This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS59432.roa File: AS59432.roa (raw, json) Hash identifier: lNhkEKTYGylyzAY5HcYwl/FYzd3jp6NEAX1rApjEXIU= Subject key identifier: 1B:85:48:B9:61:40:10:23:8A:1F:60:58:48:7F:40:BC:84:CF:51:FE Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 2990122FC4FF0F5D5D2407B6E9219F39A84DC950 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS59432.roa Signing time: Fri 12 Dec 2025 10:23:25 +0000 ROA not before: Fri 12 Dec 2025 10:18:25 +0000 ROA not after: Fri 11 Dec 2026 10:23:25 +0000 asID: 59432 IP address blocks: 141.11.172.0/24 maxlen: 24 141.11.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:90:12:2f:c4:ff:0f:5d:5d:24:07:b6:e9:21:9f:39:a8:4d:c9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 12 10:18:25 2025 GMT Not After : Dec 11 10:23:25 2026 GMT Subject: CN=1B8548B9614010238A1F6058487F40BC84CF51FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:eb:fd:ec:dd:ae:d7:24:33:5f:c7:3d:c5: 93:96:45:bb:02:5c:9b:27:6c:b0:df:1f:51:ae:43: 26:50:9b:77:bf:e0:24:24:67:a0:d5:75:a2:db:a4: 21:76:0c:1d:90:b4:64:96:14:30:bb:69:ee:64:9f: 72:2d:0a:5c:cc:a2:3d:68:04:c5:7a:35:89:2f:22: 8a:b6:0a:8b:01:69:91:2a:d4:ec:fd:9c:ab:0c:a4: bc:6e:31:9d:dc:f5:b5:b8:1d:0d:39:aa:8c:d4:ae: a2:19:a0:94:1d:e2:62:04:61:67:f2:3b:a8:b4:18: 97:08:d9:f2:13:8f:16:dc:c7:53:0d:5a:12:b0:b0: ce:a4:5b:cf:da:93:96:ea:a8:2f:a9:74:a0:01:c5: 32:e7:fb:a0:de:d9:17:89:9e:c0:64:43:42:46:2d: 89:10:fc:5a:d0:ee:0f:2d:8e:e6:c0:a5:d0:a7:a3: b3:af:e8:da:9c:c2:ca:05:95:46:1e:48:ec:12:dc: 62:ce:87:7e:86:e3:8b:a7:25:99:e0:3b:c6:5a:c5: 9b:96:99:67:16:69:71:87:da:6d:c5:c5:04:71:ee: 1d:b3:fc:bb:60:fc:fa:3f:86:cc:c5:01:dc:91:f1: 48:4e:2b:1d:24:78:17:ef:b8:f1:62:27:56:6f:7d: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:85:48:B9:61:40:10:23:8A:1F:60:58:48:7F:40:BC:84:CF:51:FE X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS59432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.172.0/24 141.11.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:26:50:71:d9:c6:54:37:02:69:c4:bd:af:40:90:6e:9d:8c: 57:f7:52:7d:d2:45:1c:95:2b:4e:7d:ac:5a:07:b9:40:78:a6: f9:94:7d:e2:cd:bb:e3:da:1b:3b:1f:20:60:fe:e7:b5:09:c0: a1:4e:01:9d:0e:9e:a6:9c:e3:57:02:ff:f8:b1:d7:b0:20:d3: ec:f8:fe:c5:c6:d8:18:28:d2:5d:16:99:30:bd:2f:22:d9:d2: 10:8b:f0:bf:17:21:41:5d:a1:07:c8:79:11:5c:da:8a:1a:fb: 70:53:c5:9f:fa:d4:9e:56:fb:2c:22:27:41:59:67:dc:42:20: 37:58:2d:68:94:64:17:0a:cc:fb:39:f4:e1:bc:16:4c:b4:3a: dc:dd:16:ac:55:00:4e:34:5f:fc:19:ab:3d:49:99:e4:76:c7: 6d:9b:83:c9:85:dd:08:bb:a6:f3:20:45:65:28:e3:04:db:6d: 40:b7:a4:31:6d:6f:d3:1b:33:9c:25:fd:2e:e7:fe:bf:fc:56: 29:46:e4:b6:1c:e5:1d:3a:45:e8:66:12:af:4d:03:b2:b9:72: ed:36:6d:bb:32:91:22:6f:c9:6c:5f:79:e6:20:3a:6f:58:e8: 5b:e0:1b:9b:63:55:c7:46:51:8c:24:42:1f:29:9e:0d:ee:15: c6:93:c2:75 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUKZASL8T/D11dJAe26SGfOahNyVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTIxMDE4MjVaFw0yNjEyMTExMDIzMjVaMDMxMTAvBgNV BAMTKDFCODU0OEI5NjE0MDEwMjM4QTFGNjA1ODQ4N0Y0MEJDODRDRjUxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO6uv97N2u1yQzX8c9xZOWRbsC XJsnbLDfH1GuQyZQm3e/4CQkZ6DVdaLbpCF2DB2QtGSWFDC7ae5kn3ItClzMoj1o BMV6NYkvIoq2CosBaZEq1Oz9nKsMpLxuMZ3c9bW4HQ05qozUrqIZoJQd4mIEYWfy O6i0GJcI2fITjxbcx1MNWhKwsM6kW8/ak5bqqC+pdKABxTLn+6De2ReJnsBkQ0JG LYkQ/FrQ7g8tjubApdCno7Ov6NqcwsoFlUYeSOwS3GLOh36G44unJZngO8ZaxZuW mWcWaXGH2m3FxQRx7h2z/Ltg/Po/hszFAdyR8UhOKx0keBfvuPFiJ1ZvfQuhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUG4VIuWFAECOKH2BYSH9AvITPUf4wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTk0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNC6wD BACNC9owDQYJKoZIhvcNAQELBQADggEBAJsmUHHZxlQ3AmnEva9AkG6djFf3Un3S RRyVK059rFoHuUB4pvmUfeLNu+PaGzsfIGD+57UJwKFOAZ0Onqac41cC//ix17Ag 0+z4/sXG2Bgo0l0WmTC9LyLZ0hCL8L8XIUFdoQfIeRFc2ooa+3BTxZ/61J5W+ywi J0FZZ9xCIDdYLWiUZBcKzPs59OG8Fky0OtzdFqxVAE40X/wZqz1JmeR2x22bg8mF 3Qi7pvMgRWUo4wTbbUC3pDFtb9MbM5wl/S7n/r/8VilG5LYc5R06RehmEq9NA7K5 cu02bbsykSJvyWxfeeYgOm9Y6FvgG5tjVcdGUYwkQh8png3uFcaTwnU= -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:41 2025 by rpki-client