This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa File: AS36530.roa (raw, json) Hash identifier: YCHtQzCQrmc644uxNqsZh6YwLNanX1XwlX/0IVDiHBU= Subject key identifier: 8C:A2:F9:DB:71:3A:36:04:6E:AE:CA:61:BB:B0:73:AA:DD:34:95:A8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 11314E1AB496CBA6171C899FF58DB48DD5DDE39D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa Signing time: Mon 08 Dec 2025 13:56:11 +0000 ROA not before: Mon 08 Dec 2025 13:51:11 +0000 ROA not after: Mon 07 Dec 2026 13:56:11 +0000 asID: 36530 IP address blocks: 82.21.200.0/23 maxlen: 24 82.25.37.0/24 maxlen: 24 82.25.46.0/23 maxlen: 24 82.26.72.0/23 maxlen: 24 82.26.78.0/23 maxlen: 24 82.39.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:31:4e:1a:b4:96:cb:a6:17:1c:89:9f:f5:8d:b4:8d:d5:dd:e3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 8 13:51:11 2025 GMT Not After : Dec 7 13:56:11 2026 GMT Subject: CN=8CA2F9DB713A36046EAECA61BBB073AADD3495A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:dc:04:cc:f5:b4:81:bb:06:cb:d6:48:52: 71:76:32:46:e0:3e:46:6a:68:c3:09:93:31:ba:07: 9e:ce:1f:02:06:b2:92:60:3f:31:95:a8:fe:f7:db: c5:2b:d3:40:e0:d9:55:f0:7e:b0:fe:cc:64:02:c4: 81:d5:62:d4:49:bf:a3:59:f4:f1:43:0b:bc:e8:4d: 7e:af:9b:02:4e:9d:33:fd:d0:5e:3b:0f:62:64:fe: 2d:82:11:ea:c5:19:f6:90:34:b6:d3:a0:4d:ae:63: b0:38:24:16:08:22:31:5a:b2:77:ce:fb:c5:2c:ed: 8b:b8:68:1f:8c:b1:78:10:9e:72:21:d3:32:a1:8e: 18:47:86:f3:6e:48:1e:3c:86:5d:ac:9a:47:46:c4: 58:70:e1:fa:46:11:0f:ed:66:3c:4d:10:00:cd:7d: 55:95:4a:fb:2d:12:cd:2c:96:96:30:be:c7:3a:38: af:70:48:10:ce:76:b5:3a:2b:4a:a1:10:ac:85:f0: c3:ca:8c:80:35:f5:25:dc:55:3c:3d:35:72:1e:c1: 16:85:67:0e:12:8f:09:f6:59:f6:3b:13:ae:2e:ee: 5f:dd:05:31:df:c3:d1:99:d3:95:a8:e0:ad:d6:6d: 18:f4:4d:08:57:65:5e:91:fd:95:e6:58:7a:d9:00: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A2:F9:DB:71:3A:36:04:6E:AE:CA:61:BB:B0:73:AA:DD:34:95:A8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.200.0/23 82.25.37.0/24 82.25.46.0/23 82.26.72.0/23 82.26.78.0/23 82.39.114.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:68:64:6e:0e:41:a7:f3:90:01:47:87:c8:e9:87:9b:da:07: 48:3d:37:2a:b6:3a:62:bc:b7:cd:8a:ee:c3:39:18:db:1b:b9: e8:99:20:71:3c:a8:38:18:0a:0d:59:12:af:47:5a:f0:06:2b: bf:22:e1:18:ab:7f:93:99:b2:3a:1f:2e:79:2d:f7:b3:a0:63: 1f:f4:c0:61:80:7b:b2:0f:ec:5c:52:53:10:ad:7a:45:c0:5d: e2:6d:11:53:3f:fc:85:50:ab:ef:2d:5f:55:38:0c:3b:94:01: a0:a2:86:c0:e9:77:71:47:12:8d:5e:b6:cc:bc:94:5b:c6:03: 2f:a7:15:d3:7c:e6:0f:d5:c7:60:ff:10:17:06:4f:6b:e8:de: 0c:72:1a:8e:66:84:92:7e:3f:65:cc:3b:a5:ae:f3:23:34:ca: 62:1d:be:3d:5e:de:b0:af:27:ac:12:a8:71:6c:81:03:5c:8b: ab:ae:a1:0c:b6:35:b4:f3:2e:f2:53:fb:ce:57:38:8e:a1:95: 3e:e0:94:b1:07:bb:8d:3f:f8:6c:e4:0e:77:b0:4d:f2:2c:31: 68:93:9d:14:54:0a:89:dc:9a:0f:ee:f8:67:2f:de:64:0e:ff: 7c:5f:1d:4a:9b:41:31:df:2c:4c:e9:ec:24:f1:45:36:a0:9c: 6d:91:dd:f2 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUETFOGrSWy6YXHImf9Y20jdXd450wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDgxMzUxMTFaFw0yNjEyMDcxMzU2MTFaMDMxMTAvBgNV BAMTKDhDQTJGOURCNzEzQTM2MDQ2RUFFQ0E2MUJCQjA3M0FBREQzNDk1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Y9wEzPW0gbsGy9ZIUnF2Mkbg PkZqaMMJkzG6B57OHwIGspJgPzGVqP7328Ur00Dg2VXwfrD+zGQCxIHVYtRJv6NZ 9PFDC7zoTX6vmwJOnTP90F47D2Jk/i2CEerFGfaQNLbToE2uY7A4JBYIIjFasnfO +8Us7Yu4aB+MsXgQnnIh0zKhjhhHhvNuSB48hl2smkdGxFhw4fpGEQ/tZjxNEADN fVWVSvstEs0slpYwvsc6OK9wSBDOdrU6K0qhEKyF8MPKjIA19SXcVTw9NXIewRaF Zw4Sjwn2WfY7E64u7l/dBTHfw9GZ05Wo4K3WbRj0TQhXZV6R/ZXmWHrZAAD1AgMB AAGjggInMIICIzAdBgNVHQ4EFgQUjKL523E6NgRursphu7Bzqt00lagwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAFSFcgD BABSGSUDBAFSGS4DBAFSGkgDBAFSGk4DBABSJ3IwDQYJKoZIhvcNAQELBQADggEB ADxoZG4OQafzkAFHh8jph5vaB0g9Nyq2OmK8t82K7sM5GNsbueiZIHE8qDgYCg1Z Eq9HWvAGK78i4Rirf5OZsjofLnkt97OgYx/0wGGAe7IP7FxSUxCtekXAXeJtEVM/ /IVQq+8tX1U4DDuUAaCihsDpd3FHEo1etsy8lFvGAy+nFdN85g/Vx2D/EBcGT2vo 3gxyGo5mhJJ+P2XMO6Wu8yM0ymIdvj1e3rCvJ6wSqHFsgQNci6uuoQy2NbTzLvJT +85XOI6hlT7glLEHu40/+GzkDnewTfIsMWiTnRRUConcmg/u+Gcv3mQO/3xfHUqb QTHfLEzp7CTxRTagnG2R3fI= -----END CERTIFICATE-----Generated at Tue Dec 16 04:57:19 2025 by rpki-client