This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS148982.roa
File: AS148982.roa (raw, json)
Hash identifier: IMUEmo7rxOycxfQR+HPpHulEQ/aQ4/amLTtNzbJq264=
Subject key identifier: 71:7F:72:0E:61:68:D0:BA:78:EA:F0:17:A4:C5:9C:3E:79:BE:B9:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E80F88A619A2A9486797A8157062E53DEEEE795
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS148982.roa
Signing time: Sat 13 Dec 2025 16:35:57 +0000
ROA not before: Sat 13 Dec 2025 16:30:57 +0000
ROA not after: Sat 12 Dec 2026 16:35:57 +0000
asID: 148982
IP address blocks: 82.39.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:80:f8:8a:61:9a:2a:94:86:79:7a:81:57:06:2e:53:de:ee:e7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 13 16:30:57 2025 GMT
Not After : Dec 12 16:35:57 2026 GMT
Subject: CN=717F720E6168D0BA78EAF017A4C59C3E79BEB9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:5c:12:13:16:95:64:c2:fc:0b:97:e0:4d:
4b:12:83:92:f0:b5:bf:54:88:1d:c6:9f:50:df:04:
fd:dc:59:42:4f:e3:c2:77:06:6c:2b:f1:90:64:f1:
ee:85:74:31:1d:81:bf:fa:d4:95:77:b5:7e:1a:83:
a6:3d:57:89:58:a8:6e:fd:32:de:bf:37:04:58:2d:
e0:14:ec:2a:45:cd:6c:5c:14:ed:d2:07:1f:cf:28:
88:85:6e:d4:64:e4:e2:84:fd:a0:71:4c:e6:ac:32:
e1:3d:ba:e4:d3:31:1f:c4:42:f6:92:f0:d5:10:e8:
1f:c3:93:a4:99:39:78:57:73:e7:79:26:ca:94:d5:
eb:27:b6:46:21:48:03:a1:f3:76:a1:66:5f:fd:2a:
58:09:7f:69:dc:28:f8:4d:be:d6:6d:08:58:6e:5b:
93:7b:9d:89:06:d1:91:a7:e8:95:b3:a3:97:5f:dd:
d5:6e:98:4e:4d:da:e5:f0:51:c1:29:c6:70:82:22:
ba:1b:c6:3c:5c:e2:0f:67:d0:f1:41:7c:b1:12:6c:
a0:46:45:e7:8e:b7:94:7a:7e:d4:17:58:07:82:99:
1a:02:3d:e4:2b:09:45:89:e6:4f:b5:b3:e9:5e:b8:
1d:89:ae:ca:dc:8c:60:e5:f7:1b:51:ca:78:2b:60:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7F:72:0E:61:68:D0:BA:78:EA:F0:17:A4:C5:9C:3E:79:BE:B9:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS148982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.206.0/23
Signature Algorithm: sha256WithRSAEncryption
81:95:91:e6:51:59:f0:06:4f:5a:fd:0d:ad:b6:a0:65:1c:74:
10:d8:c4:4e:ac:90:b7:e7:cc:30:08:ae:05:1a:7e:ed:42:f7:
10:d6:4e:ed:51:56:0b:17:6d:87:c7:fa:b9:4e:60:df:1e:2a:
51:be:e2:5f:59:70:75:7f:8e:44:58:b9:b3:a2:ca:98:aa:c4:
1f:c0:80:66:fb:dd:51:23:a6:a3:1c:17:f9:a2:10:d2:ff:e6:
a7:6c:88:dc:d8:22:60:aa:15:88:8c:ff:21:8f:2a:29:d1:28:
e1:80:27:1f:37:75:e5:32:33:bb:e6:c3:2a:9a:8a:04:a6:0d:
a9:fb:6a:44:68:8c:75:ba:3b:7a:56:23:84:de:fa:7a:65:71:
4e:bc:6e:81:2d:b3:d0:ac:11:d3:b7:14:e3:fe:f8:51:85:dd:
25:dc:01:e9:d6:5a:41:e7:8d:26:8a:e7:ba:6d:16:bb:41:41:
4f:df:3c:b1:ff:14:4d:02:f0:d1:e6:01:a5:4b:1d:1f:52:b8:
d8:c8:2b:5f:55:f7:40:23:b2:28:f9:20:75:bb:f5:34:f0:d2:
a6:6b:43:86:d6:67:fd:22:a6:07:44:dc:56:41:84:d8:b7:5d:
08:11:4f:20:47:e6:09:42:5d:4d:e7:66:26:8e:dd:99:fa:44:
d1:2b:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:41:53 2025 by rpki-client