This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399870.roa File: AS399870.roa (raw, json) Hash identifier: LkMSYgnyt1qa1ym0MepYGeUUutDFH7c+HjjXPQjQAIA= Subject key identifier: 11:DB:73:B7:E0:DC:48:E5:EB:10:79:2C:68:1D:CB:90:5B:66:4E:A9 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 4581F1245E050C25FCC86F81E21B98857203EE96 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399870.roa Signing time: Thu 11 Dec 2025 05:02:24 +0000 ROA not before: Thu 11 Dec 2025 04:57:24 +0000 ROA not after: Thu 10 Dec 2026 05:02:24 +0000 asID: 399870 IP address blocks: 141.11.77.0/24 maxlen: 24 141.11.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:81:f1:24:5e:05:0c:25:fc:c8:6f:81:e2:1b:98:85:72:03:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 11 04:57:24 2025 GMT Not After : Dec 10 05:02:24 2026 GMT Subject: CN=11DB73B7E0DC48E5EB10792C681DCB905B664EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:51:55:bf:22:f7:ad:87:96:12:e7:7e:e2: 7e:ba:40:8e:7c:df:00:bb:42:35:f5:15:a2:ce:11: ce:b4:45:8c:0b:ef:74:cd:71:fa:f0:6c:5c:88:44: 3a:ab:1b:59:80:0d:90:5e:46:df:b8:17:25:c0:d6: 64:cf:5b:47:6c:9e:db:38:33:e6:4a:97:f8:88:8f: 93:75:d5:2c:4f:80:bb:ba:67:f3:bf:bf:9d:1f:39: 47:97:37:20:d9:52:e4:ee:a0:42:08:6f:2a:bb:d9: 82:db:79:06:6d:f5:cf:f3:1e:1b:b9:10:1c:18:f0: 4a:59:06:07:c2:5b:38:b8:bb:92:ea:a5:14:a2:1a: 23:93:2a:06:1f:7d:62:24:f3:ea:30:be:21:73:d1: 0a:a2:98:ec:32:23:9f:d7:f1:32:b8:b4:96:80:c1: 81:b2:10:5c:a8:fc:f8:5e:80:46:5d:09:c5:69:f0: c7:a2:bb:60:57:d8:40:01:56:5b:32:a9:0d:0f:20: 3f:6c:a5:09:40:ea:a3:2f:eb:d3:98:85:27:93:9f: 5a:c5:7e:a9:12:ff:09:c3:e7:cd:32:5d:5f:50:f5: 90:af:31:59:1e:05:d2:26:46:75:3a:b6:f7:82:52: ef:d5:54:2e:7b:2f:1b:c6:e6:03:60:db:8e:04:2f: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:73:B7:E0:DC:48:E5:EB:10:79:2C:68:1D:CB:90:5B:66:4E:A9 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399870.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.77.0/24 141.11.146.0/23 Signature Algorithm: sha256WithRSAEncryption 73:b0:f3:5d:16:f7:2d:f9:1a:fd:21:59:c1:49:72:58:a7:6b: 43:10:fe:f1:ca:05:1d:a8:4c:4c:cc:a8:35:28:1c:e4:cf:0b: 15:2e:b6:99:c0:b6:5f:7c:de:98:5b:66:7d:1e:95:7e:c1:99: ed:8a:a4:d2:e8:62:52:40:5e:76:12:aa:79:99:eb:02:9e:15: 31:8e:11:17:43:7d:12:5c:c2:91:e1:44:36:f3:5f:90:03:17: c9:6c:1d:60:09:28:a7:5b:bb:37:97:6d:0b:af:ff:27:c2:88: d7:bd:ae:53:e9:7a:c1:93:d6:c3:db:d6:90:54:0b:20:9b:5a: 63:c0:9b:b3:85:60:f5:b5:6e:2a:0a:12:00:d0:9c:35:9f:bd: bd:2e:1f:f0:8a:4c:c8:50:63:b2:cf:42:21:22:1e:75:22:ef: 31:c6:da:70:42:9c:54:93:6f:b5:1c:04:a9:88:05:59:6e:d7: 6d:80:85:9f:7d:0b:a3:56:87:e3:4b:19:64:87:7e:ba:b6:5f: 27:82:86:64:30:87:fe:9b:37:f5:ba:88:ee:75:c8:e5:ff:88: 78:98:12:2a:1f:ab:b9:ef:74:54:df:cb:b9:2d:19:14:96:3e: b5:df:23:bf:8e:9d:f6:bd:39:51:cf:e3:25:59:6b:ff:fd:82: 16:0f:6d:1a -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIURYHxJF4FDCX8yG+B4huYhXID7pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTEwNDU3MjRaFw0yNjEyMTAwNTAyMjRaMDMxMTAvBgNV BAMTKDExREI3M0I3RTBEQzQ4RTVFQjEwNzkyQzY4MURDQjkwNUI2NjRFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0VFVvyL3rYeWEud+4n66QI58 3wC7QjX1FaLOEc60RYwL73TNcfrwbFyIRDqrG1mADZBeRt+4FyXA1mTPW0dsnts4 M+ZKl/iIj5N11SxPgLu6Z/O/v50fOUeXNyDZUuTuoEIIbyq72YLbeQZt9c/zHhu5 EBwY8EpZBgfCWzi4u5LqpRSiGiOTKgYffWIk8+owviFz0QqimOwyI5/X8TK4tJaA wYGyEFyo/PhegEZdCcVp8Meiu2BX2EABVlsyqQ0PID9spQlA6qMv69OYhSeTn1rF fqkS/wnD580yXV9Q9ZCvMVkeBdImRnU6tveCUu/VVC57LxvG5gNg244EL1I9AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUEdtzt+DcSOXrEHksaB3LkFtmTqkwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzk5ODcwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQtN AwQBjQuSMA0GCSqGSIb3DQEBCwUAA4IBAQBzsPNdFvct+Rr9IVnBSXJYp2tDEP7x ygUdqExMzKg1KBzkzwsVLraZwLZffN6YW2Z9HpV+wZntiqTS6GJSQF52Eqp5mesC nhUxjhEXQ30SXMKR4UQ281+QAxfJbB1gCSinW7s3l20Lr/8nwojXva5T6XrBk9bD 29aQVAsgm1pjwJuzhWD1tW4qChIA0Jw1n729Lh/wikzIUGOyz0IhIh51Iu8xxtpw QpxUk2+1HASpiAVZbtdtgIWffQujVofjSxlkh366tl8ngoZkMIf+mzf1uojudcjl /4h4mBIqH6u573RU38u5LRkUlj613yO/jp32vTlRz+MlWWv//YIWD20a -----END CERTIFICATE-----Generated at Sat Dec 20 05:28:40 2025 by rpki-client