This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: VIAhNZWXAYlX9doJOTqsF6mjxLbbXXzrsWUSe94ZCpk= Subject key identifier: 0C:C4:1A:7A:3D:5E:71:42:FC:57:3A:26:CD:BE:F1:95:E0:9E:4A:A9 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 18CC690DF3F70743EEF0E440D1DCB9550BDC684B Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa Signing time: Mon 08 Dec 2025 00:00:41 +0000 ROA not before: Sun 07 Dec 2025 23:55:41 +0000 ROA not after: Mon 07 Dec 2026 00:00:41 +0000 asID: 20473 IP address blocks: 141.11.70.0/24 maxlen: 24 141.11.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cc:69:0d:f3:f7:07:43:ee:f0:e4:40:d1:dc:b9:55:0b:dc:68:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 7 23:55:41 2025 GMT Not After : Dec 7 00:00:41 2026 GMT Subject: CN=0CC41A7A3D5E7142FC573A26CDBEF195E09E4AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:8b:78:db:66:2c:53:32:03:0d:0a:4c:24: f4:8f:1c:c6:26:32:0e:ec:de:fb:60:25:5f:66:3b: 61:da:c2:25:75:3b:ac:df:74:9b:6a:d7:af:77:41: a4:d2:5c:56:b3:99:c1:aa:ce:ba:78:2c:e6:80:c1: f7:8f:87:fb:f0:b6:cf:db:c5:38:85:d5:08:45:c2: f7:5b:65:61:23:9d:28:cf:32:db:c1:0e:03:16:62: f9:eb:a7:53:15:fc:4b:06:2d:b7:f6:0f:3f:0f:3d: e3:c1:a3:3a:f5:39:c4:79:7d:d4:f8:be:ec:f9:25: 4f:7f:88:d4:b9:3b:ab:ad:0f:77:00:62:d1:ec:cb: 93:92:56:eb:12:40:5a:ec:ec:ba:75:8e:4b:25:d0: 6a:bb:e3:7d:b4:e2:8e:6b:40:38:88:ae:40:3b:56: 2e:c5:71:d6:c9:a0:15:66:73:ba:ac:c7:fb:fe:74: 06:8f:91:8e:73:f4:92:98:e7:89:91:fb:64:16:75: 06:bb:c1:01:00:11:9f:3b:12:36:cf:06:36:1c:ae: 14:d0:d9:1a:0d:aa:a4:1f:71:d5:4f:d5:73:76:db: 1c:32:b4:b5:14:e4:3b:69:43:60:bf:9f:1c:1f:d8: c1:55:9a:29:a5:d1:b3:96:42:f5:62:9d:d4:88:78: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C4:1A:7A:3D:5E:71:42:FC:57:3A:26:CD:BE:F1:95:E0:9E:4A:A9 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.70.0/24 141.11.116.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:98:c3:ad:d4:8f:c7:ce:df:04:e0:a3:ed:44:e0:27:06:43: ac:0b:cd:06:10:ba:3f:d2:d5:f9:bd:84:84:0c:3b:6e:73:08: dd:2e:c3:0c:01:87:fc:29:9d:77:da:89:31:30:5b:16:8b:59: 51:c0:ab:80:e4:f9:3f:b7:4f:38:5a:63:c9:0d:ac:53:41:fc: 6a:35:19:9a:c7:93:79:a0:0e:ae:c7:76:90:33:46:f4:6c:0d: c9:7a:ef:27:15:ad:35:5d:f0:b7:cc:b2:7d:64:22:8f:b1:b4: 45:fa:e7:cf:b9:8c:f6:6c:ae:97:a0:f0:ec:f3:b2:ef:e0:92: 7e:cb:31:a3:78:d1:4f:cc:95:f0:38:b4:f7:99:3e:21:a2:72: 55:37:95:10:78:d3:07:58:75:ee:13:fe:9f:ff:df:67:05:91: bd:a5:6d:cf:00:67:02:11:1b:46:af:f2:23:1a:4a:20:a2:3c: 9a:3f:69:35:84:ae:18:97:d4:49:ed:34:70:db:ed:d0:ba:03: 1a:dd:20:14:0c:fc:2b:0e:5b:2c:c8:0e:7c:64:31:b6:d9:56: a2:c3:6a:2b:bb:14:0f:13:f6:04:a3:7b:ba:16:d9:74:5e:b1: 2c:b6:da:fe:d0:b8:5b:c9:67:85:e0:9b:7d:c7:57:4a:c2:f4: 26:43:d1:76 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUGMxpDfP3B0Pu8ORA0dy5VQvcaEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMDcyMzU1NDFaFw0yNjEyMDcwMDAwNDFaMDMxMTAvBgNV BAMTKDBDQzQxQTdBM0Q1RTcxNDJGQzU3M0EyNkNEQkVGMTk1RTA5RTRBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7R4t422YsUzIDDQpMJPSPHMYm Mg7s3vtgJV9mO2HawiV1O6zfdJtq1693QaTSXFazmcGqzrp4LOaAwfePh/vwts/b xTiF1QhFwvdbZWEjnSjPMtvBDgMWYvnrp1MV/EsGLbf2Dz8PPePBozr1OcR5fdT4 vuz5JU9/iNS5O6utD3cAYtHsy5OSVusSQFrs7Lp1jksl0Gq743204o5rQDiIrkA7 Vi7FcdbJoBVmc7qsx/v+dAaPkY5z9JKY54mR+2QWdQa7wQEAEZ87EjbPBjYcrhTQ 2RoNqqQfcdVP1XN22xwytLUU5DtpQ2C/nxwf2MFVmiml0bOWQvVindSIeNkNAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUDMQaej1ecUL8Vzomzb7xleCeSqkwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNC0YD BACNC3QwDQYJKoZIhvcNAQELBQADggEBAC+Yw63Uj8fO3wTgo+1E4CcGQ6wLzQYQ uj/S1fm9hIQMO25zCN0uwwwBh/wpnXfaiTEwWxaLWVHAq4Dk+T+3TzhaY8kNrFNB /Go1GZrHk3mgDq7HdpAzRvRsDcl67ycVrTVd8LfMsn1kIo+xtEX658+5jPZsrpeg 8Ozzsu/gkn7LMaN40U/MlfA4tPeZPiGiclU3lRB40wdYde4T/p//32cFkb2lbc8A ZwIRG0av8iMaSiCiPJo/aTWErhiX1EntNHDb7dC6AxrdIBQM/CsOWyzIDnxkMbbZ VqLDaiu7FA8T9gSje7oW2XResSy22v7QuFvJZ4Xgm33HV0rC9CZD0XY= -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:00 2025 by rpki-client