This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS202792.roa File: AS202792.roa (raw, json) Hash identifier: uWe0AHHr5oxugPQ7k3fvVO+SymUhzQk1O7P4/DO7Cvs= Subject key identifier: 36:77:81:0F:6C:52:3D:EF:85:4D:5F:47:B4:FC:E5:AF:40:B2:2D:23 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 3ADC273705C303E75A01BD664CBDF8E70F8EA2AA Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS202792.roa Signing time: Wed 17 Dec 2025 06:15:55 +0000 ROA not before: Wed 17 Dec 2025 06:10:55 +0000 ROA not after: Wed 16 Dec 2026 06:15:55 +0000 asID: 202792 IP address blocks: 141.11.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:27:37:05:c3:03:e7:5a:01:bd:66:4c:bd:f8:e7:0f:8e:a2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 17 06:10:55 2025 GMT Not After : Dec 16 06:15:55 2026 GMT Subject: CN=3677810F6C523DEF854D5F47B4FCE5AF40B22D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:ba:cd:7b:8f:4c:fd:9c:c5:a8:d7:c8:46: 71:eb:00:ec:e1:43:92:9e:41:01:13:84:9f:42:c1: 23:74:92:1f:59:39:e1:58:d5:a8:ea:11:ba:57:38: 62:97:e0:86:00:81:7d:7a:9d:f0:70:5a:b8:1e:1d: 33:c3:bc:71:79:e5:1c:ca:20:b0:2a:05:34:a9:de: b1:1e:f0:c7:3a:51:d9:87:5c:a6:55:fb:85:fd:4c: 9b:a6:8c:db:09:d6:ca:4a:79:94:7a:84:65:d0:7d: a3:dc:19:75:14:42:dc:cc:37:fe:ab:45:9b:8d:5e: a8:df:27:af:92:7e:c3:cc:d7:c3:83:01:24:04:c2: 68:a4:31:70:9d:7e:5c:ac:c4:fd:d1:87:2d:1c:b8: 13:9e:b8:0c:1d:4d:bd:07:8d:33:cb:4f:92:fd:17: b8:18:37:9d:04:c6:1d:90:05:63:d1:5e:d7:ba:ab: 1c:24:df:3d:f4:80:05:05:cc:65:cc:09:5f:25:0d: 24:9b:e1:31:04:ab:03:2f:22:d1:e0:36:15:44:ad: 7b:72:d2:85:41:77:be:0d:b3:54:e3:b3:88:6d:42: 68:c1:b5:11:db:64:28:cf:bb:8b:4b:70:fe:89:5b: 70:2b:59:d7:23:f4:6d:8f:b3:57:2c:13:b6:9b:2d: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:77:81:0F:6C:52:3D:EF:85:4D:5F:47:B4:FC:E5:AF:40:B2:2D:23 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS202792.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.198.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d8:e7:c6:9c:c0:dd:42:29:e7:a6:3e:1a:e3:9d:18:df:79: 05:f3:1e:49:fe:1e:8a:64:12:b3:d8:b3:44:cb:7b:32:30:27: 3a:15:63:c7:8a:c0:17:3f:66:44:7e:63:08:6e:90:46:d6:30: d9:39:81:a9:a3:77:c6:6b:28:41:14:71:fa:06:ae:56:ac:ac: c6:6d:5a:00:e9:69:c8:c0:e4:93:a7:30:3e:b3:5b:cc:03:d2: 95:68:ca:89:8d:aa:74:3d:b6:e0:bb:5e:d1:3b:33:40:95:dc: e7:66:cf:cb:1b:b1:6a:ec:28:ec:83:04:c3:67:5d:3e:84:a7: d7:3d:0f:96:fe:52:e5:16:41:46:c8:28:3c:64:1b:61:8a:9c: 2e:b8:46:b4:74:d8:8d:d5:56:0d:a9:9a:9f:38:19:a7:0c:97: c1:b7:cb:e2:fe:52:a6:ef:f4:c9:f4:a2:0b:36:a3:8f:92:0a: 2c:77:41:33:a4:e8:15:57:13:66:4e:20:ff:74:12:4f:bd:57: 54:55:85:f5:51:f0:56:20:6b:d2:2d:2a:7e:98:a2:62:d7:fc: 53:10:f6:a5:7b:9c:14:42:30:3b:35:2b:3c:09:ff:7a:28:11: 22:65:55:0b:ed:ed:43:9d:a1:89:ca:66:0e:ad:dd:e6:ad:68: bb:09:76:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUOtwnNwXDA+daAb1mTL345w+OoqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTcwNjEwNTVaFw0yNjEyMTYwNjE1NTVaMDMxMTAvBgNV BAMTKDM2Nzc4MTBGNkM1MjNERUY4NTRENUY0N0I0RkNFNUFGNDBCMjJEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItrrNe49M/ZzFqNfIRnHrAOzh Q5KeQQEThJ9CwSN0kh9ZOeFY1ajqEbpXOGKX4IYAgX16nfBwWrgeHTPDvHF55RzK ILAqBTSp3rEe8Mc6UdmHXKZV+4X9TJumjNsJ1spKeZR6hGXQfaPcGXUUQtzMN/6r RZuNXqjfJ6+SfsPM18ODASQEwmikMXCdflysxP3Rhy0cuBOeuAwdTb0HjTPLT5L9 F7gYN50Exh2QBWPRXte6qxwk3z30gAUFzGXMCV8lDSSb4TEEqwMvItHgNhVErXty 0oVBd74Ns1Tjs4htQmjBtRHbZCjPu4tLcP6JW3ArWdcj9G2Ps1csE7abLTAXAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUNneBD2xSPe+FTV9HtPzlr0CyLSMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAyNzkyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvG MA0GCSqGSIb3DQEBCwUAA4IBAQAQ2OfGnMDdQinnpj4a450Y33kF8x5J/h6KZBKz 2LNEy3syMCc6FWPHisAXP2ZEfmMIbpBG1jDZOYGpo3fGayhBFHH6Bq5WrKzGbVoA 6WnIwOSTpzA+s1vMA9KVaMqJjap0Pbbgu17ROzNAldznZs/LG7Fq7CjsgwTDZ10+ hKfXPQ+W/lLlFkFGyCg8ZBthipwuuEa0dNiN1VYNqZqfOBmnDJfBt8vi/lKm7/TJ 9KILNqOPkgosd0EzpOgVVxNmTiD/dBJPvVdUVYX1UfBWIGvSLSp+mKJi1/xTEPal e5wUQjA7NSs8Cf96KBEiZVUL7e1DnaGJymYOrd3mrWi7CXZ8 -----END CERTIFICATE-----Generated at Sat Dec 20 02:50:01 2025 by rpki-client