This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: B5jB/iSPa5aaKHEY4GrK07TY1RlZc+fKZG3eHgtW9YM= Subject key identifier: 8D:06:3F:EF:BD:26:C5:7B:32:C7:1C:02:F6:11:64:A1:82:6D:80:F5 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 5A94BB456891217C42203DC502CDB610206F60A6 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa Signing time: Fri 12 Dec 2025 06:26:58 +0000 ROA not before: Fri 12 Dec 2025 06:21:58 +0000 ROA not after: Fri 11 Dec 2026 06:26:58 +0000 asID: 16276 IP address blocks: 141.11.39.0/24 maxlen: 24 141.11.40.0/24 maxlen: 24 141.11.49.0/24 maxlen: 24 141.11.74.0/23 maxlen: 23 141.11.76.0/24 maxlen: 24 141.11.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:bb:45:68:91:21:7c:42:20:3d:c5:02:cd:b6:10:20:6f:60:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 12 06:21:58 2025 GMT Not After : Dec 11 06:26:58 2026 GMT Subject: CN=8D063FEFBD26C57B32C71C02F61164A1826D80F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:8b:7e:6b:1d:0a:6b:e5:25:7d:ad:ad:b2: 8c:0e:19:00:09:ee:e0:75:fc:6c:7e:c6:62:03:af: dc:97:89:f0:b1:ca:12:64:bc:c3:31:74:74:40:66: 3f:4e:bf:65:f9:d9:af:ae:c6:39:7b:e4:c3:07:15: 8a:21:86:17:f6:e1:d1:40:bd:40:f2:3c:70:71:0e: 39:b2:0c:0d:e8:6e:4d:17:7f:c5:dd:f6:b3:54:2e: 52:94:b8:dc:26:d8:92:bc:dc:60:9f:f6:06:ab:1b: f8:d9:55:7e:39:ba:c5:fd:b1:c5:3e:35:a0:be:35: fe:07:22:c5:82:9a:20:59:bf:e6:2e:f4:89:a4:93: 68:a8:31:e7:90:90:6a:f6:c0:46:95:47:ad:07:0e: 4d:b0:34:9d:80:fb:a3:7f:3d:ce:ef:ce:01:40:48: ca:d6:5f:ee:d5:6d:8a:dc:a9:34:5c:93:4b:27:57: 03:b6:bc:39:d2:1e:39:ab:da:c6:73:bd:52:d9:22: 93:be:b3:a0:3d:06:ff:49:07:66:8c:af:ee:bc:06: fb:26:d5:6e:6e:ac:ff:85:4c:dc:d0:f7:65:16:ae: 1e:56:01:f8:3e:42:c3:f5:7d:be:3f:66:63:33:ce: 15:a4:84:96:d4:21:43:7a:ed:80:28:2d:fa:b6:a6: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:06:3F:EF:BD:26:C5:7B:32:C7:1C:02:F6:11:64:A1:82:6D:80:F5 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.39.0-141.11.40.255 141.11.49.0/24 141.11.74.0-141.11.76.255 141.11.79.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:51:20:e4:d9:f9:26:86:a3:11:a0:e3:71:b3:c6:90:1e:8e: 21:e9:47:cc:21:67:f0:ed:71:f9:d7:7d:14:22:54:34:97:2c: 6c:1a:50:bf:f6:da:99:13:84:cb:01:1e:70:46:ed:88:f7:66: a7:d6:83:27:76:3a:ba:ec:4b:11:d9:75:69:ab:98:7c:c8:70: 23:a9:84:95:64:1a:7c:2c:13:51:e9:c8:02:fa:8e:6b:1a:67: c2:c7:f6:82:97:ea:b2:10:5c:6d:c6:a5:80:fa:dd:50:b5:a9: 41:3c:d0:c0:9d:35:66:ec:50:7b:21:d5:64:81:8b:31:15:b0: 45:a0:df:16:7a:5b:96:9d:9c:7a:d4:b5:35:92:8f:a3:02:01: 44:1d:af:ae:74:91:64:f2:5e:27:4d:3b:92:5f:77:83:dc:0d: b9:4e:e8:51:55:f9:12:99:35:3b:04:48:fc:3f:66:2b:03:1c: c1:94:2b:48:1f:9e:7c:9c:43:4b:13:69:e2:ec:9b:4a:bf:52: 3f:db:29:15:78:c6:29:c9:5e:fb:8c:bb:ce:3c:df:b2:a7:28: d9:9a:2b:06:54:f3:6b:86:69:b2:9e:85:6b:66:57:49:d8:ea: 32:48:43:31:ed:b2:51:fa:70:fb:8e:3c:a9:31:5e:4e:d0:99: ba:d2:ad:b7 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUWpS7RWiRIXxCID3FAs22ECBvYKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTIwNjIxNThaFw0yNjEyMTEwNjI2NThaMDMxMTAvBgNV BAMTKDhEMDYzRkVGQkQyNkM1N0IzMkM3MUMwMkY2MTE2NEExODI2RDgwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVlot+ax0Ka+Ulfa2tsowOGQAJ 7uB1/Gx+xmIDr9yXifCxyhJkvMMxdHRAZj9Ov2X52a+uxjl75MMHFYohhhf24dFA vUDyPHBxDjmyDA3obk0Xf8Xd9rNULlKUuNwm2JK83GCf9garG/jZVX45usX9scU+ NaC+Nf4HIsWCmiBZv+Yu9Imkk2ioMeeQkGr2wEaVR60HDk2wNJ2A+6N/Pc7vzgFA SMrWX+7VbYrcqTRck0snVwO2vDnSHjmr2sZzvVLZIpO+s6A9Bv9JB2aMr+68Bvsm 1W5urP+FTNzQ92UWrh5WAfg+QsP1fb4/ZmMzzhWkhJbUIUN67YAoLfq2pj/ZAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUjQY/770mxXsyxxwC9hFkoYJtgPUwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMC4EAgABMCgwDAMEAI0L JwMEAI0LKAMEAI0LMTAMAwQBjQtKAwQAjQtMAwQAjQtPMA0GCSqGSIb3DQEBCwUA A4IBAQA+USDk2fkmhqMRoONxs8aQHo4h6UfMIWfw7XH5130UIlQ0lyxsGlC/9tqZ E4TLAR5wRu2I92an1oMndjq67EsR2XVpq5h8yHAjqYSVZBp8LBNR6cgC+o5rGmfC x/aCl+qyEFxtxqWA+t1QtalBPNDAnTVm7FB7IdVkgYsxFbBFoN8WeluWnZx61LU1 ko+jAgFEHa+udJFk8l4nTTuSX3eD3A25TuhRVfkSmTU7BEj8P2YrAxzBlCtIH558 nENLE2ni7JtKv1I/2ykVeMYpyV77jLvOPN+ypyjZmisGVPNrhmmynoVrZldJ2Ooy SEMx7bJR+nD7jjypMV5O0Jm60q23 -----END CERTIFICATE-----Generated at Thu Dec 18 05:23:03 2025 by rpki-client