This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204535.roa File: AS204535.roa (raw, json) Hash identifier: 2rnNH5onjdB70yFicfl7bI0CdedrN1Y5t008ptx8pH8= Subject key identifier: 99:2F:B8:45:37:2B:68:CD:27:4E:7B:C5:38:76:A1:15:39:D2:AD:1D Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 0F262B944DC50ACB82099A75E1F482B1EE523A2D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204535.roa Signing time: Thu 11 Dec 2025 14:56:09 +0000 ROA not before: Thu 11 Dec 2025 14:51:09 +0000 ROA not after: Thu 10 Dec 2026 14:56:09 +0000 asID: 204535 IP address blocks: 141.11.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:26:2b:94:4d:c5:0a:cb:82:09:9a:75:e1:f4:82:b1:ee:52:3a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 11 14:51:09 2025 GMT Not After : Dec 10 14:56:09 2026 GMT Subject: CN=992FB845372B68CD274E7BC53876A11539D2AD1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:2c:c7:f0:0e:6d:22:b7:03:df:b9:3d:16: 74:38:78:cf:72:3a:d4:f1:41:ad:b0:58:94:31:ed: 98:cd:c6:f2:ab:8e:d8:fd:26:83:27:ce:31:5f:71: ed:f7:ab:25:29:42:02:84:16:ac:a3:cf:8d:8a:fb: 57:16:8b:dd:c1:03:b8:ef:1f:30:0a:08:11:65:9e: 29:59:04:92:5a:5f:81:79:e8:65:a3:b4:f7:de:fa: 8a:be:bc:3b:c8:01:94:3c:69:89:00:27:71:f6:fe: e9:b7:76:dc:c3:14:31:f0:ab:46:d1:d2:85:ed:e6: 28:4f:42:e7:ec:f0:fa:7e:33:0a:f2:c3:10:f0:bb: eb:63:26:49:79:4b:2d:e8:91:25:c5:41:b1:d9:72: d0:eb:85:05:12:61:7c:6e:ff:96:fe:c3:5f:42:cd: 70:32:1a:0b:13:bd:d1:39:33:f7:11:bc:64:9a:7e: 60:ed:c0:27:bb:00:e5:9d:22:82:f9:20:58:ba:78: 4b:45:22:4b:d3:82:ef:f1:b9:a9:8d:ba:26:53:c0: 9a:6b:34:34:60:15:fe:a3:ea:88:50:d0:d7:e7:c8: 70:dc:3f:fe:f1:87:a0:3b:74:ef:de:f7:97:f5:37: e9:c3:47:c4:00:ad:64:b5:b3:33:af:7b:ae:31:cd: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:B8:45:37:2B:68:CD:27:4E:7B:C5:38:76:A1:15:39:D2:AD:1D X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.141.0/24 Signature Algorithm: sha256WithRSAEncryption d8:ba:73:77:0d:67:3c:8e:0c:8e:8f:92:96:3e:12:6a:11:85: 7b:6e:48:e4:37:4c:3e:e5:f8:22:80:f4:21:ff:e8:10:dd:d6: ad:20:e6:7f:0b:fa:6d:c5:a8:29:db:50:b8:46:f1:66:84:4e: 58:6a:f1:5a:dc:1e:65:4c:7b:8f:55:70:a9:af:a5:9b:b6:1e: da:1c:03:b7:1b:02:c4:94:58:e4:68:bf:12:b1:5f:5b:83:e6: 6e:aa:15:af:ac:92:98:5b:5b:69:04:6f:ad:1a:22:fb:1c:a5: 9b:40:10:5f:00:0c:de:62:78:84:b3:f7:f7:fc:d4:61:ee:6f: 3d:6b:1a:26:36:a1:66:42:69:60:b3:4a:07:a6:74:28:b1:02: f6:4f:d9:ec:9e:f8:bd:af:e1:30:95:e6:73:c3:67:6a:27:9d: ca:58:80:cc:ca:0a:a9:91:43:34:bd:5e:af:e9:ce:d7:a1:00: dd:1b:d2:f1:eb:87:6f:bd:8a:ef:4f:c0:58:7a:4b:27:b9:d3: 15:31:72:a4:73:fb:9c:39:86:90:78:28:bd:3c:68:19:93:de: 37:8a:05:8f:4b:12:a9:e6:b7:78:bc:85:04:29:02:c4:0d:6d: 8f:37:1b:c9:a5:0e:69:bc:e5:9d:f1:8d:10:b8:ac:0a:2a:20: e9:6a:a9:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUDyYrlE3FCsuCCZp14fSCse5SOi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTExNDUxMDlaFw0yNjEyMTAxNDU2MDlaMDMxMTAvBgNV BAMTKDk5MkZCODQ1MzcyQjY4Q0QyNzRFN0JDNTM4NzZBMTE1MzlEMkFEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTyyzH8A5tIrcD37k9FnQ4eM9y OtTxQa2wWJQx7ZjNxvKrjtj9JoMnzjFfce33qyUpQgKEFqyjz42K+1cWi93BA7jv HzAKCBFlnilZBJJaX4F56GWjtPfe+oq+vDvIAZQ8aYkAJ3H2/um3dtzDFDHwq0bR 0oXt5ihPQufs8Pp+MwrywxDwu+tjJkl5Sy3okSXFQbHZctDrhQUSYXxu/5b+w19C zXAyGgsTvdE5M/cRvGSafmDtwCe7AOWdIoL5IFi6eEtFIkvTgu/xuamNuiZTwJpr NDRgFf6j6ohQ0NfnyHDcP/7xh6A7dO/e95f1N+nDR8QArWS1szOve64xzQR9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUmS+4RTcraM0nTnvFOHahFTnSrR0wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA0NTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuN MA0GCSqGSIb3DQEBCwUAA4IBAQDYunN3DWc8jgyOj5KWPhJqEYV7bkjkN0w+5fgi gPQh/+gQ3datIOZ/C/ptxagp21C4RvFmhE5YavFa3B5lTHuPVXCpr6Wbth7aHAO3 GwLElFjkaL8SsV9bg+ZuqhWvrJKYW1tpBG+tGiL7HKWbQBBfAAzeYniEs/f3/NRh 7m89axomNqFmQmlgs0oHpnQosQL2T9nsnvi9r+EwleZzw2dqJ53KWIDMygqpkUM0 vV6v6c7XoQDdG9Lx64dvvYrvT8BYeksnudMVMXKkc/ucOYaQeCi9PGgZk943igWP SxKp5rd4vIUEKQLEDW2PNxvJpQ5pvOWd8Y0QuKwKKiDpaqlb -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:31 2025 by rpki-client