This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa File: AS22427.roa (raw, json) Hash identifier: /Q9ua/cf4Sn8yUcIYjKaVRvuQlPeGgZmMimt1au8IEU= Subject key identifier: 21:10:34:61:58:19:FE:1C:9A:96:5E:78:35:F5:48:B7:0F:FC:98:FB Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 262DEAB7452669E167F01B578E5C38CDE8AAECD7 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa Signing time: Mon 15 Dec 2025 04:22:45 +0000 ROA not before: Mon 15 Dec 2025 04:17:45 +0000 ROA not after: Mon 14 Dec 2026 04:22:45 +0000 asID: 22427 IP address blocks: 141.11.197.0/24 maxlen: 24 141.11.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2d:ea:b7:45:26:69:e1:67:f0:1b:57:8e:5c:38:cd:e8:aa:ec:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 15 04:17:45 2025 GMT Not After : Dec 14 04:22:45 2026 GMT Subject: CN=211034615819FE1C9A965E7835F548B70FFC98FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:64:dd:fa:08:01:0d:17:d6:8c:eb:aa:44: 4a:af:c8:31:01:26:36:6f:57:1a:40:6f:91:de:5f: e5:c7:8b:b2:99:32:c2:cb:15:8c:42:48:b2:9d:e3: e6:e4:7a:32:cb:cf:f5:fa:82:ad:56:04:fb:2a:62: bd:79:4a:ae:10:48:43:d0:0d:5f:9a:fd:09:90:3b: 62:71:6c:42:dc:29:9b:f1:aa:1f:5b:6a:db:8e:56: 43:29:2d:36:fe:f8:c6:e4:da:2b:e9:3f:b8:c5:67: e2:17:0f:75:12:de:e5:51:85:1f:6c:f0:ba:b6:b5: 8f:86:d7:fa:8f:49:8b:3f:a7:e7:72:34:13:9f:78: d1:20:2c:59:26:af:f3:36:4f:b4:ac:15:b2:45:ce: cd:b7:a4:07:5f:f1:53:db:e4:3e:b8:16:f9:57:e7: fd:3a:83:3d:e3:a5:ac:95:92:92:10:a5:f5:3b:17: 51:01:f3:87:18:71:31:44:b8:f0:2c:f8:8b:63:a2: 32:04:f9:bb:98:f3:af:93:6b:5a:22:e3:87:91:03: 52:b7:b2:a5:37:d4:1a:0f:91:a2:21:e5:0a:01:6c: 60:09:dd:2a:ee:33:2e:82:4d:fa:db:a0:e2:b0:d2: d0:52:f8:d5:70:d8:e1:ea:29:50:3a:3d:ae:a5:9e: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:34:61:58:19:FE:1C:9A:96:5E:78:35:F5:48:B7:0F:FC:98:FB X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.197.0/24 141.11.245.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a7:32:11:1b:cf:1f:0e:d9:0e:52:42:ac:4e:22:56:fb:ee: 5a:46:91:cd:29:31:cd:4b:91:a0:64:16:d4:07:fd:2b:b5:a0: 09:41:81:00:a6:51:76:2b:a1:d7:b7:3b:f5:e7:b2:9e:cf:5c: 5f:01:01:a9:74:ee:33:b5:ca:b7:8d:f5:cb:b9:ae:4a:aa:cd: eb:c6:e7:91:c8:f0:83:d1:2b:23:36:54:30:11:b5:2c:1d:1b: 8b:11:d2:d8:2a:aa:ff:ce:ad:29:54:5c:53:16:20:29:00:d9: e9:bb:a0:7c:7c:de:33:93:1e:03:8a:b0:df:93:fa:ac:bc:aa: 9c:44:da:25:39:fd:24:58:b2:d4:a3:d0:43:0f:51:45:4e:4f: a7:f1:2a:26:7b:b5:a6:9a:d0:88:3f:b4:3f:a1:f7:b4:00:49: 0b:23:f7:f2:3e:ad:c9:19:aa:a4:90:cf:ad:c3:7d:66:ea:9e: 55:a0:23:1a:6c:15:67:8f:15:c0:db:d5:0e:e4:fa:8d:01:05: 5e:36:c4:2c:52:8e:03:3e:4d:d2:6a:cf:ff:18:bb:28:94:23: 81:71:0d:99:60:f8:b7:c7:ac:3c:a5:49:28:8e:67:fd:21:72: b2:77:61:68:cb:88:33:46:14:7e:a6:15:5c:68:4c:b3:ce:6b: 2c:9c:03:85 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJi3qt0UmaeFn8BtXjlw4zeiq7NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTUwNDE3NDVaFw0yNjEyMTQwNDIyNDVaMDMxMTAvBgNV BAMTKDIxMTAzNDYxNTgxOUZFMUM5QTk2NUU3ODM1RjU0OEI3MEZGQzk4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kWTd+ggBDRfWjOuqREqvyDEB JjZvVxpAb5HeX+XHi7KZMsLLFYxCSLKd4+bkejLLz/X6gq1WBPsqYr15Sq4QSEPQ DV+a/QmQO2JxbELcKZvxqh9batuOVkMpLTb++Mbk2ivpP7jFZ+IXD3US3uVRhR9s 8Lq2tY+G1/qPSYs/p+dyNBOfeNEgLFkmr/M2T7SsFbJFzs23pAdf8VPb5D64FvlX 5/06gz3jpayVkpIQpfU7F1EB84cYcTFEuPAs+ItjojIE+buY86+Ta1oi44eRA1K3 sqU31BoPkaIh5QoBbGAJ3SruMy6CTfrboOKw0tBS+NVw2OHqKVA6Pa6lnumbAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUIRA0YVgZ/hyall54NfVItw/8mPswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjI0Mjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNC8UD BACNC/UwDQYJKoZIhvcNAQELBQADggEBAIanMhEbzx8O2Q5SQqxOIlb77lpGkc0p Mc1LkaBkFtQH/Su1oAlBgQCmUXYrode3O/Xnsp7PXF8BAal07jO1yreN9cu5rkqq zevG55HI8IPRKyM2VDARtSwdG4sR0tgqqv/OrSlUXFMWICkA2em7oHx83jOTHgOK sN+T+qy8qpxE2iU5/SRYstSj0EMPUUVOT6fxKiZ7taaa0Ig/tD+h97QASQsj9/I+ rckZqqSQz63DfWbqnlWgIxpsFWePFcDb1Q7k+o0BBV42xCxSjgM+TdJqz/8YuyiU I4FxDZlg+LfHrDylSSiOZ/0hcrJ3YWjLiDNGFH6mFVxoTLPOayycA4U= -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:20 2025 by rpki-client