This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS134465.roa File: AS134465.roa (raw, json) Hash identifier: t6S1P5WdGSrYwptL5hZPH2nZiNjhLplSUnbbO31tKpY= Subject key identifier: F1:59:6B:BF:B5:78:B3:1A:E1:B5:09:24:CB:2D:45:51:81:3E:A2:AB Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 7E6D4D9FCEB782CFB62CFDF5F9A5EE95ED5A42ED Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS134465.roa Signing time: Fri 12 Dec 2025 12:12:23 +0000 ROA not before: Fri 12 Dec 2025 12:07:23 +0000 ROA not after: Fri 11 Dec 2026 12:12:23 +0000 asID: 134465 IP address blocks: 141.11.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6d:4d:9f:ce:b7:82:cf:b6:2c:fd:f5:f9:a5:ee:95:ed:5a:42:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 12 12:07:23 2025 GMT Not After : Dec 11 12:12:23 2026 GMT Subject: CN=F1596BBFB578B31AE1B50924CB2D4551813EA2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:1a:a6:bf:fa:e3:bd:5a:dd:53:c9:9c:84: 89:e6:5c:3b:3e:d1:71:b3:d5:fd:76:95:c7:3a:1c: 83:de:19:87:d6:05:71:a3:cb:e8:fe:51:ed:56:36: f6:2f:c1:07:b6:0e:5f:ad:52:27:98:00:72:45:78: c5:50:b4:5d:9d:4d:79:f3:91:46:73:d8:13:ab:a3: 55:86:e8:76:dd:8d:48:a3:1b:e5:fc:0c:73:b7:59: 36:6b:a8:c5:ac:96:cc:c3:58:cb:9a:36:4d:29:b3: 14:b0:f5:c3:9a:3a:d9:75:16:22:cf:1f:9a:37:04: 50:78:8a:69:ca:48:2f:dc:ae:f6:9e:6e:42:37:71: e6:0a:b1:7b:ba:4a:ac:40:0f:49:bb:0b:ef:52:07: 07:88:49:bd:40:72:d3:82:1f:aa:5c:df:66:b2:92: 1c:6c:cb:65:3b:df:91:a5:89:2d:c0:54:4b:98:fd: e4:fe:94:dd:95:be:ee:d3:28:9b:18:8d:bc:9d:d9: d7:13:57:39:3e:47:35:c1:bc:c5:57:4f:bf:4a:05: fb:c1:7d:30:7f:3d:4c:9e:b1:37:5b:70:36:78:0b: 7d:b5:8a:86:f4:31:77:93:7f:8a:b8:15:1a:6a:43: 3a:cd:c6:70:0b:7d:93:37:ec:11:b3:3e:19:ae:64: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:59:6B:BF:B5:78:B3:1A:E1:B5:09:24:CB:2D:45:51:81:3E:A2:AB X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS134465.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.144.0/24 Signature Algorithm: sha256WithRSAEncryption 41:62:3c:4b:d1:ba:d6:5f:b2:bf:dd:14:36:65:07:3a:9e:ab: e6:91:3b:32:61:e9:86:7f:6a:11:33:36:fb:05:62:e9:d9:99: 8a:60:9d:b9:00:4b:4c:ae:99:15:34:a1:0b:7c:39:25:15:f1: 36:6a:26:29:fc:ef:b9:6b:44:f2:79:9d:fa:d6:4d:ae:e0:1c: 5a:51:0e:a4:ae:36:2c:5e:6e:0d:cf:5c:d0:ec:c3:bf:18:b7: 3d:9d:8e:05:55:62:d9:da:62:00:3d:da:84:40:1c:1c:8e:c3: 94:8b:49:2b:ee:58:1e:84:36:f6:37:a0:5b:1b:42:ff:54:7c: 1f:52:01:91:2f:78:71:b0:1e:2d:af:93:74:09:3a:fc:ba:33: 34:f9:b0:d3:3c:97:07:4f:56:85:80:03:03:d2:9d:0e:53:47: 88:4b:f5:0d:f5:67:e2:6a:d6:ae:6e:90:6a:56:ac:c9:30:32: ac:9b:38:4e:93:b5:8b:b8:22:42:12:d3:68:9f:4d:00:66:34: be:ae:70:94:1a:42:bf:1c:5f:d1:e5:71:2c:1c:32:df:10:d5: 62:9c:e8:b7:c2:9d:00:bd:6b:39:a8:98:ae:cd:1a:58:32:7d: 28:7f:ac:6c:93:7f:3e:05:60:22:c1:0f:ea:53:21:53:8b:e0: ac:d3:18:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUfm1Nn863gs+2LP31+aXule1aQu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTIxMjA3MjNaFw0yNjEyMTExMjEyMjNaMDMxMTAvBgNV BAMTKEYxNTk2QkJGQjU3OEIzMUFFMUI1MDkyNENCMkQ0NTUxODEzRUEyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruRqmv/rjvVrdU8mchInmXDs+ 0XGz1f12lcc6HIPeGYfWBXGjy+j+Ue1WNvYvwQe2Dl+tUieYAHJFeMVQtF2dTXnz kUZz2BOro1WG6HbdjUijG+X8DHO3WTZrqMWslszDWMuaNk0psxSw9cOaOtl1FiLP H5o3BFB4imnKSC/crvaebkI3ceYKsXu6SqxAD0m7C+9SBweISb1ActOCH6pc32ay khxsy2U735GliS3AVEuY/eT+lN2Vvu7TKJsYjbyd2dcTVzk+RzXBvMVXT79KBfvB fTB/PUyesTdbcDZ4C321iob0MXeTf4q4FRpqQzrNxnALfZM37BGzPhmuZM9dAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU8Vlrv7V4sxrhtQkkyy1FUYE+oqswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM0NDY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuQ MA0GCSqGSIb3DQEBCwUAA4IBAQBBYjxL0brWX7K/3RQ2ZQc6nqvmkTsyYemGf2oR Mzb7BWLp2ZmKYJ25AEtMrpkVNKELfDklFfE2aiYp/O+5a0TyeZ361k2u4BxaUQ6k rjYsXm4Nz1zQ7MO/GLc9nY4FVWLZ2mIAPdqEQBwcjsOUi0kr7lgehDb2N6BbG0L/ VHwfUgGRL3hxsB4tr5N0CTr8ujM0+bDTPJcHT1aFgAMD0p0OU0eIS/UN9Wfiatau bpBqVqzJMDKsmzhOk7WLuCJCEtNon00AZjS+rnCUGkK/HF/R5XEsHDLfENVinOi3 wp0AvWs5qJiuzRpYMn0of6xsk38+BWAiwQ/qUyFTi+Cs0xhM -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:36 2025 by rpki-client