This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63023.roa File: AS63023.roa (raw, json) Hash identifier: hUti/vhzyIMqEKQGDyvTV+jkc2syrwz9N2Ss7kxW7tU= Subject key identifier: 25:D3:37:97:B1:DD:26:7C:89:1B:B3:2D:E5:86:7E:61:55:C3:EB:F8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7B1D0F5610F540C09A6C550179D327243A9C7D9F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63023.roa Signing time: Thu 27 Nov 2025 18:43:52 +0000 ROA not before: Thu 27 Nov 2025 18:38:52 +0000 ROA not after: Thu 26 Nov 2026 18:43:52 +0000 asID: 63023 IP address blocks: 82.22.21.0/24 maxlen: 24 82.38.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1d:0f:56:10:f5:40:c0:9a:6c:55:01:79:d3:27:24:3a:9c:7d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 27 18:38:52 2025 GMT Not After : Nov 26 18:43:52 2026 GMT Subject: CN=25D33797B1DD267C891BB32DE5867E6155C3EBF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:5a:b6:ff:dd:db:55:f5:01:d4:3b:93:ff: 48:b6:eb:3a:41:0f:45:0e:77:eb:f7:70:76:8b:10: fe:a9:97:ae:44:a1:f3:65:54:d7:73:89:9d:c6:02: 77:15:fd:17:50:88:c4:42:5e:4a:04:59:fa:e6:44: 30:74:d5:f5:ca:2d:f9:07:cd:c7:ed:64:bb:00:bb: 09:f2:7a:2d:5e:ef:da:21:66:f8:d0:73:dd:f2:6f: c0:8c:40:a1:5b:79:9c:2c:fb:b2:72:21:3b:92:84: 4c:36:a2:74:76:3b:a2:63:68:43:5e:dd:dd:75:68: bd:19:7b:c9:fd:2f:e1:6f:7f:0d:1c:71:6f:65:05: 71:c7:4c:95:08:ac:38:22:1a:a3:27:7f:6e:0f:3f: 2a:8f:c0:75:7c:60:a0:96:31:fb:9d:bf:30:bb:ee: 7b:d6:75:95:5d:e6:5d:93:81:86:d5:b8:02:58:a3: d3:89:33:3c:01:f0:db:95:b2:91:ba:2d:9a:f5:6a: 9d:94:c5:33:80:52:ef:a0:02:9e:e9:43:2f:61:67: 69:f9:44:3d:ed:c5:5b:ae:fa:68:27:ee:02:c8:60: 08:17:d0:de:b4:48:fc:f7:ae:0f:0e:5a:de:d4:d9: 11:ed:39:2f:35:92:1a:dc:27:35:03:af:a7:78:b2: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:37:97:B1:DD:26:7C:89:1B:B3:2D:E5:86:7E:61:55:C3:EB:F8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.21.0/24 82.38.131.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:9f:06:f0:53:4f:50:3f:81:e5:c6:0b:27:80:ca:e8:62:a4: 82:64:c7:2f:61:0d:9f:80:d9:8e:79:50:d9:53:a3:18:bc:69: d9:20:64:83:49:b4:b6:4d:8f:f2:82:6c:db:7d:9a:45:23:53: a3:ab:7c:5e:5c:1e:87:2a:4d:30:ad:dc:4c:65:73:ff:ef:0c: 0e:a9:70:0e:96:ee:16:8e:47:a7:bd:89:89:bb:4f:24:8d:8a: c0:77:b2:a0:20:4c:8b:72:84:40:88:c7:31:92:50:57:e9:ba: 12:5b:45:5c:17:76:71:fc:a7:5c:68:fa:02:53:88:35:7b:95: 56:8d:fc:01:77:db:e1:39:2b:2a:b0:da:af:ce:e2:1a:17:a0: c9:01:7a:76:26:aa:a3:ff:0e:c8:af:d7:4a:fc:80:c8:d6:e5: dd:98:57:1d:42:e5:5a:bb:9d:1f:1c:ea:5c:76:70:4d:71:e3: 0c:b0:c0:ad:d3:65:4c:b5:7b:33:60:6f:3c:c8:de:55:e4:81: 39:89:76:18:c2:9a:bf:95:72:39:b1:2f:91:e2:9e:73:69:90: 5f:82:e9:99:80:6f:b8:b0:32:df:30:38:e2:e4:8f:d0:09:91: 9c:ce:d5:0a:01:75:e1:b9:f7:69:95:92:9b:6f:ac:f9:b4:7e: b7:fb:8e:07 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUex0PVhD1QMCabFUBedMnJDqcfZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjcxODM4NTJaFw0yNjExMjYxODQzNTJaMDMxMTAvBgNV BAMTKDI1RDMzNzk3QjFERDI2N0M4OTFCQjMyREU1ODY3RTYxNTVDM0VCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3lq2/93bVfUB1DuT/0i26zpB D0UOd+v3cHaLEP6pl65EofNlVNdziZ3GAncV/RdQiMRCXkoEWfrmRDB01fXKLfkH zcftZLsAuwnyei1e79ohZvjQc93yb8CMQKFbeZws+7JyITuShEw2onR2O6JjaENe 3d11aL0Ze8n9L+Fvfw0ccW9lBXHHTJUIrDgiGqMnf24PPyqPwHV8YKCWMfudvzC7 7nvWdZVd5l2TgYbVuAJYo9OJMzwB8NuVspG6LZr1ap2UxTOAUu+gAp7pQy9hZ2n5 RD3txVuu+mgn7gLIYAgX0N60SPz3rg8OWt7U2RHtOS81khrcJzUDr6d4srwxAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUJdM3l7HdJnyJG7Mt5YZ+YVXD6/gwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjMwMjMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSFhUD BABSJoMwDQYJKoZIhvcNAQELBQADggEBABqfBvBTT1A/geXGCyeAyuhipIJkxy9h DZ+A2Y55UNlToxi8adkgZINJtLZNj/KCbNt9mkUjU6OrfF5cHocqTTCt3Exlc//v DA6pcA6W7haOR6e9iYm7TySNisB3sqAgTItyhECIxzGSUFfpuhJbRVwXdnH8p1xo +gJTiDV7lVaN/AF32+E5Kyqw2q/O4hoXoMkBenYmqqP/Dsiv10r8gMjW5d2YVx1C 5Vq7nR8c6lx2cE1x4wywwK3TZUy1ezNgbzzI3lXkgTmJdhjCmr+VcjmxL5HinnNp kF+C6ZmAb7iwMt8wOOLkj9AJkZzO1QoBdeG592mVkptvrPm0frf7jgc= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client