This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa File: AS61317.roa (raw, json) Hash identifier: nIVmFagTMvbeBOoeUAQZvRxw44pTMrv0HDUpAfXalL8= Subject key identifier: 64:24:8B:1B:57:C2:40:18:0F:EA:6D:38:71:A0:C1:DE:AE:8D:60:33 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7F5F54BBDE7FE4C208414ABF7C531AF152B9E109 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa Signing time: Fri 26 Dec 2025 08:17:30 +0000 ROA not before: Fri 26 Dec 2025 08:12:30 +0000 ROA not after: Fri 25 Dec 2026 08:17:30 +0000 asID: 61317 IP address blocks: 82.23.195.0/24 maxlen: 24 82.24.92.0/22 maxlen: 24 82.25.61.0/24 maxlen: 24 82.26.66.0/24 maxlen: 24 82.27.8.0/24 maxlen: 24 82.41.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5f:54:bb:de:7f:e4:c2:08:41:4a:bf:7c:53:1a:f1:52:b9:e1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 26 08:12:30 2025 GMT Not After : Dec 25 08:17:30 2026 GMT Subject: CN=64248B1B57C240180FEA6D3871A0C1DEAE8D6033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:08:9e:77:40:15:30:f1:89:af:4f:1b:63: 8e:36:51:7f:29:66:86:08:19:a1:60:ed:2d:b4:c2: a1:2a:c9:cd:38:9a:79:2b:3e:31:8e:e7:7f:6d:15: 3e:c4:72:bf:53:e2:af:3b:3e:2d:7b:62:65:77:73: a8:a1:1c:e3:d8:03:1e:a0:2d:6b:6b:16:35:fd:4e: 3d:f7:be:4e:1b:15:c9:5e:b9:bd:60:36:0d:cc:c3: 53:34:3a:ce:3d:55:d8:df:d7:7d:2d:7d:f0:6e:65: e8:b7:9d:5c:ac:0e:c9:b5:da:96:d9:a3:0b:8f:8c: 2f:2f:ad:c8:79:d8:d1:e2:4a:46:5d:6e:5c:70:ec: c6:bd:0e:35:f0:22:31:24:49:78:12:9f:34:1d:70: 4b:34:78:b6:48:e3:c0:4a:86:5b:58:3b:19:0f:bb: 5a:cc:4d:91:4b:ba:b8:f2:8d:74:b1:69:ef:33:9b: bb:30:d6:bb:fb:00:65:1c:f2:36:ec:81:ca:37:3f: ac:ae:c7:a3:9f:a6:bb:c0:ab:68:3a:19:1f:e4:0b: f3:81:be:69:fd:9b:9e:42:27:f1:dd:47:dd:fa:d9: 34:bd:52:7c:78:84:02:df:fe:90:cc:3b:8f:26:0c: e0:08:30:3c:86:08:97:3b:58:19:db:d8:67:4d:23: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:24:8B:1B:57:C2:40:18:0F:EA:6D:38:71:A0:C1:DE:AE:8D:60:33 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.23.195.0/24 82.24.92.0/22 82.25.61.0/24 82.26.66.0/24 82.27.8.0/24 82.41.50.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b6:0a:a2:45:77:ac:4f:4e:63:ae:3e:6a:c7:6c:f6:9f:62: c3:44:c6:5d:88:2c:9e:ef:00:d6:3c:db:55:d3:bf:0e:87:00: a9:fc:fb:23:40:f8:0d:8d:a2:b6:ac:59:e7:3d:0e:8f:aa:40: 1e:94:e9:d0:e0:f4:4c:e6:a6:02:7e:75:b4:04:9e:b9:d8:a9: 54:2c:22:dc:75:d7:8e:d6:e3:34:78:56:04:e7:e7:a8:46:d6: a8:1c:3f:ae:db:11:17:db:73:4c:33:ac:22:29:00:f0:13:d6: d4:52:c6:d4:20:3c:30:a2:4d:68:5f:c5:99:d9:6a:72:90:fa: 1d:e9:ab:27:42:81:7e:64:d8:3f:27:c3:68:34:d6:52:6e:7b: 5e:66:6b:be:2d:fe:04:9a:43:ed:2b:23:62:fa:48:73:7a:fb: 36:2f:e5:53:1d:43:bf:e5:d8:d4:5c:8e:c8:eb:20:6a:5d:ab: d7:88:60:b3:26:48:68:ad:69:07:fe:c6:8e:1a:14:1c:07:44: f1:c3:21:3e:7d:e1:d4:2f:bf:45:0e:22:61:a1:17:4a:fb:1f: 35:2f:85:f0:f9:f7:67:60:43:5d:62:ec:c2:6e:dd:57:20:9f: 04:e4:a8:e9:fe:33:66:95:27:35:8e:c1:cb:f0:01:fc:da:3a: f0:52:ad:ba -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUf19Uu95/5MIIQUq/fFMa8VK54QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjYwODEyMzBaFw0yNjEyMjUwODE3MzBaMDMxMTAvBgNV BAMTKDY0MjQ4QjFCNTdDMjQwMTgwRkVBNkQzODcxQTBDMURFQUU4RDYwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JAied0AVMPGJr08bY442UX8p ZoYIGaFg7S20wqEqyc04mnkrPjGO539tFT7Ecr9T4q87Pi17YmV3c6ihHOPYAx6g LWtrFjX9Tj33vk4bFcleub1gNg3Mw1M0Os49Vdjf130tffBuZei3nVysDsm12pbZ owuPjC8vrch52NHiSkZdblxw7Ma9DjXwIjEkSXgSnzQdcEs0eLZI48BKhltYOxkP u1rMTZFLurjyjXSxae8zm7sw1rv7AGUc8jbsgco3P6yux6OfprvAq2g6GR/kC/OB vmn9m55CJ/HdR9362TS9Unx4hALf/pDMO48mDOAIMDyGCJc7WBnb2GdNI0RdAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUZCSLG1fCQBgP6m04caDB3q6NYDMwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjEzMTcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABSF8MD BAJSGFwDBABSGT0DBABSGkIDBABSGwgDBABSKTIwDQYJKoZIhvcNAQELBQADggEB AHK2CqJFd6xPTmOuPmrHbPafYsNExl2ILJ7vANY821XTvw6HAKn8+yNA+A2Noras Wec9Do+qQB6U6dDg9EzmpgJ+dbQEnrnYqVQsItx1147W4zR4VgTn56hG1qgcP67b ERfbc0wzrCIpAPAT1tRSxtQgPDCiTWhfxZnZanKQ+h3pqydCgX5k2D8nw2g01lJu e15ma74t/gSaQ+0rI2L6SHN6+zYv5VMdQ7/l2NRcjsjrIGpdq9eIYLMmSGitaQf+ xo4aFBwHRPHDIT594dQvv0UOImGhF0r7HzUvhfD592dgQ11i7MJu3VcgnwTkqOn+ M2aVJzWOwcvwAfzaOvBSrbo= -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:44 2026 by rpki-client