This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399646.roa File: AS399646.roa (raw, json) Hash identifier: P69+h+3UAbiQvrzdxT1YBP5FiLtRatVfPuCdhuJIDE4= Subject key identifier: 0C:2D:D4:C1:59:D9:F1:E1:E8:5F:A7:EF:FC:34:19:E0:BF:89:A6:25 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 180E97ED6A8E96A0E0A70C97BF6FA2A9EE49E138 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399646.roa Signing time: Tue 09 Dec 2025 10:12:54 +0000 ROA not before: Tue 09 Dec 2025 10:07:54 +0000 ROA not after: Tue 08 Dec 2026 10:12:54 +0000 asID: 399646 IP address blocks: 143.20.141.0/24 maxlen: 24 143.20.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0e:97:ed:6a:8e:96:a0:e0:a7:0c:97:bf:6f:a2:a9:ee:49:e1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 9 10:07:54 2025 GMT Not After : Dec 8 10:12:54 2026 GMT Subject: CN=0C2DD4C159D9F1E1E85FA7EFFC3419E0BF89A625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:22:92:d3:6f:bd:70:a3:33:33:5c:fe:93: 87:59:be:ab:79:7b:d5:a2:23:f3:40:e2:ae:a1:56: 09:e9:a5:ae:3c:06:fb:37:1d:07:84:c0:53:95:85: db:6e:6e:3d:02:a9:0f:b8:3c:f1:11:78:38:95:ca: 92:77:69:54:a8:a0:cc:cf:b4:62:ed:d8:3c:42:96: 46:db:84:49:c6:88:09:e7:7f:89:09:8c:de:06:2d: 2a:a1:4c:3b:95:88:a1:6c:26:56:81:91:a6:a1:da: bb:9d:31:af:07:02:31:49:89:b9:d2:bb:17:f3:69: 74:cc:91:fc:9a:eb:8b:15:65:04:44:74:f6:e9:27: c3:4b:0f:58:c1:b4:05:ad:ed:e0:a5:7c:b7:e4:bc: 12:8b:e7:9d:bb:ee:01:4f:01:a6:e8:df:df:eb:90: 2b:60:84:25:b7:e0:f3:10:6a:08:86:fc:e0:30:0a: d8:f4:8c:8b:c1:b6:eb:e8:03:e4:18:7b:63:e8:e3: d8:fc:b0:35:c8:75:1a:2c:fe:14:93:38:8c:16:e8: 6d:30:8f:48:9a:90:14:d3:97:5a:e5:f6:e8:a1:71: a8:86:00:e2:6a:8c:23:f3:3c:88:2b:d2:e8:f3:9e: 9e:ae:f7:d4:ef:66:43:72:e3:f8:64:a0:9a:56:a4: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2D:D4:C1:59:D9:F1:E1:E8:5F:A7:EF:FC:34:19:E0:BF:89:A6:25 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.141.0/24 143.20.143.0/24 Signature Algorithm: sha256WithRSAEncryption ce:05:ac:64:49:0c:8b:aa:80:63:10:fb:ea:e1:8a:e5:83:18: 47:99:c9:4e:17:3d:7f:12:71:dc:18:58:c0:37:3e:2d:80:b4: f4:98:25:3d:0e:ea:94:6e:c7:79:d4:c6:9d:ed:49:0e:ec:86: 8a:1e:7d:82:79:62:34:a3:83:fb:3b:06:0f:a3:41:54:e8:d1: 0e:43:4f:12:4c:50:65:ca:a4:d2:ee:21:7a:a2:e7:03:51:67: 88:43:1e:95:43:53:4d:68:8f:07:a1:34:06:01:99:5a:f2:bc: 9e:05:e7:8b:36:be:0a:23:16:04:92:e9:bb:26:51:4b:43:e0: 99:fb:12:61:b3:b4:c4:16:52:83:a0:49:10:4d:55:92:93:34: d5:8d:96:33:b5:99:e4:c0:61:c0:57:f8:3a:29:87:3a:89:06: 9c:65:05:0d:a5:d7:92:44:6b:60:6a:e6:e7:19:68:39:10:11: b3:04:a4:20:12:a8:60:8a:92:3a:a1:9b:f0:78:86:db:9d:1a: 10:31:0c:33:10:17:d4:b5:6e:c0:79:de:a3:4f:1c:5e:2b:cf: 70:b5:09:c6:a8:09:08:dd:b8:da:0c:74:4f:43:c9:7b:90:27: d4:4e:6e:8b:0c:41:11:91:5e:cc:ab:80:53:3d:a1:e1:70:b4: 16:51:05:f0 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUGA6X7WqOlqDgpwyXv2+iqe5J4TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMDkxMDA3NTRaFw0yNjEyMDgxMDEyNTRaMDMxMTAvBgNV BAMTKDBDMkRENEMxNTlEOUYxRTFFODVGQTdFRkZDMzQxOUUwQkY4OUE2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGyKS02+9cKMzM1z+k4dZvqt5 e9WiI/NA4q6hVgnppa48Bvs3HQeEwFOVhdtubj0CqQ+4PPEReDiVypJ3aVSooMzP tGLt2DxClkbbhEnGiAnnf4kJjN4GLSqhTDuViKFsJlaBkaah2rudMa8HAjFJibnS uxfzaXTMkfya64sVZQREdPbpJ8NLD1jBtAWt7eClfLfkvBKL55277gFPAabo39/r kCtghCW34PMQagiG/OAwCtj0jIvBtuvoA+QYe2Po49j8sDXIdRos/hSTOIwW6G0w j0iakBTTl1rl9uihcaiGAOJqjCPzPIgr0ujznp6u99TvZkNy4/hkoJpWpCddAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUDC3UwVnZ8eHoX6fv/DQZ4L+JpiUwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzk5NjQ2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxSN AwQAjxSPMA0GCSqGSIb3DQEBCwUAA4IBAQDOBaxkSQyLqoBjEPvq4YrlgxhHmclO Fz1/EnHcGFjANz4tgLT0mCU9DuqUbsd51Mad7UkO7IaKHn2CeWI0o4P7OwYPo0FU 6NEOQ08STFBlyqTS7iF6oucDUWeIQx6VQ1NNaI8HoTQGAZla8ryeBeeLNr4KIxYE kum7JlFLQ+CZ+xJhs7TEFlKDoEkQTVWSkzTVjZYztZnkwGHAV/g6KYc6iQacZQUN pdeSRGtgaubnGWg5EBGzBKQgEqhgipI6oZvweIbbnRoQMQwzEBfUtW7Aed6jTxxe K89wtQnGqAkI3bjaDHRPQ8l7kCfUTm6LDEERkV7Mq4BTPaHhcLQWUQXw -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:20 2025 by rpki-client