This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215172.roa File: AS215172.roa (raw, json) Hash identifier: 1vPoRzCdaCILQBC/sh+MDlPczBlXGS8RlHcwGr1XNt8= Subject key identifier: F2:73:82:DE:E6:32:9C:27:EB:66:28:CC:11:E8:52:6B:42:2F:53:E8 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 34195C70017B02BEC97217C71C46505D043C7429 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215172.roa Signing time: Thu 11 Dec 2025 14:56:08 +0000 ROA not before: Thu 11 Dec 2025 14:51:08 +0000 ROA not after: Thu 10 Dec 2026 14:56:08 +0000 asID: 215172 IP address blocks: 141.11.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:19:5c:70:01:7b:02:be:c9:72:17:c7:1c:46:50:5d:04:3c:74:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 11 14:51:08 2025 GMT Not After : Dec 10 14:56:08 2026 GMT Subject: CN=F27382DEE6329C27EB6628CC11E8526B422F53E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:bf:23:d2:6e:78:d4:7a:dd:56:92:ac:b8: fc:ab:fa:dd:a0:98:cf:b0:b9:cb:8e:ad:84:29:14: 13:66:0e:58:da:8d:7b:c9:a5:61:90:b9:2b:1c:40: 53:1d:54:60:29:59:43:a4:80:00:77:ba:a1:f0:22: 66:ca:21:69:06:ed:ab:db:39:6f:37:8d:35:1e:e4: bb:36:8c:b4:0e:57:d1:96:01:65:71:82:09:ae:56: c2:e6:b8:a4:7f:fd:f0:72:b8:1b:c9:d7:48:66:48: 78:c6:da:3b:3f:a0:1a:8d:b1:9f:ed:53:4e:a0:94: 87:15:9e:c3:89:4b:98:54:13:68:a8:90:ed:2e:57: 0c:c9:22:6e:8b:9f:d2:5b:ff:0f:95:6c:cd:b4:40: bf:79:11:29:00:ca:46:ca:a3:78:ba:f2:a3:3f:59: 63:94:8e:da:19:6c:b1:83:bc:fe:af:cf:a9:be:ad: 8c:c4:65:7f:d0:76:34:13:70:c4:92:18:2b:40:46: 8c:3b:d0:f2:f3:38:06:dc:81:b1:3b:0b:00:9c:b3: 59:d7:0a:f3:a0:cb:03:53:0e:3b:d4:f3:a5:e9:54: 93:61:6e:a6:6f:fc:b9:3a:af:e0:a4:e7:84:d3:5e: 56:ed:57:98:7b:aa:6d:ea:f3:5a:78:81:84:5a:c8: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:82:DE:E6:32:9C:27:EB:66:28:CC:11:E8:52:6B:42:2F:53:E8 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.141.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d4:48:a3:b5:ce:1d:40:43:df:2e:7a:93:c7:7a:35:17:a9: d6:ea:c0:0b:bc:ab:1e:29:27:e9:c3:2f:34:4d:b1:70:53:c0: 52:4e:49:c6:ff:44:f3:08:bf:97:6a:60:44:cd:6f:57:b2:d0: c4:29:67:bc:0b:45:d9:2e:0c:4b:c2:90:c4:52:31:23:4e:50: df:38:ea:bc:1a:3d:7b:28:0b:34:58:98:d5:ac:67:05:ff:9f: 07:01:e5:03:16:70:f3:16:c4:ee:6e:0f:7a:ea:11:bd:e9:7e: fe:0e:62:02:83:ec:d6:94:b8:41:c1:6e:4e:61:9a:96:34:05: 4c:cd:61:7e:84:11:6b:08:7d:28:69:b1:80:d1:56:9c:06:14: 84:d6:79:0a:5d:a1:06:14:14:5a:9c:5b:e0:c4:3c:c5:d5:82: 10:2a:59:75:3f:9d:a6:47:e4:43:1b:19:eb:31:7c:e4:e8:31: 59:17:4d:b8:dd:38:fd:44:5c:6f:3b:17:6d:cb:78:07:f9:70: f4:49:06:19:a5:ef:37:e2:25:34:d6:cb:a8:4a:38:05:fb:b6: 4a:b5:c8:88:73:48:c0:da:10:11:ce:5c:ad:5d:45:54:d1:61: 4c:e9:7a:23:04:4b:7f:2e:e8:22:6e:a1:c5:ca:a6:00:ee:44: 81:bb:a2:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUNBlccAF7Ar7JchfHHEZQXQQ8dCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTExNDUxMDhaFw0yNjEyMTAxNDU2MDhaMDMxMTAvBgNV BAMTKEYyNzM4MkRFRTYzMjlDMjdFQjY2MjhDQzExRTg1MjZCNDIyRjUzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3r8j0m541HrdVpKsuPyr+t2g mM+wucuOrYQpFBNmDljajXvJpWGQuSscQFMdVGApWUOkgAB3uqHwImbKIWkG7avb OW83jTUe5Ls2jLQOV9GWAWVxggmuVsLmuKR//fByuBvJ10hmSHjG2js/oBqNsZ/t U06glIcVnsOJS5hUE2iokO0uVwzJIm6Ln9Jb/w+VbM20QL95ESkAykbKo3i68qM/ WWOUjtoZbLGDvP6vz6m+rYzEZX/QdjQTcMSSGCtARow70PLzOAbcgbE7CwCcs1nX CvOgywNTDjvU86XpVJNhbqZv/Lk6r+Ck54TTXlbtV5h7qm3q81p4gYRayIA1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU8nOC3uYynCfrZijMEehSa0IvU+gwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE1MTcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuN MA0GCSqGSIb3DQEBCwUAA4IBAQAm1Eijtc4dQEPfLnqTx3o1F6nW6sALvKseKSfp wy80TbFwU8BSTknG/0TzCL+XamBEzW9XstDEKWe8C0XZLgxLwpDEUjEjTlDfOOq8 Gj17KAs0WJjVrGcF/58HAeUDFnDzFsTubg966hG96X7+DmICg+zWlLhBwW5OYZqW NAVMzWF+hBFrCH0oabGA0VacBhSE1nkKXaEGFBRanFvgxDzF1YIQKll1P52mR+RD GxnrMXzk6DFZF0243Tj9RFxvOxdty3gH+XD0SQYZpe834iU01suoSjgF+7ZKtciI c0jA2hARzlytXUVU0WFM6XojBEt/LugibqHFyqYA7kSBu6J2 -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:28 2025 by rpki-client