This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203796.roa File: AS203796.roa (raw, json) Hash identifier: 4Up33sR3c13PWqhXGIu0k2UTX7wV+/i72D8Vb7p/o6Y= Subject key identifier: 5A:0E:35:1C:02:1F:09:05:BF:A6:8B:76:48:0B:19:5C:27:25:2E:95 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 7C74C29EACF11C57CE666E48FD2F4B17FA529167 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203796.roa Signing time: Wed 24 Dec 2025 08:43:42 +0000 ROA not before: Wed 24 Dec 2025 08:38:42 +0000 ROA not after: Wed 23 Dec 2026 08:43:42 +0000 asID: 203796 IP address blocks: 141.98.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:74:c2:9e:ac:f1:1c:57:ce:66:6e:48:fd:2f:4b:17:fa:52:91:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 24 08:38:42 2025 GMT Not After : Dec 23 08:43:42 2026 GMT Subject: CN=5A0E351C021F0905BFA68B76480B195C27252E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:c3:e0:ba:c9:09:05:b9:11:2c:cf:4e:7e: 97:17:e9:3a:d3:d8:40:b0:b1:7d:bb:37:f5:26:91: 43:74:fc:12:a4:37:36:fb:33:bd:1a:56:9c:7e:58: 86:01:86:fe:56:2c:95:86:66:24:aa:17:ca:d0:b6: 9a:25:31:6b:00:8a:c0:04:93:20:b8:e7:5a:95:17: 36:9a:92:a0:68:e7:26:5e:72:db:0c:a7:ef:ca:44: 7f:09:8b:ac:65:44:97:b0:9e:d2:84:f5:56:bb:96: 96:fe:d4:0f:46:bd:a4:b2:3f:00:aa:a4:0d:92:78: 86:87:47:67:00:78:4b:23:bb:63:61:30:07:7f:b8: eb:c1:3a:67:5a:66:8c:f7:19:a8:a2:7a:96:d3:ca: 44:f7:8c:54:9b:f1:d1:60:7e:8a:29:72:9b:c0:5f: b0:fb:37:29:e2:cc:3e:a3:96:19:4a:de:0a:09:62: 66:1a:c9:ce:83:a2:e0:83:c9:c1:5c:a8:78:40:15: b0:f9:be:ca:dc:6b:64:7d:85:77:01:a6:76:eb:fd: a8:96:a0:6b:3f:f0:57:47:4e:0b:a7:b5:dd:93:9f: 3a:e2:51:25:58:9a:b7:db:52:af:c4:60:7e:5f:72: ff:24:d9:22:45:24:ac:87:c1:85:59:09:8e:11:fe: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0E:35:1C:02:1F:09:05:BF:A6:8B:76:48:0B:19:5C:27:25:2E:95 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.49.0/24 Signature Algorithm: sha256WithRSAEncryption 39:45:f7:2d:02:25:c7:f5:32:88:e0:17:88:3a:55:84:59:14: fb:1a:e1:12:f0:2f:af:39:0f:6a:d3:c6:2b:8a:13:8f:c2:f1: f4:35:fa:af:4e:fe:e6:89:91:3f:a2:be:c0:2d:76:4d:5a:45: 57:5e:2b:04:e7:02:20:b6:da:12:0b:a0:60:cc:0a:a7:f2:14: 9b:57:1f:b5:77:0e:db:e4:d8:80:77:7f:ee:09:d9:46:83:1e: 7c:37:ae:9c:de:62:c1:3b:62:14:68:f4:1d:cd:d5:bc:82:67: fc:15:80:cd:60:ca:bc:5e:40:d5:a2:ce:dd:0a:4f:fe:a2:3b: 67:3a:7b:1c:1b:e9:57:0c:76:01:51:7a:a8:c8:d7:73:97:1f: f6:96:b0:f1:cb:b1:57:47:c3:c7:05:d2:71:aa:ef:43:ec:8b: 45:18:98:2b:bb:58:48:e4:64:96:13:17:a5:ef:ec:5d:be:e1: 2f:29:fd:de:d2:f4:54:41:23:bb:be:f9:71:09:9f:fd:c5:37: 86:69:97:9a:e0:ba:a6:a6:ca:3a:fd:66:bc:61:2b:2b:fc:9a: 4a:13:6e:68:f5:53:f5:e9:e1:41:14:3c:ed:82:79:c3:ba:6a: 32:d3:c0:88:d4:7e:d3:50:cf:50:18:77:c3:16:2b:eb:62:98: cb:fc:97:23 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUfHTCnqzxHFfOZm5I/S9LF/pSkWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjQwODM4NDJaFw0yNjEyMjMwODQzNDJaMDMxMTAvBgNV BAMTKDVBMEUzNTFDMDIxRjA5MDVCRkE2OEI3NjQ4MEIxOTVDMjcyNTJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhcPguskJBbkRLM9OfpcX6TrT 2ECwsX27N/UmkUN0/BKkNzb7M70aVpx+WIYBhv5WLJWGZiSqF8rQtpolMWsAisAE kyC451qVFzaakqBo5yZectsMp+/KRH8Ji6xlRJewntKE9Va7lpb+1A9GvaSyPwCq pA2SeIaHR2cAeEsju2NhMAd/uOvBOmdaZoz3GaiiepbTykT3jFSb8dFgfoopcpvA X7D7NynizD6jlhlK3goJYmYayc6DouCDycFcqHhAFbD5vsrca2R9hXcBpnbr/aiW oGs/8FdHTguntd2TnzriUSVYmrfbUq/EYH5fcv8k2SJFJKyHwYVZCY4R/p95AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUWg41HAIfCQW/pot2SAsZXCclLpUwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjAzNzk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIx MA0GCSqGSIb3DQEBCwUAA4IBAQA5RfctAiXH9TKI4BeIOlWEWRT7GuES8C+vOQ9q 08YrihOPwvH0NfqvTv7miZE/or7ALXZNWkVXXisE5wIgttoSC6BgzAqn8hSbVx+1 dw7b5NiAd3/uCdlGgx58N66c3mLBO2IUaPQdzdW8gmf8FYDNYMq8XkDVos7dCk/+ ojtnOnscG+lXDHYBUXqoyNdzlx/2lrDxy7FXR8PHBdJxqu9D7ItFGJgru1hI5GSW Exel7+xdvuEvKf3e0vRUQSO7vvlxCZ/9xTeGaZea4Lqmpso6/Wa8YSsr/JpKE25o 9VP16eFBFDztgnnDumoy08CI1H7TUM9QGHfDFivrYpjL/Jcj -----END CERTIFICATE-----Generated at Sat Dec 27 15:10:21 2025 by rpki-client