This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204910.roa File: AS204910.roa (raw, json) Hash identifier: 41F50VGNg4HK2PEEyBurp2tzC3t5enw0Uib+rXk698A= Subject key identifier: 06:97:7C:19:12:C1:C3:F1:BB:BD:D0:10:F6:96:D5:33:7A:F9:48:CC Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 7FBBAB680E0307397CDC1FE2862A8AA7F99B56E4 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204910.roa Signing time: Wed 17 Dec 2025 03:23:03 +0000 ROA not before: Wed 17 Dec 2025 03:18:03 +0000 ROA not after: Wed 16 Dec 2026 03:23:03 +0000 asID: 204910 IP address blocks: 141.11.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bb:ab:68:0e:03:07:39:7c:dc:1f:e2:86:2a:8a:a7:f9:9b:56:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 17 03:18:03 2025 GMT Not After : Dec 16 03:23:03 2026 GMT Subject: CN=06977C1912C1C3F1BBBDD010F696D5337AF948CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:91:48:7d:49:9e:7e:95:46:47:15:a9:ea: 9c:8f:bc:e4:a4:90:e3:c9:7d:ee:c4:09:20:ca:ee: 36:3e:69:5a:40:ea:72:a1:3e:ef:bf:cd:13:79:76: e5:df:7e:0b:f7:e9:83:45:0f:62:df:9d:62:8a:78: a8:f6:f0:eb:1e:18:51:05:27:b6:3e:5b:0d:9b:f9: 67:92:82:e9:75:c2:d0:1f:03:92:a9:7f:ff:af:95: 9e:43:b3:be:3b:96:5d:1a:ad:70:53:09:8b:48:ac: d9:d2:fa:43:a8:93:02:7d:6e:0c:ac:d5:9b:0e:eb: dd:5d:d4:e1:c1:94:c3:8a:42:17:b5:bd:f4:00:ff: 07:d8:06:e3:4c:a1:60:26:9e:85:19:0c:6f:f8:56: ff:f6:2e:74:cd:f9:a4:dd:04:ae:ef:23:c7:52:2f: f4:e7:a6:ba:52:54:ac:a6:ec:2f:32:39:b4:b3:f3: 0f:a2:f5:21:63:a7:92:3b:be:10:60:da:ca:86:ad: 5a:01:2b:90:d7:f4:78:12:84:14:d3:9f:a8:ea:76: 6f:02:eb:d0:b8:75:a9:73:61:4a:df:86:39:31:55: 9f:cc:e6:81:0c:78:e2:b4:0f:29:61:08:f2:2f:db: b5:8d:ad:bb:03:39:17:c9:9d:86:ad:0b:ac:06:f2: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:7C:19:12:C1:C3:F1:BB:BD:D0:10:F6:96:D5:33:7A:F9:48:CC X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204910.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.174.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:b9:48:f2:3f:ef:49:9c:89:30:12:63:05:c0:c6:36:a7:22: 54:3d:df:3c:b5:4b:f7:ea:d1:3b:1c:83:89:25:84:f2:c9:fe: 5f:b5:4f:65:c6:a9:56:e1:60:01:87:cd:55:e7:46:07:18:ac: ec:12:9b:17:e8:c6:7a:98:cf:d0:9c:0f:9d:ad:11:b1:d3:d4: 73:4d:e7:63:e0:ab:89:2b:74:35:28:ab:e5:18:90:27:b3:93: 48:9e:95:71:ef:51:82:7f:b0:eb:85:00:e4:f0:9a:56:00:af: 57:56:29:e8:fb:75:72:55:e9:41:26:0c:57:d9:90:23:e9:16: c2:fd:21:8a:3a:b3:1c:8a:62:7c:24:66:c2:ee:31:1a:4c:8d: 63:07:ba:e9:6b:6e:10:a4:29:18:33:00:33:42:4a:01:64:ce: 4a:f3:a4:9a:8a:ac:f2:6b:5f:4c:a3:57:52:40:1f:e7:98:1a: b9:ff:a1:16:1f:35:50:72:64:df:99:81:09:33:4c:b0:68:29: af:65:e9:5f:d0:25:4d:bf:5c:da:1f:ba:91:41:77:42:4d:af: fd:af:06:3c:8e:4b:49:a0:74:45:4d:77:c5:2b:7d:e2:33:2d: 1c:5d:de:99:19:6f:6e:d4:3f:dd:a6:a4:2b:4e:21:36:4c:1f: a5:e9:29:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUf7uraA4DBzl83B/ihiqKp/mbVuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTcwMzE4MDNaFw0yNjEyMTYwMzIzMDNaMDMxMTAvBgNV BAMTKDA2OTc3QzE5MTJDMUMzRjFCQkJERDAxMEY2OTZENTMzN0FGOTQ4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yZFIfUmefpVGRxWp6pyPvOSk kOPJfe7ECSDK7jY+aVpA6nKhPu+/zRN5duXffgv36YNFD2LfnWKKeKj28OseGFEF J7Y+Ww2b+WeSgul1wtAfA5Kpf/+vlZ5Ds747ll0arXBTCYtIrNnS+kOokwJ9bgys 1ZsO691d1OHBlMOKQhe1vfQA/wfYBuNMoWAmnoUZDG/4Vv/2LnTN+aTdBK7vI8dS L/TnprpSVKym7C8yObSz8w+i9SFjp5I7vhBg2sqGrVoBK5DX9HgShBTTn6jqdm8C 69C4dalzYUrfhjkxVZ/M5oEMeOK0DylhCPIv27WNrbsDORfJnYatC6wG8j+7AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUBpd8GRLBw/G7vdAQ9pbVM3r5SMwwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA0OTEwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuu MA0GCSqGSIb3DQEBCwUAA4IBAQBbuUjyP+9JnIkwEmMFwMY2pyJUPd88tUv36tE7 HIOJJYTyyf5ftU9lxqlW4WABh81V50YHGKzsEpsX6MZ6mM/QnA+drRGx09RzTedj 4KuJK3Q1KKvlGJAns5NInpVx71GCf7DrhQDk8JpWAK9XVino+3VyVelBJgxX2ZAj 6RbC/SGKOrMcimJ8JGbC7jEaTI1jB7rpa24QpCkYMwAzQkoBZM5K86Saiqzya19M o1dSQB/nmBq5/6EWHzVQcmTfmYEJM0ywaCmvZelf0CVNv1zaH7qRQXdCTa/9rwY8 jktJoHRFTXfFK33iMy0cXd6ZGW9u1D/dpqQrTiE2TB+l6SmS -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:33 2025 by rpki-client