This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21840.roa File: AS21840.roa (raw, json) Hash identifier: guQ/VWCF5xtAVoXDlDCNOKvV3PPVI7qIx3j1hT2ZsQw= Subject key identifier: 22:69:47:1E:B5:81:83:17:F5:BE:62:7D:D2:A8:23:B5:F0:E4:03:03 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 4C7911D182530E5BA552D043294CBFDA17694A84 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21840.roa Signing time: Mon 15 Dec 2025 04:19:48 +0000 ROA not before: Mon 15 Dec 2025 04:14:48 +0000 ROA not after: Mon 14 Dec 2026 04:19:48 +0000 asID: 21840 IP address blocks: 141.11.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:79:11:d1:82:53:0e:5b:a5:52:d0:43:29:4c:bf:da:17:69:4a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 15 04:14:48 2025 GMT Not After : Dec 14 04:19:48 2026 GMT Subject: CN=2269471EB5818317F5BE627DD2A823B5F0E40303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a2:b6:65:e6:c9:bb:85:55:9b:b5:c4:90:87: 40:ca:ae:b2:57:87:71:a4:ba:cc:0f:2e:9f:f8:4c: 86:08:92:06:0d:82:3a:56:c5:c4:ca:89:16:d2:8f: f7:b8:73:89:ee:fe:0e:aa:06:0f:73:4d:13:47:fe: 96:61:6f:61:63:4e:41:a2:f0:bf:4e:67:27:1b:0d: 59:82:76:1b:af:4b:fd:0c:af:bc:10:4d:be:89:14: b9:84:5e:3d:f5:5a:25:1c:a2:6e:6f:77:32:c1:23: ef:95:8e:42:54:7c:a4:be:7d:98:9c:28:17:f2:23: ac:3d:ed:4b:17:b1:d6:5e:9d:82:6d:25:3b:09:fe: 08:45:db:b0:c4:b6:be:69:d5:44:7f:4e:45:ad:1f: 68:f9:bd:31:ea:62:14:4a:e4:10:ea:b8:58:bf:d6: 31:46:93:25:7a:10:b6:5f:9d:18:7d:a9:14:12:23: 5c:32:b5:e2:61:c4:a9:52:8b:0e:ff:57:19:02:a4: 6a:8c:70:d6:93:b8:db:60:c0:2c:81:d8:38:f8:da: b0:44:65:7c:a5:fe:04:b1:d5:aa:ed:a1:0c:0c:bd: 88:44:65:bf:48:72:16:a5:84:8e:c5:bb:f2:2f:bc: c5:62:86:c2:3e:f6:1e:f1:4e:68:3d:b9:58:80:01: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:47:1E:B5:81:83:17:F5:BE:62:7D:D2:A8:23:B5:F0:E4:03:03 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.175.0/24 Signature Algorithm: sha256WithRSAEncryption 24:ee:46:85:75:33:2e:d5:54:7c:76:d3:1a:1b:ff:bd:65:2a: 24:d5:63:d0:70:7c:37:13:b1:33:13:1d:b2:ae:8a:19:f4:2b: b8:96:b9:ff:05:df:96:34:48:ac:89:ab:eb:7f:92:4d:5b:b3: 74:8b:dd:eb:2b:97:66:98:00:5d:ec:4f:47:67:90:70:8c:f3: b8:2b:40:a2:06:12:2f:ff:6c:e0:84:3b:51:b7:57:cb:d8:95: b6:30:fe:00:cc:96:9c:ae:e9:fb:d1:fb:2a:b5:a5:80:22:25: e0:c1:10:04:46:f5:e0:12:2e:f3:4c:16:cd:80:9a:4d:cf:68: 46:34:c2:eb:1f:de:fa:9f:5e:57:68:d4:51:80:ca:82:03:6b: ee:b3:f2:ad:81:34:51:fb:25:8c:da:be:c8:4e:3a:57:d3:5e: 00:fb:f3:6f:93:0e:bd:83:9f:b0:e3:3f:39:f1:40:87:95:f0: 91:21:b0:e2:be:8e:fe:c5:46:0f:55:3b:1c:f5:09:55:03:ef: b9:19:3a:ee:8a:6f:9c:6c:1c:e8:04:fd:b9:12:7c:4c:b2:4f: 50:9b:98:c0:35:ad:6a:bd:ae:19:ec:a7:e7:d1:24:9f:ec:d1: e6:28:aa:e2:7e:6d:01:95:7a:ca:62:03:c3:49:63:63:ac:31: 20:a4:9d:c9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUTHkR0YJTDlulUtBDKUy/2hdpSoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTUwNDE0NDhaFw0yNjEyMTQwNDE5NDhaMDMxMTAvBgNV BAMTKDIyNjk0NzFFQjU4MTgzMTdGNUJFNjI3REQyQTgyM0I1RjBFNDAzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvorZl5sm7hVWbtcSQh0DKrrJX h3GkuswPLp/4TIYIkgYNgjpWxcTKiRbSj/e4c4nu/g6qBg9zTRNH/pZhb2FjTkGi 8L9OZycbDVmCdhuvS/0Mr7wQTb6JFLmEXj31WiUcom5vdzLBI++VjkJUfKS+fZic KBfyI6w97UsXsdZenYJtJTsJ/ghF27DEtr5p1UR/TkWtH2j5vTHqYhRK5BDquFi/ 1jFGkyV6ELZfnRh9qRQSI1wyteJhxKlSiw7/VxkCpGqMcNaTuNtgwCyB2Dj42rBE ZXyl/gSx1artoQwMvYhEZb9IchalhI7Fu/IvvMVihsI+9h7xTmg9uViAARn9AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUImlHHrWBgxf1vmJ90qgjtfDkAwMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE4NDAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC68w DQYJKoZIhvcNAQELBQADggEBACTuRoV1My7VVHx20xob/71lKiTVY9BwfDcTsTMT HbKuihn0K7iWuf8F35Y0SKyJq+t/kk1bs3SL3esrl2aYAF3sT0dnkHCM87grQKIG Ei//bOCEO1G3V8vYlbYw/gDMlpyu6fvR+yq1pYAiJeDBEARG9eASLvNMFs2Amk3P aEY0wusf3vqfXldo1FGAyoIDa+6z8q2BNFH7JYzavshOOlfTXgD782+TDr2Dn7Dj PznxQIeV8JEhsOK+jv7FRg9VOxz1CVUD77kZOu6Kb5xsHOgE/bkSfEyyT1CbmMA1 rWq9rhnsp+fRJJ/s0eYoquJ+bQGVespiA8NJY2OsMSCknck= -----END CERTIFICATE-----Generated at Fri Dec 19 10:50:23 2025 by rpki-client