This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36002.roa File: AS36002.roa (raw, json) Hash identifier: CY82gXIT4jIlnvTXD+Fv2Th6W3yWs9lAAgzI1KHIMo4= Subject key identifier: 68:43:52:EC:60:86:D6:23:26:0D:2F:25:03:6C:87:B5:8C:C6:83:6E Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 5A96F97A1B769030BEC7CD0AD108765E6D57336C Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36002.roa Signing time: Thu 11 Dec 2025 05:02:24 +0000 ROA not before: Thu 11 Dec 2025 04:57:24 +0000 ROA not after: Thu 10 Dec 2026 05:02:24 +0000 asID: 36002 IP address blocks: 141.11.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:96:f9:7a:1b:76:90:30:be:c7:cd:0a:d1:08:76:5e:6d:57:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 11 04:57:24 2025 GMT Not After : Dec 10 05:02:24 2026 GMT Subject: CN=684352EC6086D623260D2F25036C87B58CC6836E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:24:09:ee:55:a9:76:61:f0:70:e1:57:a0: 60:f9:a4:e4:65:32:41:18:9c:e4:76:af:b0:c5:20: 1b:59:16:70:22:f6:7e:3e:08:45:d0:df:1e:7e:22: 0e:ae:0d:4d:21:c9:3c:2e:a1:b4:31:6a:16:3d:34: ae:28:1d:d4:b4:09:de:8c:65:51:11:09:41:0f:cc: 66:2e:dc:42:01:f5:f2:29:ed:e5:e1:d9:ac:f8:d2: dc:23:a9:06:fa:1a:48:e4:22:16:bb:f0:ec:9f:a4: 88:b4:6a:fc:ba:3e:e6:0b:59:cd:44:f1:1c:fe:b9: ee:f1:70:69:a1:0f:a6:83:49:5b:d2:07:c5:c7:91: 9d:bd:3a:5e:2e:fb:a9:ba:50:3d:ad:58:4f:ad:8d: 84:ec:96:e1:f5:9f:c2:91:da:2d:da:24:e0:af:96: 5c:4a:ae:8c:4b:47:a6:4e:84:f7:06:26:33:f5:3c: a8:33:4d:7e:06:7d:26:10:6b:63:e8:00:51:ed:54: 55:fd:47:03:e2:78:32:57:30:c8:ea:15:86:10:6c: fe:8c:d5:a2:8d:be:02:c4:54:55:89:dd:24:d2:12: ec:f6:95:77:d5:52:94:68:31:c4:fe:bc:89:dd:29: 8b:c8:3b:ab:47:fb:41:25:ab:3c:a1:0f:16:25:b4: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:43:52:EC:60:86:D6:23:26:0D:2F:25:03:6C:87:B5:8C:C6:83:6E X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.77.0/24 Signature Algorithm: sha256WithRSAEncryption 33:1b:7a:68:dd:cf:84:8b:17:68:86:81:72:34:fe:5d:22:8b: 23:74:85:1b:bc:24:84:df:72:9d:69:d6:41:88:33:40:24:31: af:4a:40:c1:d8:f3:79:f0:fd:c5:9a:f1:e9:57:33:c8:d4:e6: 2e:51:a9:32:b1:c2:f2:d1:87:dd:d1:e3:c6:10:fb:59:b4:27: 2c:c7:ae:52:0d:55:a3:90:95:11:b3:f8:c4:19:97:e2:79:29: 07:a5:a6:6f:74:89:c9:20:e8:18:dc:94:45:34:79:0a:36:b1: 89:22:b2:c7:ca:2c:f9:07:48:e1:97:26:02:59:9e:cf:7d:ae: a4:b7:e7:0b:26:a2:aa:2d:cf:ed:56:59:a9:1b:89:6e:a6:06: 21:46:da:9f:3b:95:68:41:64:98:fe:0b:1c:51:c7:cc:25:0f: a2:1d:f8:30:a8:da:cd:ae:9e:69:a7:26:e4:a4:95:98:65:af: b5:a1:15:bc:87:20:fd:a0:ec:10:f2:01:7f:36:8d:2a:bf:90: f9:33:d5:75:ba:fa:1b:cc:2e:85:f5:bf:cb:94:dd:c8:af:78: 7c:9b:1a:54:88:0e:39:83:f9:ed:96:6c:23:0a:70:04:ab:99: 19:bb:12:3c:f7:40:5a:48:c5:f3:0d:50:3f:3b:d8:ee:2b:89: c8:19:10:50 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUWpb5eht2kDC+x80K0Qh2Xm1XM2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTEwNDU3MjRaFw0yNjEyMTAwNTAyMjRaMDMxMTAvBgNV BAMTKDY4NDM1MkVDNjA4NkQ2MjMyNjBEMkYyNTAzNkM4N0I1OENDNjgzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9SQJ7lWpdmHwcOFXoGD5pORl MkEYnOR2r7DFIBtZFnAi9n4+CEXQ3x5+Ig6uDU0hyTwuobQxahY9NK4oHdS0Cd6M ZVERCUEPzGYu3EIB9fIp7eXh2az40twjqQb6GkjkIha78OyfpIi0avy6PuYLWc1E 8Rz+ue7xcGmhD6aDSVvSB8XHkZ29Ol4u+6m6UD2tWE+tjYTsluH1n8KR2i3aJOCv llxKroxLR6ZOhPcGJjP1PKgzTX4GfSYQa2PoAFHtVFX9RwPieDJXMMjqFYYQbP6M 1aKNvgLEVFWJ3STSEuz2lXfVUpRoMcT+vIndKYvIO6tH+0ElqzyhDxYltC1BAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUaENS7GCG1iMmDS8lA2yHtYzGg24wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzYwMDIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC00w DQYJKoZIhvcNAQELBQADggEBADMbemjdz4SLF2iGgXI0/l0iiyN0hRu8JITfcp1p 1kGIM0AkMa9KQMHY83nw/cWa8elXM8jU5i5RqTKxwvLRh93R48YQ+1m0JyzHrlIN VaOQlRGz+MQZl+J5KQelpm90ickg6BjclEU0eQo2sYkissfKLPkHSOGXJgJZns99 rqS35wsmoqotz+1WWakbiW6mBiFG2p87lWhBZJj+CxxRx8wlD6Id+DCo2s2unmmn JuSklZhlr7WhFbyHIP2g7BDyAX82jSq/kPkz1XW6+hvMLoX1v8uU3civeHybGlSI DjmD+e2WbCMKcASrmRm7Ejz3QFpIxfMNUD872O4ricgZEFA= -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:34 2025 by rpki-client