This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa File: AS42689.roa (raw, json) Hash identifier: 0SYCDtFvrsbPq7oMdQZekxNf9hGCa4umeCLzT8WoLhQ= Subject key identifier: 7C:6A:94:87:DA:94:F9:C7:2A:EA:CE:B9:0C:A9:4E:99:57:3C:53:3F Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 578639569644D1830A4B80FCA3EAEA8DF690EF62 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa Signing time: Mon 08 Dec 2025 00:27:35 +0000 ROA not before: Mon 08 Dec 2025 00:22:35 +0000 ROA not after: Mon 07 Dec 2026 00:27:35 +0000 asID: 42689 IP address blocks: 143.14.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:86:39:56:96:44:d1:83:0a:4b:80:fc:a3:ea:ea:8d:f6:90:ef:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 8 00:22:35 2025 GMT Not After : Dec 7 00:27:35 2026 GMT Subject: CN=7C6A9487DA94F9C72AEACEB90CA94E99573C533F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:4c:d8:e7:cf:b4:e1:8e:4b:7c:8f:94:a0: 93:ed:56:83:2e:cf:4d:aa:af:f0:0f:bf:c4:bf:6f: a7:28:cc:6b:ba:13:40:48:57:fb:6f:21:9c:ce:b5: 8c:13:79:d7:87:67:dd:54:da:f8:aa:40:1a:de:ac: 53:0c:15:06:f9:9f:dc:b2:d3:e2:1c:90:b1:16:48: 9c:30:c0:68:50:6f:5e:cf:fc:15:51:97:5b:28:14: 92:4f:ad:96:1d:5f:dd:72:e9:d7:5e:e7:e0:70:8a: 83:0e:a4:71:cc:2b:a4:55:42:00:c2:b7:54:ff:06: 62:64:b7:22:ac:a0:c8:fa:e8:42:84:4a:4f:5b:fa: 25:9a:6e:ed:18:dc:a5:b9:5f:fc:cb:c2:21:e0:fb: 68:e4:74:12:bb:9c:5d:fa:39:2e:af:d8:08:d4:6b: e1:43:2c:b9:ca:76:d0:64:b7:ca:40:ab:a7:27:94: b5:50:46:d5:79:9a:f9:7e:92:fc:69:aa:76:b2:43: 90:46:12:d6:71:6e:b9:84:bf:a8:8d:21:3a:2a:9f: 38:bd:53:94:11:fe:c0:d5:d0:8b:a3:49:cc:84:c4: a4:97:3d:be:59:67:79:f6:3a:0d:41:5e:2b:ce:23: 4f:70:55:a1:54:02:98:bd:54:07:28:32:74:f8:8f: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6A:94:87:DA:94:F9:C7:2A:EA:CE:B9:0C:A9:4E:99:57:3C:53:3F X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.174.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:97:f6:c3:ca:f6:88:68:bf:e0:9c:0e:b3:ba:19:66:42:19: 71:81:3a:71:b1:16:a7:5e:fa:90:65:f9:25:2f:1c:a7:62:26: ee:d6:5c:b6:3e:7a:82:d7:e2:a6:bd:20:e1:b2:bd:31:d8:7a: 1d:40:18:3b:28:df:b8:41:78:5c:b0:9b:bb:ba:27:e6:24:d3: 16:f4:50:ef:c0:0d:d3:d3:52:b1:fe:42:bc:e1:d6:a8:67:42: 65:9b:76:55:81:f8:4d:56:8c:f6:7b:b7:5d:2d:9c:91:8c:2d: 65:17:a4:51:47:6a:19:0c:68:ac:05:ca:b0:08:bf:2c:e4:14: 38:00:53:d3:75:6f:d9:4d:c7:f8:37:59:93:22:f3:f5:1e:fe: 57:c4:c5:05:76:2c:3a:87:31:5b:b2:0d:0b:31:d0:a8:6c:63: 02:c5:22:81:29:b7:e2:ca:0d:0b:3a:69:a1:f1:12:5f:67:be: 9b:9a:ae:c8:de:9d:50:46:53:ab:a8:a9:27:b7:e5:10:3e:0f: 85:b5:f2:12:77:1c:9b:77:1b:0f:44:5c:cb:72:3b:00:3d:1b: e5:27:88:f5:15:e4:2d:d4:48:48:52:ae:6f:00:28:e2:98:1e: ea:62:8a:b3:f2:1d:2c:71:2d:46:3c:b3:b0:69:82:60:41:e9: 5d:39:37:a2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUV4Y5VpZE0YMKS4D8o+rqjfaQ72IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDgwMDIyMzVaFw0yNjEyMDcwMDI3MzVaMDMxMTAvBgNV BAMTKDdDNkE5NDg3REE5NEY5QzcyQUVBQ0VCOTBDQTk0RTk5NTczQzUzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7j0zY58+04Y5LfI+UoJPtVoMu z02qr/APv8S/b6cozGu6E0BIV/tvIZzOtYwTedeHZ91U2viqQBrerFMMFQb5n9yy 0+IckLEWSJwwwGhQb17P/BVRl1soFJJPrZYdX91y6dde5+BwioMOpHHMK6RVQgDC t1T/BmJktyKsoMj66EKESk9b+iWabu0Y3KW5X/zLwiHg+2jkdBK7nF36OS6v2AjU a+FDLLnKdtBkt8pAq6cnlLVQRtV5mvl+kvxpqnayQ5BGEtZxbrmEv6iNIToqnzi9 U5QR/sDV0IujScyExKSXPb5ZZ3n2Og1BXivOI09wVaFUApi9VAcoMnT4j+eDAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUfGqUh9qU+ccq6s65DKlOmVc8Uz8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPDq4w DQYJKoZIhvcNAQELBQADggEBAA2X9sPK9ohov+CcDrO6GWZCGXGBOnGxFqde+pBl +SUvHKdiJu7WXLY+eoLX4qa9IOGyvTHYeh1AGDso37hBeFywm7u6J+Yk0xb0UO/A DdPTUrH+Qrzh1qhnQmWbdlWB+E1WjPZ7t10tnJGMLWUXpFFHahkMaKwFyrAIvyzk FDgAU9N1b9lNx/g3WZMi8/Ue/lfExQV2LDqHMVuyDQsx0KhsYwLFIoEpt+LKDQs6 aaHxEl9nvpuarsjenVBGU6uoqSe35RA+D4W18hJ3HJt3Gw9EXMtyOwA9G+UniPUV 5C3USEhSrm8AKOKYHupiirPyHSxxLUY8s7BpgmBB6V05N6I= -----END CERTIFICATE-----Generated at Fri Dec 19 21:20:43 2025 by rpki-client