This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399646.roa File: AS399646.roa (raw, json) Hash identifier: ex/tlrSsA0QvEc+COb2gVr2Y+1hNCKmVvIcMZqZXpkI= Subject key identifier: 38:7B:CF:7E:E3:E7:00:D7:CC:95:BD:FD:A1:56:64:77:12:1B:79:57 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1F8E0FFD8077022F0C51F5772D319BA9D519955C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399646.roa Signing time: Wed 17 Dec 2025 18:06:42 +0000 ROA not before: Wed 17 Dec 2025 18:01:42 +0000 ROA not after: Wed 16 Dec 2026 18:06:42 +0000 asID: 399646 IP address blocks: 82.39.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8e:0f:fd:80:77:02:2f:0c:51:f5:77:2d:31:9b:a9:d5:19:95:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 17 18:01:42 2025 GMT Not After : Dec 16 18:06:42 2026 GMT Subject: CN=387BCF7EE3E700D7CC95BDFDA1566477121B7957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:c6:f2:fe:89:e6:73:53:2a:18:22:50:17: 09:10:f7:85:9c:ec:d9:fd:35:7a:75:56:81:94:73: f1:49:bc:71:72:00:53:04:0b:e1:1c:3c:b7:32:04: 29:02:a2:7f:0b:06:72:3f:b9:1a:79:c3:2c:37:67: 79:1e:18:22:4a:63:e4:9b:4f:12:2c:81:bd:f0:40: 73:df:b0:d8:9d:1d:50:e5:55:4b:67:ac:c8:08:5e: 3f:4e:b5:57:0a:35:96:ae:66:52:c1:91:08:ab:4b: 3d:32:d7:7d:da:0b:9f:51:ab:5d:97:af:9f:48:08: 9e:af:70:f4:0b:19:7a:4c:c3:42:b3:9d:39:c9:10: a8:48:1f:71:b2:94:55:cb:1a:98:86:f5:89:24:7e: b6:13:6b:9d:22:13:ad:bd:1d:0c:79:65:88:e9:62: 19:ad:04:ad:e3:30:de:25:32:9c:95:7a:aa:29:65: c8:2f:68:89:d8:a6:c7:62:a2:1c:9c:56:7e:1d:7e: b3:ab:e1:64:9c:d0:4e:58:e7:1f:4d:8b:02:b4:e6: 6f:1f:ec:a0:fe:bd:4f:f8:96:f3:73:90:4a:74:d3: ef:e9:20:93:ac:05:aa:3c:58:f6:3c:a7:9f:20:49: f1:08:bf:62:ec:b0:f7:5f:fe:d1:f5:d8:7d:71:da: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7B:CF:7E:E3:E7:00:D7:CC:95:BD:FD:A1:56:64:77:12:1B:79:57 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.175.0/24 Signature Algorithm: sha256WithRSAEncryption 69:b9:2d:ef:b4:c1:ee:45:11:3e:27:55:78:92:cf:ee:3a:c2: db:98:b8:30:b7:a8:90:bc:6e:55:c6:a8:41:20:0d:e6:cf:9f: 0b:8e:b4:0b:15:d7:7b:0f:b3:2f:63:9d:e7:f4:79:a2:ee:3c: d1:4b:aa:e1:bf:ba:6b:4f:1d:27:f0:ed:ae:49:bb:f5:fb:d5: dc:38:da:c3:6a:ee:56:99:e2:4c:b3:48:53:24:86:1c:8c:d2: 12:83:b6:39:24:eb:53:0b:11:77:89:02:ff:8f:4a:f6:a5:12: f5:2e:72:e4:f0:6d:1e:86:3a:e7:48:6f:f2:b2:1f:ac:89:6d: 53:70:04:e0:53:fe:e2:b0:c7:aa:88:6c:ba:e0:ef:68:4c:d8: 57:87:75:03:2e:00:08:4d:93:da:37:f8:29:54:ac:c6:1b:31: 6c:7e:65:67:c0:eb:ae:bb:b3:e9:a9:7d:cb:cc:b0:e4:67:c0: 7f:ce:1b:b8:c7:fd:78:a5:a6:f5:37:3b:ec:ae:73:95:b0:c1: 1f:16:f9:fc:81:a5:e7:ee:51:d6:ce:6c:6b:8b:b2:c1:6e:3f: e2:c2:cf:2d:6e:59:89:aa:06:25:9e:2e:91:aa:f6:87:ef:58: 71:28:e4:24:7b:b5:90:1c:f0:7e:c4:a1:f3:ca:8d:f5:63:0b: 44:87:ea:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUH44P/YB3Ai8MUfV3LTGbqdUZlVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTcxODAxNDJaFw0yNjEyMTYxODA2NDJaMDMxMTAvBgNV BAMTKDM4N0JDRjdFRTNFNzAwRDdDQzk1QkRGREExNTY2NDc3MTIxQjc5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCz8by/onmc1MqGCJQFwkQ94Wc 7Nn9NXp1VoGUc/FJvHFyAFMEC+EcPLcyBCkCon8LBnI/uRp5wyw3Z3keGCJKY+Sb TxIsgb3wQHPfsNidHVDlVUtnrMgIXj9OtVcKNZauZlLBkQirSz0y133aC59Rq12X r59ICJ6vcPQLGXpMw0KznTnJEKhIH3GylFXLGpiG9YkkfrYTa50iE629HQx5ZYjp YhmtBK3jMN4lMpyVeqopZcgvaInYpsdiohycVn4dfrOr4WSc0E5Y5x9NiwK05m8f 7KD+vU/4lvNzkEp00+/pIJOsBao8WPY8p58gSfEIv2LssPdf/tH12H1x2pm/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUOHvPfuPnANfMlb39oVZkdxIbeVcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk5NjQ2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiev MA0GCSqGSIb3DQEBCwUAA4IBAQBpuS3vtMHuRRE+J1V4ks/uOsLbmLgwt6iQvG5V xqhBIA3mz58LjrQLFdd7D7MvY53n9Hmi7jzRS6rhv7prTx0n8O2uSbv1+9XcONrD au5WmeJMs0hTJIYcjNISg7Y5JOtTCxF3iQL/j0r2pRL1LnLk8G0ehjrnSG/ysh+s iW1TcATgU/7isMeqiGy64O9oTNhXh3UDLgAITZPaN/gpVKzGGzFsfmVnwOuuu7Pp qX3LzLDkZ8B/zhu4x/14pab1NzvsrnOVsMEfFvn8gaXn7lHWzmxri7LBbj/iws8t blmJqgYlni6RqvaH71hxKOQke7WQHPB+xKHzyo31YwtEh+pt -----END CERTIFICATE-----Generated at Fri Dec 19 15:41:53 2025 by rpki-client