This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa File: AS62240.roa (raw, json) Hash identifier: ILp69l7KyXWz1HtNi+ZeSIhIJqUuKOFR8hQIc2W9A08= Subject key identifier: 69:D2:0A:9D:08:FD:B0:24:03:47:CB:F8:EC:2D:01:36:E0:5B:DB:87 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 719B391AF463143B09185116166F27F2F7BBA056 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa Signing time: Wed 26 Nov 2025 13:00:20 +0000 ROA not before: Wed 26 Nov 2025 12:55:20 +0000 ROA not after: Wed 25 Nov 2026 13:00:20 +0000 asID: 62240 IP address blocks: 82.29.109.0/24 maxlen: 24 82.39.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9b:39:1a:f4:63:14:3b:09:18:51:16:16:6f:27:f2:f7:bb:a0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 12:55:20 2025 GMT Not After : Nov 25 13:00:20 2026 GMT Subject: CN=69D20A9D08FDB0240347CBF8EC2D0136E05BDB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5f:a6:b5:1a:c8:de:91:b1:6a:1e:21:8c:73: e8:27:1c:3d:0f:ef:2d:b7:6b:92:05:a0:31:89:b1: 0c:b3:23:44:2e:d2:9c:c1:5e:3d:f0:db:af:0d:af: 87:2e:74:9a:4a:29:92:ec:cf:a8:5a:ff:a3:15:55: 37:0a:58:35:87:5c:c8:b1:ae:80:88:18:f6:59:6e: a9:88:b8:bf:19:28:8f:c6:ae:31:07:5d:8a:c6:0a: c7:29:b6:6c:1a:3d:3d:07:d0:a3:6b:47:7a:ef:0e: 6f:3c:b1:b1:5f:27:91:96:89:dd:40:89:a6:b9:1a: d1:22:9e:19:03:3a:d1:31:37:f9:39:4b:42:76:4f: 83:67:66:33:06:51:dd:d8:65:5b:5d:b3:23:21:36: b5:5a:e2:d5:f7:a0:15:0b:e9:0e:1c:04:2d:08:01: 33:ff:9b:b1:79:78:12:f0:53:8e:94:f9:f2:d3:e6: af:23:5a:32:b5:47:a0:b7:99:cd:eb:83:29:47:f3: b7:e8:eb:16:48:aa:b0:eb:55:81:ed:e5:a0:f3:fb: 87:7c:b6:2e:bc:01:55:1c:bf:10:39:ad:46:26:83: db:89:2c:9c:1b:cb:86:4e:42:58:5a:01:dc:16:de: 77:f2:46:de:58:78:46:89:a2:1f:4c:b3:e7:38:f9: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D2:0A:9D:08:FD:B0:24:03:47:CB:F8:EC:2D:01:36:E0:5B:DB:87 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.29.109.0/24 82.39.110.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:9f:d8:4c:80:85:d8:57:bb:c0:1a:8a:79:7d:d6:b7:03:9b: 71:af:f1:96:0c:a8:64:5b:57:8d:2a:35:b7:8a:29:a1:5d:65: c1:73:c9:93:fa:cd:af:a5:b2:18:02:2f:f1:56:c1:87:19:8f: 11:e7:9e:0f:af:cf:91:e5:3f:0c:ed:b6:3c:6a:f1:5b:9b:81: 89:08:2d:cb:e0:8a:e6:de:7a:1b:ec:ef:07:a5:39:c3:bf:20: 13:b1:82:21:8a:5f:bb:e4:bd:5f:88:24:ec:41:e3:e4:e9:a6: 5f:9a:88:04:22:8d:d8:20:8d:d1:c6:32:f8:de:19:4c:19:e8: 7c:42:bc:35:d0:1e:a0:be:29:60:b2:c2:3f:90:46:fc:09:1c: 63:0b:7a:54:50:5d:d6:ce:7d:ab:ad:60:c8:cc:3d:d8:1e:0d: 24:6e:7a:4e:07:9b:b8:85:6c:59:0f:7b:5b:fe:22:47:4d:e0: cb:d4:6f:e3:cc:03:3c:61:d6:84:4f:a0:5e:4a:a3:28:ea:56: a4:43:17:d1:c5:4a:f0:73:34:35:4f:85:45:57:81:41:50:8a: 8c:e6:34:1d:6e:d0:51:31:c9:15:3c:bc:0d:84:a5:b1:8d:54: b5:df:8f:4f:f3:95:10:fa:be:15:7c:c1:19:2f:de:8a:67:ab: 73:3c:10:26 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUcZs5GvRjFDsJGFEWFm8n8ve7oFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYxMjU1MjBaFw0yNjExMjUxMzAwMjBaMDMxMTAvBgNV BAMTKDY5RDIwQTlEMDhGREIwMjQwMzQ3Q0JGOEVDMkQwMTM2RTA1QkRCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFX6a1GsjekbFqHiGMc+gnHD0P 7y23a5IFoDGJsQyzI0Qu0pzBXj3w268Nr4cudJpKKZLsz6ha/6MVVTcKWDWHXMix roCIGPZZbqmIuL8ZKI/GrjEHXYrGCscptmwaPT0H0KNrR3rvDm88sbFfJ5GWid1A iaa5GtEinhkDOtExN/k5S0J2T4NnZjMGUd3YZVtdsyMhNrVa4tX3oBUL6Q4cBC0I ATP/m7F5eBLwU46U+fLT5q8jWjK1R6C3mc3rgylH87fo6xZIqrDrVYHt5aDz+4d8 ti68AVUcvxA5rUYmg9uJLJwby4ZOQlhaAdwW3nfyRt5YeEaJoh9Ms+c4+clPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUadIKnQj9sCQDR8v47C0BNuBb24cwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjIyNDAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSHW0D BABSJ24wDQYJKoZIhvcNAQELBQADggEBADuf2EyAhdhXu8Aainl91rcDm3Gv8ZYM qGRbV40qNbeKKaFdZcFzyZP6za+lshgCL/FWwYcZjxHnng+vz5HlPwzttjxq8Vub gYkILcvgiubeehvs7welOcO/IBOxgiGKX7vkvV+IJOxB4+Tppl+aiAQijdggjdHG MvjeGUwZ6HxCvDXQHqC+KWCywj+QRvwJHGMLelRQXdbOfautYMjMPdgeDSRuek4H m7iFbFkPe1v+IkdN4MvUb+PMAzxh1oRPoF5KoyjqVqRDF9HFSvBzNDVPhUVXgUFQ iozmNB1u0FExyRU8vA2EpbGNVLXfj0/zlRD6vhV8wRkv3opnq3M8ECY= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client