This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa File: AS133153.roa (raw, json) Hash identifier: VDLPLSjB0nBAI02x5B1D7BJvO4N1r5OvCiZUie+O138= Subject key identifier: B4:4F:73:D3:CC:CC:62:A2:60:BD:91:67:35:CC:D3:67:8E:AA:26:83 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4357D6A6DA4FC4B1ACE6BB0D546DFE50E3B4B50A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa Signing time: Sun 07 Dec 2025 12:21:45 +0000 ROA not before: Sun 07 Dec 2025 12:16:45 +0000 ROA not after: Sun 06 Dec 2026 12:21:45 +0000 asID: 133153 IP address blocks: 82.22.39.0/24 maxlen: 24 82.39.99.0/24 maxlen: 24 82.39.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:57:d6:a6:da:4f:c4:b1:ac:e6:bb:0d:54:6d:fe:50:e3:b4:b5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 7 12:16:45 2025 GMT Not After : Dec 6 12:21:45 2026 GMT Subject: CN=B44F73D3CCCC62A260BD916735CCD3678EAA2683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:2a:c5:49:0c:76:83:ba:4f:d6:c0:f3:7e: 12:39:7d:e8:7e:17:ca:23:b7:6c:8c:57:5d:09:e4: 22:62:84:ad:ed:71:c8:36:52:22:f1:eb:43:43:9b: d7:f5:ab:d6:51:00:08:50:6a:4c:35:9d:d4:c4:e6: 14:4a:df:ae:77:00:ad:fb:d4:8f:bd:ef:4a:d0:97: 0d:d5:13:8d:9b:b6:e4:c0:b9:a8:2d:0e:de:bc:ad: 0b:81:6f:bb:76:39:ca:10:f4:e0:0a:05:c7:1a:16: 43:42:25:75:33:2f:5a:4e:17:91:8f:62:05:cc:da: 7c:12:12:96:67:fd:89:4b:64:a8:b9:7d:64:e6:b6: 64:d6:83:11:20:b5:f6:bc:55:76:88:ac:20:6c:b8: ff:10:37:57:c5:3d:f5:91:f5:e3:93:c7:b3:d4:57: f3:7e:56:60:a4:e1:72:ab:a3:23:b1:71:de:2e:13: 18:aa:6d:0f:bd:f1:cc:21:07:8d:3a:6d:50:6e:8c: 14:7e:3c:91:e3:33:59:93:08:be:68:db:6c:ec:07: 89:ca:21:88:63:d7:d7:22:2e:2a:74:e6:f3:3f:49: 3f:72:cb:17:ca:8b:00:06:10:2f:26:3d:0e:7d:30: 50:49:7b:e1:77:4b:19:4a:1b:8d:f2:5f:72:05:02: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4F:73:D3:CC:CC:62:A2:60:BD:91:67:35:CC:D3:67:8E:AA:26:83 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133153.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.39.0/24 82.39.99.0/24 82.39.212.0/22 Signature Algorithm: sha256WithRSAEncryption 60:74:97:75:62:4b:ca:fe:bf:24:46:3f:e3:db:4d:37:15:4b: 4b:87:0a:c5:7c:df:e6:96:dd:16:10:d0:a1:1c:d8:f0:44:18: 4c:aa:92:02:43:29:a5:44:96:dd:67:f4:f9:f3:c6:10:ab:f1: e7:70:8c:73:4a:7f:80:07:77:4d:a5:b6:fe:90:cb:0f:86:0f: 9e:3d:a0:02:c8:b3:70:b5:b8:49:d9:a2:3c:eb:d4:c3:7b:c7: a0:70:c7:ff:d1:53:bb:e7:c9:58:31:d2:92:c7:cb:d7:d7:6e: 3e:0a:97:e9:19:54:e0:36:4c:d6:22:5c:bd:fd:cb:a8:03:3c: 5c:dc:f6:dd:e4:68:2e:a7:ed:5e:2b:fd:3c:21:a0:04:78:ae: 98:59:bf:18:4e:cb:2e:e0:ee:a4:a7:80:58:78:79:a3:f4:1b: a1:89:cd:52:7d:16:94:81:39:9e:7b:91:a5:76:2a:d1:cf:c2: 3d:ae:27:de:67:2c:47:ad:cf:11:74:cf:30:da:07:1c:77:f0: 62:15:62:5f:74:3f:39:42:11:59:a3:ed:d8:10:df:45:b4:85: ed:db:a9:2b:97:35:25:38:40:63:7b:b3:4c:cf:69:80:ef:09: df:87:72:f2:5e:2d:3f:5a:e9:1a:69:b1:6d:01:ef:ec:66:2a: 7a:6c:ea:0b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUQ1fWptpPxLGs5rsNVG3+UOO0tQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDcxMjE2NDVaFw0yNjEyMDYxMjIxNDVaMDMxMTAvBgNV BAMTKEI0NEY3M0QzQ0NDQzYyQTI2MEJEOTE2NzM1Q0NEMzY3OEVBQTI2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdByrFSQx2g7pP1sDzfhI5feh+ F8ojt2yMV10J5CJihK3tccg2UiLx60NDm9f1q9ZRAAhQakw1ndTE5hRK3653AK37 1I+970rQlw3VE42btuTAuagtDt68rQuBb7t2OcoQ9OAKBccaFkNCJXUzL1pOF5GP YgXM2nwSEpZn/YlLZKi5fWTmtmTWgxEgtfa8VXaIrCBsuP8QN1fFPfWR9eOTx7PU V/N+VmCk4XKroyOxcd4uExiqbQ+98cwhB406bVBujBR+PJHjM1mTCL5o22zsB4nK IYhj19ciLip05vM/ST9yyxfKiwAGEC8mPQ59MFBJe+F3SxlKG43yX3IFAjrJAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUtE9z08zMYqJgvZFnNczTZ46qJoMwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMzMTUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhYn AwQAUidjAwQCUifUMA0GCSqGSIb3DQEBCwUAA4IBAQBgdJd1YkvK/r8kRj/j2003 FUtLhwrFfN/mlt0WENChHNjwRBhMqpICQymlRJbdZ/T588YQq/HncIxzSn+AB3dN pbb+kMsPhg+ePaACyLNwtbhJ2aI869TDe8egcMf/0VO758lYMdKSx8vX124+Cpfp GVTgNkzWIly9/cuoAzxc3Pbd5Ggup+1eK/08IaAEeK6YWb8YTssu4O6kp4BYeHmj 9Buhic1SfRaUgTmee5GldirRz8I9rifeZyxHrc8RdM8w2gccd/BiFWJfdD85QhFZ o+3YEN9FtIXt26krlzUlOEBje7NMz2mA7wnfh3LyXi0/WukaabFtAe/sZip6bOoL -----END CERTIFICATE-----Generated at Fri Dec 19 15:41:51 2025 by rpki-client