This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14293.roa File: AS14293.roa (raw, json) Hash identifier: O3A08e9/5hZrag/v5yDQPtpvf1Qf6qWlsxS+mnh3WSg= Subject key identifier: 75:34:4B:ED:8C:C3:A5:AD:FA:12:6B:CD:27:FE:5C:A9:EC:8F:75:0D Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 46291FCAEF71F79CA96CE005525C411943E5F5CC Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14293.roa Signing time: Thu 18 Dec 2025 07:18:14 +0000 ROA not before: Thu 18 Dec 2025 07:13:14 +0000 ROA not after: Thu 17 Dec 2026 07:18:14 +0000 asID: 14293 IP address blocks: 141.11.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:29:1f:ca:ef:71:f7:9c:a9:6c:e0:05:52:5c:41:19:43:e5:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 18 07:13:14 2025 GMT Not After : Dec 17 07:18:14 2026 GMT Subject: CN=75344BED8CC3A5ADFA126BCD27FE5CA9EC8F750D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:63:ab:e4:c6:10:dc:c3:3a:49:b8:16:2d: bf:2c:c6:e6:4c:e6:ce:64:27:2a:4d:ce:8d:0b:35: 6c:0b:22:17:46:eb:69:59:ba:2f:75:d3:b9:5d:ea: 21:3b:0f:3d:71:bc:8d:24:22:cc:fd:53:f9:41:f7: 5b:97:9c:d7:f5:bc:47:06:ba:88:f4:1e:f4:a9:2d: 17:87:7b:44:bc:a9:f4:c9:7c:d7:61:2d:68:85:ee: 62:7d:3e:a7:20:28:18:d4:53:4a:2f:69:d2:86:76: 2d:a8:07:d9:93:26:d2:b9:25:21:5e:98:07:3e:1f: d5:3c:18:fe:75:32:c7:04:28:b7:6b:9f:fc:fc:b9: 10:2a:f7:f2:f0:ca:d5:82:34:21:8d:12:56:96:03: b4:d7:53:34:63:fa:1c:de:ae:6b:af:31:eb:ae:ac: 2d:90:ec:e4:df:30:9b:33:09:95:9b:bc:c2:8d:6c: fb:38:98:43:d4:de:89:47:1d:09:13:0e:06:46:8e: e9:65:7c:a7:dc:a2:c6:31:cf:df:4d:5d:ae:21:84: b4:2f:2c:52:d7:a8:80:f0:d1:23:42:74:66:0d:d7: a1:ac:08:e0:35:73:b1:a3:06:8f:99:ef:d8:97:8c: 26:c8:19:5a:b4:b2:b3:1a:46:9e:30:7b:92:59:3d: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:34:4B:ED:8C:C3:A5:AD:FA:12:6B:CD:27:FE:5C:A9:EC:8F:75:0D X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14293.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.217.0/24 Signature Algorithm: sha256WithRSAEncryption 24:63:7c:63:a1:78:60:20:ec:c8:8b:0f:0d:4b:4e:94:09:f5: c0:01:9c:0a:f3:68:8e:0c:8a:1c:05:b7:d3:3b:94:ff:c0:21: 0e:4b:b2:28:f7:8c:a9:ee:b0:0f:39:db:7e:5c:a9:f9:15:15: a3:33:3f:a7:d5:ee:95:f9:86:2d:97:e9:96:3e:36:bd:89:7d: 2d:4d:e1:ca:df:5f:58:d9:8d:50:6b:d5:ed:d3:bc:a8:a4:b5: 88:94:b0:7a:dc:19:e9:c9:ec:db:cf:72:86:11:a6:5f:bb:65: 70:f1:0e:65:20:a4:0b:31:04:d1:c1:a1:3f:db:1e:4f:19:53: ac:1d:23:2e:2d:f1:ac:3f:e0:66:1c:d3:f2:6c:d5:71:82:9f: 24:5f:07:1a:8b:a7:74:b8:ea:03:f2:60:32:71:77:cf:b7:f9: 0e:14:4c:9a:97:68:83:2d:ae:4e:d6:9d:42:e0:fb:44:65:63: c0:e2:9c:01:d2:7b:e6:b7:d8:f7:d7:ff:a6:b9:32:c5:d2:98: ce:22:42:d7:59:32:8c:ea:fb:d4:49:be:6a:64:73:a3:c2:4e: b0:ad:37:08:28:33:d0:07:71:a8:27:df:f3:d9:44:ed:99:dd: e2:1e:f4:7a:3b:24:2d:a9:c1:0d:53:4f:c1:49:04:59:2f:ff: d8:0d:d8:e1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIURikfyu9x95ypbOAFUlxBGUPl9cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTgwNzEzMTRaFw0yNjEyMTcwNzE4MTRaMDMxMTAvBgNV BAMTKDc1MzQ0QkVEOENDM0E1QURGQTEyNkJDRDI3RkU1Q0E5RUM4Rjc1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIH2Or5MYQ3MM6SbgWLb8sxuZM 5s5kJypNzo0LNWwLIhdG62lZui9107ld6iE7Dz1xvI0kIsz9U/lB91uXnNf1vEcG uoj0HvSpLReHe0S8qfTJfNdhLWiF7mJ9PqcgKBjUU0ovadKGdi2oB9mTJtK5JSFe mAc+H9U8GP51MscEKLdrn/z8uRAq9/LwytWCNCGNElaWA7TXUzRj+hzermuvMeuu rC2Q7OTfMJszCZWbvMKNbPs4mEPU3olHHQkTDgZGjullfKfcosYxz99NXa4hhLQv LFLXqIDw0SNCdGYN16GsCOA1c7GjBo+Z79iXjCbIGVq0srMaRp4we5JZPewpAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUdTRL7YzDpa36EmvNJ/5cqeyPdQ0wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTQyOTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC9kw DQYJKoZIhvcNAQELBQADggEBACRjfGOheGAg7MiLDw1LTpQJ9cABnArzaI4MihwF t9M7lP/AIQ5Lsij3jKnusA85235cqfkVFaMzP6fV7pX5hi2X6ZY+Nr2JfS1N4crf X1jZjVBr1e3TvKiktYiUsHrcGenJ7NvPcoYRpl+7ZXDxDmUgpAsxBNHBoT/bHk8Z U6wdIy4t8aw/4GYc0/Js1XGCnyRfBxqLp3S46gPyYDJxd8+3+Q4UTJqXaIMtrk7W nULg+0RlY8DinAHSe+a32PfX/6a5MsXSmM4iQtdZMozq+9RJvmpkc6PCTrCtNwgo M9AHcagn3/PZRO2Z3eIe9Ho7JC2pwQ1TT8FJBFkv/9gN2OE= -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:31 2025 by rpki-client