This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa File: AS8368.roa (raw, json) Hash identifier: LODdefemwIf3tWLdijXs8Ny3ZORma9zOdiEJ/evBoKM= Subject key identifier: 58:22:80:79:31:F5:00:EA:D7:C8:40:2B:EF:9F:B5:D8:32:7E:F9:8C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 195B60D5E571B9B82E827CE55E85AC3EE14A30C8 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa Signing time: Mon 24 Nov 2025 14:52:51 +0000 ROA not before: Mon 24 Nov 2025 14:47:51 +0000 ROA not after: Mon 23 Nov 2026 14:52:51 +0000 asID: 8368 IP address blocks: 82.21.234.0/24 maxlen: 24 82.22.233.0/24 maxlen: 24 82.23.228.0/24 maxlen: 24 82.24.219.0/24 maxlen: 24 82.24.233.0/24 maxlen: 24 82.29.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:60:d5:e5:71:b9:b8:2e:82:7c:e5:5e:85:ac:3e:e1:4a:30:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 14:47:51 2025 GMT Not After : Nov 23 14:52:51 2026 GMT Subject: CN=5822807931F500EAD7C8402BEF9FB5D8327EF98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:ce:fe:49:c1:0c:b1:95:e6:3c:61:f3:28: 90:cc:5f:5e:63:3f:b6:d6:be:d8:70:36:cd:54:4c: 8c:5c:58:8a:83:0c:be:2e:a8:5e:94:8d:15:fa:9e: 7a:fb:83:e7:bf:77:ba:8c:ff:88:c3:f7:23:0a:e3: 13:c2:9d:61:99:04:32:c8:8c:27:e3:39:46:e1:26: ac:fa:1e:68:39:53:cf:3d:bb:58:fc:7b:e5:7c:58: a5:1c:91:9e:52:47:bc:fb:25:ef:9e:af:72:e0:5f: f1:26:47:1c:9a:27:06:e6:c5:3a:f3:21:d3:44:a8: df:e0:70:c1:b1:15:6e:eb:33:ca:d4:b9:df:e9:f5: 01:5b:94:fa:5c:0d:86:7b:f9:66:95:2f:73:c7:1f: 76:73:15:be:13:a1:13:dc:7b:f0:98:97:a2:8a:13: d8:f9:e3:b9:be:d8:94:fb:7a:27:2e:36:ce:ab:26: 54:59:e4:1b:58:7c:e7:66:63:13:81:2f:a5:58:71: 21:7d:4f:94:85:ee:b1:14:1a:34:7d:b3:ba:3b:57: db:65:2d:55:c8:5b:58:8f:3d:a5:b9:99:38:f8:bd: 8c:5f:5a:9d:39:92:14:88:c3:d3:65:fa:0c:c9:c7: 69:4a:b5:c4:65:2b:98:a8:6c:01:d0:52:2a:2b:12: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:80:79:31:F5:00:EA:D7:C8:40:2B:EF:9F:B5:D8:32:7E:F9:8C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.234.0/24 82.22.233.0/24 82.23.228.0/24 82.24.219.0/24 82.24.233.0/24 82.29.239.0/24 Signature Algorithm: sha256WithRSAEncryption a5:bc:1e:09:53:e2:f2:52:f6:1a:1b:a0:a4:c6:3d:6d:5b:ef: 69:27:02:c3:66:04:df:cd:ef:67:c3:15:a7:d5:7a:b9:e0:82: d4:1a:f0:30:a3:10:4a:98:62:6a:4d:0c:3b:5e:95:d9:ed:4f: 36:55:f9:65:3d:27:5a:a6:67:1a:67:7e:72:49:94:14:2f:4c: 94:11:12:dd:47:f7:e2:89:85:55:da:9c:b7:ed:80:fb:e0:2c: 1c:8c:f6:61:47:02:b7:4e:65:ce:53:3b:70:e6:75:e2:97:7b: 91:2d:65:ad:38:ca:b6:4a:96:c8:fe:ae:7f:64:a4:b3:70:a6: 62:8d:a8:ca:e1:90:48:bb:d7:97:f4:0f:af:ee:ae:92:82:45: 2e:b7:be:ed:6a:3a:3a:54:ad:dd:a0:06:79:5e:32:43:a0:d6: 72:b7:0c:ce:3b:54:cc:41:2c:86:82:07:54:84:cf:a1:bb:cb: 96:d7:17:12:1c:d7:c4:e4:ef:35:d2:39:bc:76:c5:d6:ca:83: 5a:c2:c4:56:ba:15:8a:7f:3a:54:4e:a9:75:47:1c:de:01:b9: c5:97:90:b7:9d:82:31:30:76:70:d2:37:c1:3b:76:ca:f8:db: 30:00:24:75:de:13:c5:ba:40:3f:61:1c:b9:ef:d2:15:8c:95: 43:b7:b7:30 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUGVtg1eVxubgugnzlXoWsPuFKMMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQxNDQ3NTFaFw0yNjExMjMxNDUyNTFaMDMxMTAvBgNV BAMTKDU4MjI4MDc5MzFGNTAwRUFEN0M4NDAyQkVGOUZCNUQ4MzI3RUY5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHs7+ScEMsZXmPGHzKJDMX15j P7bWvthwNs1UTIxcWIqDDL4uqF6UjRX6nnr7g+e/d7qM/4jD9yMK4xPCnWGZBDLI jCfjOUbhJqz6Hmg5U889u1j8e+V8WKUckZ5SR7z7Je+er3LgX/EmRxyaJwbmxTrz IdNEqN/gcMGxFW7rM8rUud/p9QFblPpcDYZ7+WaVL3PHH3ZzFb4ToRPce/CYl6KK E9j547m+2JT7eicuNs6rJlRZ5BtYfOdmYxOBL6VYcSF9T5SF7rEUGjR9s7o7V9tl LVXIW1iPPaW5mTj4vYxfWp05khSIw9Nl+gzJx2lKtcRlK5iobAHQUiorEkDJAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUWCKAeTH1AOrXyEAr75+12DJ++YwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTODM2OC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFIV6gME AFIW6QMEAFIX5AMEAFIY2wMEAFIY6QMEAFId7zANBgkqhkiG9w0BAQsFAAOCAQEA pbweCVPi8lL2GhugpMY9bVvvaScCw2YE383vZ8MVp9V6ueCC1BrwMKMQSphiak0M O16V2e1PNlX5ZT0nWqZnGmd+ckmUFC9MlBES3Uf34omFVdqct+2A++AsHIz2YUcC t05lzlM7cOZ14pd7kS1lrTjKtkqWyP6uf2Sks3CmYo2oyuGQSLvXl/QPr+6ukoJF Lre+7Wo6OlSt3aAGeV4yQ6DWcrcMzjtUzEEshoIHVITPobvLltcXEhzXxOTvNdI5 vHbF1sqDWsLEVroVin86VE6pdUcc3gG5xZeQt52CMTB2cNI3wTt2yvjbMAAkdd4T xbpAP2Ecue/SFYyVQ7e3MA== -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:19 2025 by rpki-client