This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa File: AS64267.roa (raw, json) Hash identifier: ILwMb3aG7033aVh/7eEPcyymCfvo+1R3XGoVx1Q29DU= Subject key identifier: 86:74:8A:47:7E:BD:32:44:74:92:2C:6B:A8:DD:61:BB:3F:DF:DA:39 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 55CA73983634869F23A485B324DF6A53B15E2807 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa Signing time: Mon 15 Dec 2025 00:07:16 +0000 ROA not before: Mon 15 Dec 2025 00:02:16 +0000 ROA not after: Mon 14 Dec 2026 00:07:16 +0000 asID: 64267 IP address blocks: 141.11.2.0/24 maxlen: 24 141.11.3.0/24 maxlen: 24 141.11.23.0/24 maxlen: 24 141.11.27.0/24 maxlen: 24 141.11.66.0/23 maxlen: 24 141.11.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ca:73:98:36:34:86:9f:23:a4:85:b3:24:df:6a:53:b1:5e:28:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 15 00:02:16 2025 GMT Not After : Dec 14 00:07:16 2026 GMT Subject: CN=86748A477EBD324474922C6BA8DD61BB3FDFDA39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:7f:b1:33:60:27:8e:97:18:8f:12:d0:f8: ec:a7:b9:2f:2f:54:87:29:ff:d3:d8:a3:91:fe:a7: 9f:f4:46:b9:00:1a:eb:a8:ef:5b:d3:ee:d4:69:39: 22:03:22:c7:1c:e1:f3:06:c9:f5:8d:e7:aa:69:da: 00:a0:ca:91:4d:f6:e2:ce:ea:f5:75:92:da:51:49: 52:95:5c:5d:fa:e5:1c:42:f6:d1:8a:fa:ae:3e:f5: d2:da:ad:1e:24:02:19:5a:32:ce:58:c0:54:74:1a: bf:c3:6e:2a:d0:15:7b:48:56:e6:22:24:08:c8:1c: 1e:50:08:67:70:ec:d3:2f:a2:38:0d:60:b2:b1:04: 09:d0:8d:01:df:fe:65:84:9f:ec:4a:c3:57:81:59: a0:43:4f:8f:db:e5:b0:78:e3:be:f6:75:10:f3:30: 87:35:5e:d1:d9:ca:9d:2e:02:bf:c0:a8:ee:4a:82: 64:15:56:0c:a1:ef:8b:5c:c7:87:93:08:be:da:04: 04:97:bc:cd:7e:53:c7:01:ed:9a:96:a6:50:26:b6: e5:06:b7:6f:95:b3:9a:b4:5e:28:b4:27:76:a0:bb: 94:0a:bc:75:4f:39:4a:89:e8:74:fe:0b:97:e5:b2: 93:30:b7:0c:37:5c:06:13:4f:1a:cd:4f:4b:5b:6a: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:74:8A:47:7E:BD:32:44:74:92:2C:6B:A8:DD:61:BB:3F:DF:DA:39 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.2.0/23 141.11.23.0/24 141.11.27.0/24 141.11.66.0/23 141.11.230.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:33:eb:c2:12:26:c1:b0:d2:8a:e4:c3:d4:a2:15:57:f5:a5: a6:f0:b1:1d:10:8d:88:67:ba:6c:0c:24:6c:7e:77:a8:39:59: 73:e2:27:8a:8d:ce:62:fd:4f:d7:8b:90:5f:d9:f4:58:68:d2: 0f:b1:da:50:82:65:6c:b3:e7:a1:14:86:cc:8c:7f:a0:2a:cf: b5:19:91:be:c4:c8:38:cc:c9:8d:d1:52:89:5f:aa:4d:44:9d: 38:15:8b:e7:3a:5d:f0:e9:27:6d:43:34:39:54:42:c7:11:1e: 7b:ca:06:02:53:ce:d8:8e:2c:8c:43:51:69:a4:d2:ca:6d:66: dc:9e:cb:25:83:87:71:1c:49:90:ac:6c:a6:e6:c1:fc:d6:b0: cc:fd:38:cf:01:8d:c4:02:04:ef:02:d6:e0:d6:d0:d3:90:b8: 9e:46:da:59:1e:d0:5f:16:64:7d:a7:fb:dd:fd:52:f1:85:24: 0a:65:ec:8a:a4:a2:ea:13:f8:9a:ae:94:52:3d:05:43:8b:fa: e5:5d:11:ef:1a:7d:80:03:43:87:2c:1a:52:ac:a3:5c:c3:e5: ae:70:10:2a:df:72:ec:a3:5f:62:ec:fa:6b:29:6d:a0:68:bf: 5d:24:64:91:88:a7:94:96:8c:ca:8e:33:c4:db:14:7c:35:85: 0c:3e:15:74 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUVcpzmDY0hp8jpIWzJN9qU7FeKAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTUwMDAyMTZaFw0yNjEyMTQwMDA3MTZaMDMxMTAvBgNV BAMTKDg2NzQ4QTQ3N0VCRDMyNDQ3NDkyMkM2QkE4REQ2MUJCM0ZERkRBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHI3+xM2AnjpcYjxLQ+OynuS8v VIcp/9PYo5H+p5/0RrkAGuuo71vT7tRpOSIDIscc4fMGyfWN56pp2gCgypFN9uLO 6vV1ktpRSVKVXF365RxC9tGK+q4+9dLarR4kAhlaMs5YwFR0Gr/DbirQFXtIVuYi JAjIHB5QCGdw7NMvojgNYLKxBAnQjQHf/mWEn+xKw1eBWaBDT4/b5bB44772dRDz MIc1XtHZyp0uAr/AqO5KgmQVVgyh74tcx4eTCL7aBASXvM1+U8cB7ZqWplAmtuUG t2+Vs5q0Xii0J3agu5QKvHVPOUqJ6HT+C5flspMwtww3XAYTTxrNT0tbaqZrAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUhnSKR369MkR0kixrqN1huz/f2jkwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjQyNjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAGNCwID BACNCxcDBACNCxsDBAGNC0IDBACNC+YwDQYJKoZIhvcNAQELBQADggEBAH8z68IS JsGw0orkw9SiFVf1pabwsR0QjYhnumwMJGx+d6g5WXPiJ4qNzmL9T9eLkF/Z9Fho 0g+x2lCCZWyz56EUhsyMf6Aqz7UZkb7EyDjMyY3RUolfqk1EnTgVi+c6XfDpJ21D NDlUQscRHnvKBgJTztiOLIxDUWmk0sptZtyeyyWDh3EcSZCsbKbmwfzWsMz9OM8B jcQCBO8C1uDW0NOQuJ5G2lke0F8WZH2n+939UvGFJApl7IqkouoT+JqulFI9BUOL +uVdEe8afYADQ4csGlKso1zD5a5wECrfcuyjX2Ls+mspbaBov10kZJGIp5SWjMqO M8TbFHw1hQw+FXQ= -----END CERTIFICATE-----Generated at Sat Dec 20 03:01:32 2025 by rpki-client