:77:ad:71:e5:63:b5:cc:f5:a3:e2:75:e2:d0: 87:65:27:8d:aa:bc:d8:9a:d8:59:23:cb:dd:1e:fc:6a:15:e1: 33:0f:23:a7:c2:89:9f:01:d8:ed:fe:01:ff:35:af:58:0b:83: 7f:10:40:56:c9:bd:6c:48:76:1e:67:b9:e0:fc:de:4f:f9:4f: 07:65:dc:89:2b:09:06:19:26:d5:13:fc:c7:d2:76:a1:5c:42: c2:89:b9:1d:42:72:f1:1a:32:ff:8b:ec:2e:65:8c:5d:40:f6: 28:4c:29:dc:de:4e:f7:04:cb:fd:3f:89:1c:43:0e:31:f4:34: a1:e0:19:8c:32:95:b2:4c:7c:3f:ee:75:70:61:6a:c9:e8:82: 5a:b0:42:a9:bb:66:e3:82:23:de:d2:38:56:df:ff:da:2c:b8: 90:65:c8:78:bd:af:5e:de:d1:a5:df:86:a2:f0:a5:78:0c:9a: d8:af:13:c9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUWzQ5TCkPqkiLzQZ9Vp6Fk6oy1rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQxNTE1MzFaFw0yNjExMjMxNTIwMzFaMDMxMTAvBgNV BAMTKDc2REIyNUM1QUVDODI2RDlFODY0Qzk2MURCNzJCMjg2ODNFNUNBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimZvYDNUACKFyc/prL+XFCbvI bI0NnTO6QtoDbZGmyZghJO+W0ciiwP3c5mOIbS/OWF08xH8oHxLoS8ASSzDAHlE5 aMotA9dtTBPsDWO/eMhhsztnnhDsMMk27aJw+wyRidRjSGdkc1Vu+rdrPWGVueZU WNZt4+Fz/eLxmZ1IXN0qnr85eZeET4zuIXEQjRFoAZjKbf0bVH+QzkbGCsFX1qgF ThOgnQJ7/uI+sWjnUvmEczg04pccAqmdx2j6KgVIiV2Oq6WdmvZDUoPWoFZkL7nP F9LL5Sh5IBQwtDBM4HQaeH/2l36UixBEuL/Kqr9hO1RN0XE9zoKzkNBJ3OUTAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUdtslxa7IJtnoZMlh23KyhoPlyuswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDM4NTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJgAw DQYJKoZIhvcNAQELBQADggEBADBz/9Ab0S6BRS+NnVtwymWFAMVAdENu6J8dpF3S tO+otG/SEpKFHZDcSCyl3XaJtzi8wcWUhoSDqW43WiAqQdvwTku+/cM5+LBIexFm d61x5WO1zPWj4nXi0IdlJ42qvNia2Fkjy90e/GoV4TMPI6fCiZ8B2O3+Af81r1gL g38QQFbJvWxIdh5nueD83k/5Twdl3IkrCQYZJtUT/MfSdqFcQsKJuR1CcvEaMv+L 7C5ljF1A9ihMKdzeTvcEy/0/iRxDDjH0NKHgGYwylbJMfD/udXBhasnoglqwQqm7 ZuOCI97SOFbf/9osuJBlyHi9r17e0aXfhqLwpXgMmtivE8k= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client