This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20326.roa File: AS20326.roa (raw, json) Hash identifier: 0LkGvlgJJ/qEaI9udm2hBfcT5miL/SU4TpJ+DoXVXeY= Subject key identifier: 26:03:40:A5:DF:4E:83:C7:D8:2F:17:77:A3:17:AF:10:8E:7D:7F:A7 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 71FE74594A438C7E480871235E558FB53BBFBC0E Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20326.roa Signing time: Thu 18 Dec 2025 14:05:31 +0000 ROA not before: Thu 18 Dec 2025 14:00:31 +0000 ROA not after: Thu 17 Dec 2026 14:05:31 +0000 asID: 20326 IP address blocks: 143.20.108.0/22 maxlen: 24 143.20.238.0/24 maxlen: 24 143.20.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fe:74:59:4a:43:8c:7e:48:08:71:23:5e:55:8f:b5:3b:bf:bc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 18 14:00:31 2025 GMT Not After : Dec 17 14:05:31 2026 GMT Subject: CN=260340A5DF4E83C7D82F1777A317AF108E7D7FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:30:05:8f:28:61:6e:3d:57:91:b3:67:c2: 2a:05:67:45:ce:e3:c8:95:42:07:8f:b3:b8:83:b2: 79:88:14:69:79:e4:14:fe:84:b7:fb:64:e5:9f:f3: c7:ba:e8:d2:3d:f3:72:97:b7:29:a3:9d:54:8d:25: 3f:dd:ae:1f:4d:20:f7:1f:44:fb:b6:e7:e9:99:ac: 77:6d:10:25:33:d5:7c:4a:66:e8:70:6f:de:6c:01: 6b:9f:1d:48:f0:a6:d5:85:05:b1:b4:6b:e5:ac:d1: ae:c8:fe:37:54:82:99:25:a4:a3:7e:d7:f4:ca:df: 7e:9a:eb:6d:e6:37:25:52:b6:fd:ec:d6:a1:d7:e7: 5f:9c:b6:00:12:8b:ac:86:f2:19:dd:1e:23:be:d9: 1a:be:de:bc:5e:b9:95:bc:a8:61:a0:0c:39:d1:2a: 5e:9f:e7:80:ac:be:40:8e:fd:54:d0:dd:84:d8:de: ff:52:9f:59:05:1f:1e:e9:ba:c2:d1:45:1a:42:6a: 77:1f:27:83:4b:83:15:13:e4:88:22:14:ef:19:28: a1:d7:30:38:25:2f:70:b2:9c:e4:a6:90:4f:ef:f4: fc:ab:28:ff:9b:77:ca:64:2d:ed:06:07:f0:40:39: ce:49:c2:02:96:40:9f:a2:df:9a:31:0b:7b:2f:81: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:40:A5:DF:4E:83:C7:D8:2F:17:77:A3:17:AF:10:8E:7D:7F:A7 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20326.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.108.0/22 143.20.238.0/24 143.20.240.0/22 Signature Algorithm: sha256WithRSAEncryption b3:3f:1e:3f:6b:3d:46:97:8f:91:ae:bf:db:df:84:6f:88:1e: 8b:2d:ec:3c:30:ab:f4:69:67:30:23:c1:43:dc:06:39:ab:12: 85:ab:94:d7:88:55:88:f9:90:79:40:dd:f2:7f:e9:87:91:01: 9a:7b:04:22:0b:88:25:3b:3a:b6:f5:db:e8:25:d4:94:37:29: 31:f7:87:c1:23:16:d8:e4:68:ff:34:13:9b:a6:62:1f:78:21: 1c:71:8d:0b:47:0b:38:4a:1e:e7:3b:88:2e:fe:1a:86:11:19: 97:25:ec:22:cf:2c:08:9b:63:8e:67:45:d2:47:92:2c:6b:94: ea:96:49:04:dd:a3:59:18:05:ee:39:44:7f:ae:9c:8d:0f:ac: 31:6a:cb:b9:b9:20:49:26:e5:ca:a3:f8:20:c7:ca:a1:a2:62: 88:ac:a0:05:8c:6c:7b:a9:cb:b4:ee:d9:17:f1:04:a6:a7:53: d1:ed:ae:a0:f1:39:d8:06:e5:1a:3d:67:3f:44:64:e7:b2:a5: 86:15:bc:c3:94:90:b5:1f:df:9c:72:93:ee:af:f4:6f:4f:b5: ac:d0:18:4f:b4:9f:21:25:76:c5:4b:7e:18:77:0e:10:c4:60: 0c:d8:9f:e5:2e:eb:c3:f9:cc:40:b9:1d:90:34:3f:a3:be:52: ed:3b:ce:ec -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUcf50WUpDjH5ICHEjXlWPtTu/vA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMTgxNDAwMzFaFw0yNjEyMTcxNDA1MzFaMDMxMTAvBgNV BAMTKDI2MDM0MEE1REY0RTgzQzdEODJGMTc3N0EzMTdBRjEwOEU3RDdGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgjAFjyhhbj1XkbNnwioFZ0XO 48iVQgePs7iDsnmIFGl55BT+hLf7ZOWf88e66NI983KXtymjnVSNJT/drh9NIPcf RPu25+mZrHdtECUz1XxKZuhwb95sAWufHUjwptWFBbG0a+Ws0a7I/jdUgpklpKN+ 1/TK336a623mNyVStv3s1qHX51+ctgASi6yG8hndHiO+2Rq+3rxeuZW8qGGgDDnR Kl6f54CsvkCO/VTQ3YTY3v9Sn1kFHx7pusLRRRpCancfJ4NLgxUT5IgiFO8ZKKHX MDglL3CynOSmkE/v9PyrKP+bd8pkLe0GB/BAOc5JwgKWQJ+i35oxC3svgUBRAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUJgNApd9Og8fYLxd3oxevEI59f6cwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjAzMjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAKPFGwD BACPFO4DBAKPFPAwDQYJKoZIhvcNAQELBQADggEBALM/Hj9rPUaXj5Guv9vfhG+I Host7Dwwq/RpZzAjwUPcBjmrEoWrlNeIVYj5kHlA3fJ/6YeRAZp7BCILiCU7Orb1 2+gl1JQ3KTH3h8EjFtjkaP80E5umYh94IRxxjQtHCzhKHuc7iC7+GoYRGZcl7CLP LAibY45nRdJHkixrlOqWSQTdo1kYBe45RH+unI0PrDFqy7m5IEkm5cqj+CDHyqGi YoisoAWMbHupy7Tu2RfxBKanU9HtrqDxOdgG5Ro9Zz9EZOeypYYVvMOUkLUf35xy k+6v9G9PtazQGE+0nyEldsVLfhh3DhDEYAzYn+Uu68P5zEC5HZA0P6O+Uu07zuw= -----END CERTIFICATE-----Generated at Sat Dec 20 16:35:10 2025 by rpki-client