This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: KUICLVktFi1kISyiCw1o+esUHahLoL0VVQVc3gwfw0Q= Subject key identifier: 69:47:D7:79:2C:20:3C:C0:A1:2A:A6:09:58:A7:85:D1:4F:7A:C2:65 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 4A0AA18FA40C22797E98023AEEB7B070343C0AC4 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401776.roa Signing time: Wed 17 Dec 2025 06:45:38 +0000 ROA not before: Wed 17 Dec 2025 06:40:38 +0000 ROA not after: Wed 16 Dec 2026 06:45:38 +0000 asID: 401776 IP address blocks: 141.11.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0a:a1:8f:a4:0c:22:79:7e:98:02:3a:ee:b7:b0:70:34:3c:0a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 17 06:40:38 2025 GMT Not After : Dec 16 06:45:38 2026 GMT Subject: CN=6947D7792C203CC0A12AA60958A785D14F7AC265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:81:2b:4c:a2:ba:a0:20:5a:b3:ff:03:20: e8:03:83:5f:04:1a:ee:79:1a:4c:37:29:d8:73:b1: 9d:54:8e:c3:39:67:73:10:1b:8f:44:17:59:a2:88: 1e:a2:0b:6e:e5:47:9c:3e:c1:58:4e:b6:13:77:bf: 79:5b:c4:6e:e4:a1:29:5e:cc:a7:e1:bd:26:12:43: fb:78:46:85:b4:66:14:d1:3b:23:53:02:d5:44:83: c3:18:14:cc:50:8e:d3:26:dc:de:0e:ca:6c:55:f1: 8d:c4:5c:2d:87:8d:ed:96:4e:b6:51:76:15:a7:8d: f8:65:43:e7:b9:e9:f8:0d:ec:76:60:4d:5e:69:7c: 64:41:11:fe:70:08:59:4c:83:fe:2d:b0:4a:6c:17: b7:4e:2b:f3:ce:27:d9:5d:19:c6:f5:58:94:41:da: 0e:e0:66:db:5c:b9:04:15:f9:80:97:91:9b:70:05: f8:2b:41:b5:07:fe:58:18:76:36:45:60:0d:1e:df: 09:7c:ea:4e:87:64:a1:b2:d8:15:27:ee:7b:d8:9b: 82:25:9c:76:f8:44:59:25:f0:d1:63:15:2c:11:01: 2f:4d:69:a6:41:55:a8:4d:66:7c:87:8c:93:bb:01: 4c:95:18:7d:2e:cc:da:63:86:c5:21:a5:6a:9d:1b: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:47:D7:79:2C:20:3C:C0:A1:2A:A6:09:58:A7:85:D1:4F:7A:C2:65 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.219.0/24 Signature Algorithm: sha256WithRSAEncryption b7:57:89:c1:74:7c:98:50:25:21:37:2c:66:9a:90:33:6b:d9: 9a:0a:01:43:05:aa:00:c0:36:77:88:72:76:4f:59:5d:6a:48: 1d:cb:42:43:6f:91:05:d7:64:52:a2:83:d0:0b:60:1e:60:5f: 5e:2f:6c:df:bf:ec:9a:c6:bc:e5:42:5c:4d:51:99:8e:c0:b0: bb:99:86:4f:21:e2:7c:0d:a2:f4:9f:9d:86:8e:fd:6b:8f:0a: 05:95:0e:e4:e2:54:79:00:b2:c3:65:31:e6:1f:39:03:c9:87: 09:38:bc:e5:44:8b:43:b7:bb:54:78:ea:12:56:d7:ad:b6:e6: 23:cf:e4:42:fc:b5:de:4e:53:d3:4c:80:01:76:8b:d3:32:16: 66:43:c8:1e:9e:c7:43:80:8e:33:bc:05:ea:88:d8:76:a0:87: ab:ad:74:6c:3d:55:06:73:f1:c2:b2:e0:00:aa:75:b9:31:f6: 8f:66:b2:78:ce:e5:e0:87:24:17:af:38:25:ec:76:97:3b:21: 44:03:89:39:e8:d7:86:af:11:5e:3a:e0:0e:5d:be:0c:1a:21: a2:52:c6:92:4a:29:1d:2b:95:93:89:1f:63:89:04:34:86:08: 9d:48:46:bb:63:67:6e:47:16:b2:d8:93:f5:53:e1:81:59:ba: 23:55:dc:dd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSgqhj6QMInl+mAI67rewcDQ8CsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTcwNjQwMzhaFw0yNjEyMTYwNjQ1MzhaMDMxMTAvBgNV BAMTKDY5NDdENzc5MkMyMDNDQzBBMTJBQTYwOTU4QTc4NUQxNEY3QUMyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQYErTKK6oCBas/8DIOgDg18E Gu55Gkw3KdhzsZ1UjsM5Z3MQG49EF1miiB6iC27lR5w+wVhOthN3v3lbxG7koSle zKfhvSYSQ/t4RoW0ZhTROyNTAtVEg8MYFMxQjtMm3N4OymxV8Y3EXC2Hje2WTrZR dhWnjfhlQ+e56fgN7HZgTV5pfGRBEf5wCFlMg/4tsEpsF7dOK/POJ9ldGcb1WJRB 2g7gZttcuQQV+YCXkZtwBfgrQbUH/lgYdjZFYA0e3wl86k6HZKGy2BUn7nvYm4Il nHb4RFkl8NFjFSwRAS9NaaZBVahNZnyHjJO7AUyVGH0uzNpjhsUhpWqdG3fxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUaUfXeSwgPMChKqYJWKeF0U96wmUwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvb MA0GCSqGSIb3DQEBCwUAA4IBAQC3V4nBdHyYUCUhNyxmmpAza9maCgFDBaoAwDZ3 iHJ2T1ldakgdy0JDb5EF12RSooPQC2AeYF9eL2zfv+yaxrzlQlxNUZmOwLC7mYZP IeJ8DaL0n52Gjv1rjwoFlQ7k4lR5ALLDZTHmHzkDyYcJOLzlRItDt7tUeOoSVtet tuYjz+RC/LXeTlPTTIABdovTMhZmQ8gensdDgI4zvAXqiNh2oIerrXRsPVUGc/HC suAAqnW5MfaPZrJ4zuXghyQXrzgl7HaXOyFEA4k56NeGrxFeOuAOXb4MGiGiUsaS SikdK5WTiR9jiQQ0hgidSEa7Y2duRxay2JP1U+GBWbojVdzd -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:28 2025 by rpki-client