This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47172.roa File: AS47172.roa (raw, json) Hash identifier: z1MfrDm91eKdDHnwW7uWgaXpA5qAp63/X8larhbO6wI= Subject key identifier: 3B:60:B0:87:E5:51:7E:1C:0A:AA:D4:F8:94:FA:58:01:81:56:8B:57 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2C335E09C1864BA948AB2C725DF57362CBC1C647 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47172.roa Signing time: Mon 17 Nov 2025 13:33:00 +0000 ROA not before: Mon 17 Nov 2025 13:28:00 +0000 ROA not after: Mon 16 Nov 2026 13:33:00 +0000 asID: 47172 IP address blocks: 82.38.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:33:5e:09:c1:86:4b:a9:48:ab:2c:72:5d:f5:73:62:cb:c1:c6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 17 13:28:00 2025 GMT Not After : Nov 16 13:33:00 2026 GMT Subject: CN=3B60B087E5517E1C0AAAD4F894FA580181568B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:e5:f7:26:72:d1:bb:15:1f:fd:77:20:93: 5c:3d:e2:d3:47:f9:a2:fb:65:61:d0:92:8d:2f:f6: cd:7b:eb:57:49:b1:d7:ea:48:9e:74:c9:ab:d7:a0: 6b:07:a5:69:da:c8:46:27:84:b0:04:c8:64:70:8d: 01:d2:52:5d:a7:6b:58:89:34:73:11:5a:9a:d9:da: 31:29:29:e3:9e:aa:88:29:cd:63:dc:56:ab:28:09: 5e:1a:68:53:fa:5d:68:d1:e7:f5:21:05:64:18:5b: 56:3c:10:6e:c0:7a:31:5e:7a:66:2a:0e:d0:81:c5: 34:b6:78:76:f6:3a:53:6c:04:a1:00:b9:72:d4:85: d6:a0:d3:6a:38:31:8b:8e:d4:07:72:a0:bc:eb:ab: 45:be:ad:37:0c:fc:20:c1:7a:9e:9f:67:7a:36:98: fc:ea:de:2b:08:8c:d9:a8:5b:5b:ca:c0:a9:ec:07: 68:05:fc:df:8e:c8:7e:12:03:2b:8f:50:63:a5:6e: 95:01:76:ff:ce:c8:ba:ca:f2:9c:82:49:a3:60:bf: 4b:59:61:5b:1f:43:68:d0:22:75:6d:cd:02:b4:49: 52:32:5c:1c:04:16:28:43:b8:c8:25:fb:fa:33:2f: ad:77:0a:2e:9a:88:b1:b0:50:50:d4:f4:5c:1f:d5: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:B0:87:E5:51:7E:1C:0A:AA:D4:F8:94:FA:58:01:81:56:8B:57 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.31.0/24 Signature Algorithm: sha256WithRSAEncryption 81:49:2d:f7:8d:a0:91:65:d3:27:f3:19:9c:63:24:94:c7:c6: cd:e4:9c:9d:ea:a5:1f:c3:4c:47:2e:e3:89:f7:1d:8b:58:0d: e2:34:14:2e:ee:fb:cb:0d:0f:e2:ad:0c:c2:5e:b2:f6:77:77: a2:9c:2a:f2:d7:c5:c7:a5:a7:1a:78:5a:45:ae:c9:43:6a:d2: 81:b2:8c:02:3d:5b:6d:0d:0f:de:84:00:7c:e4:9e:6a:98:60: 3b:3c:c3:90:5f:39:f6:a3:08:f7:ac:ab:4e:c9:b6:18:e7:a5: 9b:0d:55:1c:4b:10:66:3a:77:3f:2f:d4:84:ad:6e:53:8a:6d: 9b:31:f7:b7:ff:fe:3e:b5:80:99:19:3f:e5:36:76:ef:a3:eb: 0b:9c:f8:d2:fe:aa:4f:78:00:3e:06:a4:64:ca:64:bf:c0:46: 2c:7b:a0:80:2e:66:fa:41:e2:59:07:8f:a1:72:2e:3b:54:08: b1:fa:4f:31:d3:04:5c:9b:04:c2:98:9d:47:0f:23:46:fc:63: c4:25:1c:4c:53:8a:d4:d2:b0:28:dc:ee:78:35:f8:89:f7:ae: 30:18:2b:c2:46:e5:4f:ae:62:11:d9:fe:f3:08:6b:5e:f8:e6: d1:9a:5d:2f:e0:cb:bf:f1:40:98:f1:de:d2:94:70:1c:9d:ff: bb:0d:65:a6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIULDNeCcGGS6lIqyxyXfVzYsvBxkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTcxMzI4MDBaFw0yNjExMTYxMzMzMDBaMDMxMTAvBgNV BAMTKDNCNjBCMDg3RTU1MTdFMUMwQUFBRDRGODk0RkE1ODAxODE1NjhCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3+X3JnLRuxUf/Xcgk1w94tNH +aL7ZWHQko0v9s1761dJsdfqSJ50yavXoGsHpWnayEYnhLAEyGRwjQHSUl2na1iJ NHMRWprZ2jEpKeOeqogpzWPcVqsoCV4aaFP6XWjR5/UhBWQYW1Y8EG7AejFeemYq DtCBxTS2eHb2OlNsBKEAuXLUhdag02o4MYuO1AdyoLzrq0W+rTcM/CDBep6fZ3o2 mPzq3isIjNmoW1vKwKnsB2gF/N+OyH4SAyuPUGOlbpUBdv/OyLrK8pyCSaNgv0tZ YVsfQ2jQInVtzQK0SVIyXBwEFihDuMgl+/ozL613Ci6aiLGwUFDU9Fwf1VxJAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUO2Cwh+VRfhwKqtT4lPpYAYFWi1cwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDcxNzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJh8w DQYJKoZIhvcNAQELBQADggEBAIFJLfeNoJFl0yfzGZxjJJTHxs3knJ3qpR/DTEcu 44n3HYtYDeI0FC7u+8sND+KtDMJesvZ3d6KcKvLXxcelpxp4WkWuyUNq0oGyjAI9 W20ND96EAHzknmqYYDs8w5BfOfajCPesq07JthjnpZsNVRxLEGY6dz8v1IStblOK bZsx97f//j61gJkZP+U2du+j6wuc+NL+qk94AD4GpGTKZL/ARix7oIAuZvpB4lkH j6FyLjtUCLH6TzHTBFybBMKYnUcPI0b8Y8QlHExTitTSsCjc7ng1+In3rjAYK8JG 5U+uYhHZ/vMIa1745tGaXS/gy7/xQJjx3tKUcByd/7sNZaY= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:18 2025 by rpki-client