This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204539.roa File: AS204539.roa (raw, json) Hash identifier: TPn11WHuVspLwwz1ika6WIa7Ry1FrYuPOKW+CM65QDE= Subject key identifier: 74:77:3E:B9:96:58:32:D8:55:0A:BA:F6:C9:EC:3A:70:48:BE:7C:7A Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 183FEA3D7D811CAE6C95B60AD1350258F2E7A61D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204539.roa Signing time: Fri 12 Dec 2025 07:37:27 +0000 ROA not before: Fri 12 Dec 2025 07:32:27 +0000 ROA not after: Fri 11 Dec 2026 07:37:27 +0000 asID: 204539 IP address blocks: 141.11.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3f:ea:3d:7d:81:1c:ae:6c:95:b6:0a:d1:35:02:58:f2:e7:a6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 12 07:32:27 2025 GMT Not After : Dec 11 07:37:27 2026 GMT Subject: CN=74773EB9965832D8550ABAF6C9EC3A7048BE7C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:2e:2b:73:3a:47:d8:44:ec:1e:17:c9:42: 93:dc:d8:b0:d2:93:e3:ee:35:22:bb:ea:0a:c2:c2: 41:29:31:eb:26:8f:4b:70:8d:6a:3b:f9:76:62:3b: b9:54:a5:a9:9d:82:ae:1d:e8:5e:21:02:25:ea:96: e5:b6:39:85:7d:f0:8d:1d:11:e0:60:aa:e7:91:48: 1a:0d:cb:cf:f5:55:93:98:15:80:33:fd:fc:5b:6e: c3:7d:f4:50:ba:3c:0c:0e:1e:0b:0f:bc:4c:0e:f5: f9:24:0c:89:bf:39:95:84:ce:90:0e:af:d3:ed:a0: ff:e3:45:43:cc:8e:dd:ed:b8:fc:39:c9:bb:d7:35: 7f:24:96:ef:27:35:34:7e:99:dc:2d:97:32:85:b6: 12:5f:18:4f:96:90:7e:61:05:be:8b:af:1c:43:20: 13:d3:15:92:c0:d1:04:7e:7c:12:22:31:06:79:4f: 3f:30:fd:b3:fd:c1:31:64:50:1a:9c:f4:94:85:ba: 96:0b:95:24:19:fb:73:93:90:d3:1a:0b:90:a7:c6: a0:68:00:c4:3e:6f:0b:8d:0d:75:48:46:3f:9a:4f: cf:71:3b:51:e1:02:9c:a8:cf:71:83:57:7c:ca:6e: cd:ec:47:5e:e1:2c:25:77:ab:99:99:89:41:47:d3: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:77:3E:B9:96:58:32:D8:55:0A:BA:F6:C9:EC:3A:70:48:BE:7C:7A X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.141.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:47:fa:5d:24:d4:6d:87:0d:ec:e3:f7:22:6b:5b:3f:80:6b: bc:78:73:a9:17:e4:dd:67:59:58:6d:1f:9f:6b:2b:83:4c:9a: 5f:3b:46:ed:fa:e5:9d:75:c5:aa:7f:95:cb:98:21:8f:7c:8c: ab:c1:13:70:31:23:76:f7:34:32:1c:db:89:a7:6f:ea:86:d7: f6:01:9f:73:86:4b:89:d4:f6:a4:3f:55:4a:6e:6b:41:e6:d4: d6:64:32:71:97:30:84:a4:53:eb:d3:e1:6c:e6:18:e0:2f:5d: 79:24:dd:59:7d:45:8e:b9:34:c4:a5:31:7f:4c:d2:63:52:8d: bd:75:0e:1c:dd:72:1a:9b:ee:4e:ae:65:68:4e:3a:be:aa:1b: 6c:44:49:a7:48:22:4b:a3:97:fb:37:69:44:3f:2c:f7:24:05: 94:53:61:d5:b8:0a:dc:80:81:57:fe:6b:28:c4:b6:54:07:b3: 02:2f:a7:a6:26:90:c3:9a:e4:87:76:40:0b:da:c1:84:97:52: 8e:9a:18:13:56:c0:b9:68:ca:d8:ac:7a:0f:cd:12:28:29:c8: 6a:25:78:17:39:a9:47:de:f8:8e:7d:76:d4:26:d5:df:b8:4a: f9:41:f2:9b:c4:05:0c:72:1b:09:f4:74:e0:24:c8:bf:22:a5: e0:02:74:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGD/qPX2BHK5slbYK0TUCWPLnph0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTIwNzMyMjdaFw0yNjEyMTEwNzM3MjdaMDMxMTAvBgNV BAMTKDc0NzczRUI5OTY1ODMyRDg1NTBBQkFGNkM5RUMzQTcwNDhCRTdDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Yi4rczpH2ETsHhfJQpPc2LDS k+PuNSK76grCwkEpMesmj0twjWo7+XZiO7lUpamdgq4d6F4hAiXqluW2OYV98I0d EeBgqueRSBoNy8/1VZOYFYAz/fxbbsN99FC6PAwOHgsPvEwO9fkkDIm/OZWEzpAO r9PtoP/jRUPMjt3tuPw5ybvXNX8klu8nNTR+mdwtlzKFthJfGE+WkH5hBb6LrxxD IBPTFZLA0QR+fBIiMQZ5Tz8w/bP9wTFkUBqc9JSFupYLlSQZ+3OTkNMaC5CnxqBo AMQ+bwuNDXVIRj+aT89xO1HhApyoz3GDV3zKbs3sR17hLCV3q5mZiUFH0wetAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUdHc+uZZYMthVCrr2yew6cEi+fHowHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA0NTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuN MA0GCSqGSIb3DQEBCwUAA4IBAQB+R/pdJNRthw3s4/cia1s/gGu8eHOpF+TdZ1lY bR+fayuDTJpfO0bt+uWddcWqf5XLmCGPfIyrwRNwMSN29zQyHNuJp2/qhtf2AZ9z hkuJ1PakP1VKbmtB5tTWZDJxlzCEpFPr0+Fs5hjgL115JN1ZfUWOuTTEpTF/TNJj Uo29dQ4c3XIam+5OrmVoTjq+qhtsREmnSCJLo5f7N2lEPyz3JAWUU2HVuArcgIFX /msoxLZUB7MCL6emJpDDmuSHdkAL2sGEl1KOmhgTVsC5aMrYrHoPzRIoKchqJXgX OalH3viOfXbUJtXfuEr5QfKbxAUMchsJ9HTgJMi/IqXgAnTu -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:33 2025 by rpki-client