This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25160.roa File: AS25160.roa (raw, json) Hash identifier: hKnuwLxOeunXTd5tflhyntxFovYy9TxwvqSZxA5YYzQ= Subject key identifier: 9E:C9:C5:6C:10:36:E4:69:18:85:67:90:08:DA:10:79:94:35:E3:55 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 06D7C4EE8C5E675E15D299BF6B146CDCBD4C36D4 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25160.roa Signing time: Wed 10 Dec 2025 05:55:14 +0000 ROA not before: Wed 10 Dec 2025 05:50:14 +0000 ROA not after: Wed 09 Dec 2026 05:55:14 +0000 asID: 25160 IP address blocks: 82.26.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d7:c4:ee:8c:5e:67:5e:15:d2:99:bf:6b:14:6c:dc:bd:4c:36:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 10 05:50:14 2025 GMT Not After : Dec 9 05:55:14 2026 GMT Subject: CN=9EC9C56C1036E4691885679008DA10799435E355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:cd:a9:fd:ee:a4:46:12:86:e6:9f:79:b1: a8:a2:24:15:1f:91:fc:8e:a8:e1:c0:dd:40:58:fc: b7:49:d7:f0:03:4c:72:cf:9d:14:ee:7b:ed:a8:71: a9:d8:d4:8e:e7:3a:53:c5:8e:35:dc:58:83:88:ca: 3f:5c:95:af:21:23:33:02:95:a6:ac:90:0b:fc:4d: fd:28:19:ac:88:46:20:e7:0b:ef:e0:d9:a3:cd:75: 20:1b:43:45:2f:38:fd:5b:70:3c:86:eb:5d:9b:82: 6a:ee:36:cb:af:3a:68:af:77:a0:34:cb:c5:68:e0: b1:6a:58:2d:e1:e5:9d:46:af:10:f4:1c:e6:68:6f: cf:d7:7d:d2:fd:7c:af:3d:58:40:e1:c0:02:72:70: 06:33:6f:db:a8:cc:cf:31:2d:06:d0:f6:9b:c0:41: 3d:25:26:03:46:2e:23:e2:6c:a6:b5:87:8e:00:1f: f1:0c:c6:96:2d:59:a1:29:5b:c2:50:b0:de:94:93: 5d:1b:8b:a7:f3:4b:57:dd:43:e6:a5:6b:5e:0b:b2: 6f:43:56:48:de:0f:68:41:74:34:f4:13:01:fd:5d: 9e:98:e0:59:e0:fc:7c:c1:4a:5a:e3:f5:1c:f5:06: e6:ce:59:ea:03:8f:bd:0c:dd:ae:79:d1:f2:e4:d1: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:C5:6C:10:36:E4:69:18:85:67:90:08:DA:10:79:94:35:E3:55 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS25160.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.26.207.0/24 Signature Algorithm: sha256WithRSAEncryption a3:65:0e:46:8d:a8:15:57:89:cf:f3:94:60:2f:f9:bf:35:6d: 39:43:b4:12:a5:b2:15:2a:a4:c7:6d:2d:92:53:ab:33:4e:75: 1b:00:8a:59:11:cf:28:0d:3c:0a:5a:be:19:c6:c1:81:22:61: b5:5d:90:59:f4:1e:68:c8:b3:6e:7d:58:17:02:79:67:3d:3f: d6:25:b8:bb:af:da:2d:c2:79:ad:66:70:e3:3a:43:b9:a9:a7: 69:48:08:b9:ad:7c:4c:f7:00:69:9d:33:5d:07:30:ee:26:20: d7:be:91:0f:23:58:f7:4c:69:38:c5:6c:02:66:58:45:a2:d0: 79:a7:fb:d6:bb:6a:01:f6:e7:c2:c0:3b:37:9a:3d:33:9b:f2: 9e:a8:57:2d:c6:8a:d8:db:30:d4:76:22:c6:ea:7a:93:ae:26: 90:f8:44:25:8b:3b:08:22:07:d4:e6:7a:a4:58:47:02:16:c5: 17:20:77:05:a6:1c:ad:5e:e5:ad:5f:da:42:bb:5c:5a:f2:6c: 3a:d4:25:47:83:5a:41:7d:38:0f:b5:3b:8c:99:53:d4:c3:76: 55:ca:be:e9:10:cf:d0:f0:f5:ef:30:87:a3:4f:13:b9:02:b3: d7:61:47:cd:53:7c:4e:5a:da:08:8c:0e:db:39:82:bd:2d:ed: 80:01:d8:61 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUBtfE7oxeZ14V0pm/axRs3L1MNtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTAwNTUwMTRaFw0yNjEyMDkwNTU1MTRaMDMxMTAvBgNV BAMTKDlFQzlDNTZDMTAzNkU0NjkxODg1Njc5MDA4REExMDc5OTQzNUUzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWs2p/e6kRhKG5p95saiiJBUf kfyOqOHA3UBY/LdJ1/ADTHLPnRTue+2ocanY1I7nOlPFjjXcWIOIyj9cla8hIzMC laaskAv8Tf0oGayIRiDnC+/g2aPNdSAbQ0UvOP1bcDyG612bgmruNsuvOmivd6A0 y8Vo4LFqWC3h5Z1GrxD0HOZob8/XfdL9fK89WEDhwAJycAYzb9uozM8xLQbQ9pvA QT0lJgNGLiPibKa1h44AH/EMxpYtWaEpW8JQsN6Uk10bi6fzS1fdQ+ala14Lsm9D VkjeD2hBdDT0EwH9XZ6Y4Fng/HzBSlrj9Rz1BubOWeoDj70M3a550fLk0cMBAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUnsnFbBA25GkYhWeQCNoQeZQ141UwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjUxNjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSGs8w DQYJKoZIhvcNAQELBQADggEBAKNlDkaNqBVXic/zlGAv+b81bTlDtBKlshUqpMdt LZJTqzNOdRsAilkRzygNPApavhnGwYEiYbVdkFn0HmjIs259WBcCeWc9P9YluLuv 2i3Cea1mcOM6Q7mpp2lICLmtfEz3AGmdM10HMO4mINe+kQ8jWPdMaTjFbAJmWEWi 0Hmn+9a7agH258LAOzeaPTOb8p6oVy3GitjbMNR2IsbqepOuJpD4RCWLOwgiB9Tm eqRYRwIWxRcgdwWmHK1e5a1f2kK7XFrybDrUJUeDWkF9OA+1O4yZU9TDdlXKvukQ z9Dw9e8wh6NPE7kCs9dhR81TfE5a2giMDts5gr0t7YAB2GE= -----END CERTIFICATE-----Generated at Tue Dec 16 09:42:04 2025 by rpki-client