This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS833.roa File: AS833.roa (raw, json) Hash identifier: xSAk6MMD44ecmBfRJu/7JM3P1kkzueGCZGjRD2J6xHw= Subject key identifier: 04:18:28:0F:7C:5A:0E:3D:21:BA:AE:93:D2:FD:05:04:94:C0:11:87 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6D6A13F31A6E92168AA67306CDAD9375D3911882 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS833.roa Signing time: Thu 13 Nov 2025 06:21:31 +0000 ROA not before: Thu 13 Nov 2025 06:16:31 +0000 ROA not after: Thu 12 Nov 2026 06:21:31 +0000 asID: 833 IP address blocks: 2a13:9500:109::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6a:13:f3:1a:6e:92:16:8a:a6:73:06:cd:ad:93:75:d3:91:18:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 13 06:16:31 2025 GMT Not After : Nov 12 06:21:31 2026 GMT Subject: CN=0418280F7C5A0E3D21BAAE93D2FD050494C01187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:33:7a:ff:60:70:9c:25:ee:b9:65:ef:4d: c9:50:f9:36:0e:1e:fb:a4:5c:e0:50:d7:1f:9e:f8: 94:56:58:6f:77:b3:09:a2:6e:83:e0:64:0e:3a:2f: db:49:a9:03:0f:b7:3e:32:e5:b4:7a:5f:a8:08:3c: 48:7b:15:2b:a3:76:f9:d3:96:87:27:1d:99:f6:b9: d0:38:5b:34:5e:df:ef:70:40:f6:d5:24:0d:b8:d9: ff:d2:18:ba:d2:c9:eb:a7:7d:2c:5d:a5:4e:90:4d: c4:2b:10:0d:42:13:a4:71:6f:ac:54:0f:98:27:82: e7:f0:7e:a0:82:a5:44:07:27:a1:a6:ae:4d:a9:bb: 4b:60:82:5e:10:49:e2:81:6f:91:31:32:3c:83:bf: c3:0c:07:fa:6b:50:87:0e:01:87:00:34:8b:d4:6a: 5a:3c:74:f8:4e:92:5d:3f:ce:e6:de:e8:98:eb:1a: ff:ed:1e:75:3c:21:29:44:0d:81:ad:8d:fe:d2:b3: 86:19:5a:76:ea:3d:36:bc:72:05:20:7f:37:a3:63: be:f8:d1:32:b9:5b:c8:bf:40:77:c1:0f:51:0e:e5: d1:23:a4:df:b5:83:b3:77:1a:be:5c:b8:b7:40:8f: 4f:99:6d:81:bc:3b:d6:74:13:e3:a1:65:7d:b4:63: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:18:28:0F:7C:5A:0E:3D:21:BA:AE:93:D2:FD:05:04:94:C0:11:87 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:109::/48 Signature Algorithm: sha256WithRSAEncryption 09:c6:d9:86:74:6b:f9:8d:a2:21:c8:01:2e:9f:11:bf:93:a5: 5b:5f:f4:4d:b4:f3:8d:d6:6b:1c:af:07:c0:32:4c:b3:46:c2: 63:75:9f:cf:ae:42:d0:4d:b8:cf:a8:3c:d4:5a:5d:6c:f5:07: ab:d3:72:b5:d3:52:07:d6:fc:18:f8:f8:32:5b:97:4b:66:43: 28:e6:c5:5a:67:17:79:0b:fa:c9:db:52:9d:8a:e2:90:58:26: 28:92:5f:f9:a7:a8:d7:07:72:0d:66:df:55:ba:76:9d:41:de: 67:6c:55:04:95:9e:c2:b9:d7:03:92:58:f8:41:0f:68:53:71: ec:9d:2d:c3:78:83:2e:0e:b8:42:a4:37:75:e4:80:af:29:94: 38:35:62:75:ce:5d:1c:a0:37:b6:a3:2e:fe:cd:73:52:13:cd: 97:df:53:67:f0:54:3e:8a:11:10:8b:fa:09:67:38:8e:08:53: 15:c3:aa:75:1e:44:7a:a2:43:d4:99:86:bd:5d:da:c9:2f:97: 74:36:16:f7:a4:bf:4e:14:f1:95:43:b3:4b:3c:68:db:30:69: df:1d:ae:b8:4d:14:0b:bb:f4:67:7a:cc:40:0c:e5:27:a5:f7: 32:95:9c:ac:ea:30:0b:c4:cf:82:7a:22:0d:4d:d4:86:d1:60: f0:b8:15:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbWoT8xpukhaKpnMGza2TddORGIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTMwNjE2MzFaFw0yNjExMTIwNjIxMzFaMDMxMTAvBgNV BAMTKDA0MTgyODBGN0M1QTBFM0QyMUJBQUU5M0QyRkQwNTA0OTRDMDExODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgjN6/2BwnCXuuWXvTclQ+TYO HvukXOBQ1x+e+JRWWG93swmiboPgZA46L9tJqQMPtz4y5bR6X6gIPEh7FSujdvnT locnHZn2udA4WzRe3+9wQPbVJA242f/SGLrSyeunfSxdpU6QTcQrEA1CE6Rxb6xU D5gngufwfqCCpUQHJ6Gmrk2pu0tggl4QSeKBb5ExMjyDv8MMB/prUIcOAYcANIvU alo8dPhOkl0/zube6JjrGv/tHnU8ISlEDYGtjf7Ss4YZWnbqPTa8cgUgfzejY774 0TK5W8i/QHfBD1EO5dEjpN+1g7N3Gr5cuLdAj0+ZbYG8O9Z0E+OhZX20YycbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUBBgoD3xaDj0huq6T0v0FBJTAEYcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTODMzLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOVAAEJ MA0GCSqGSIb3DQEBCwUAA4IBAQAJxtmGdGv5jaIhyAEunxG/k6VbX/RNtPON1msc rwfAMkyzRsJjdZ/PrkLQTbjPqDzUWl1s9Qer03K101IH1vwY+PgyW5dLZkMo5sVa Zxd5C/rJ21KdiuKQWCYokl/5p6jXB3INZt9VunadQd5nbFUElZ7CudcDklj4QQ9o U3HsnS3DeIMuDrhCpDd15ICvKZQ4NWJ1zl0coDe2oy7+zXNSE82X31Nn8FQ+ihEQ i/oJZziOCFMVw6p1HkR6okPUmYa9XdrJL5d0Nhb3pL9OFPGVQ7NLPGjbMGnfHa64 TRQLu/RnesxADOUnpfcylZys6jALxM+CeiINTdSG0WDwuBVj -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:45 2025 by rpki-client