This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa File: AS137517.roa (raw, json) Hash identifier: OD+UYwUuFNwfaOynrjynTfb9skAIZRj0yZ1O5iOopI4= Subject key identifier: 93:85:98:67:58:F6:55:CF:D4:37:0B:5A:12:EC:AE:4D:8E:5A:0C:1B Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6CC609BF243807AC98B02C1000BBCFD553BC8218 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa Signing time: Tue 25 Nov 2025 00:04:33 +0000 ROA not before: Mon 24 Nov 2025 23:59:33 +0000 ROA not after: Tue 24 Nov 2026 00:04:33 +0000 asID: 137517 IP address blocks: 143.14.95.0/24 maxlen: 24 162.141.113.0/24 maxlen: 24 167.148.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:09:bf:24:38:07:ac:98:b0:2c:10:00:bb:cf:d5:53:bc:82:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 24 23:59:33 2025 GMT Not After : Nov 24 00:04:33 2026 GMT Subject: CN=9385986758F655CFD4370B5A12ECAE4D8E5A0C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:8f:a1:df:df:9b:10:32:ee:48:45:4f:ef: 1f:de:bc:1e:13:a5:f3:23:7c:75:50:6f:59:20:e3: 52:9e:68:26:4e:a9:c1:01:46:e7:68:b6:0a:fb:85: 9a:07:97:f6:b9:ae:de:d3:e0:0a:b9:55:c3:ad:d5: 97:af:19:88:22:c6:62:1c:6b:4e:80:e6:a6:17:6b: b9:92:78:89:41:be:f1:f4:e5:4f:ef:98:58:ec:8a: 1a:3a:89:bf:47:a9:e8:c8:d2:49:35:c2:a7:77:20: a2:ca:21:89:8b:81:94:9b:93:43:4d:c8:b6:ab:72: 30:2f:71:52:ac:bb:3c:ba:22:af:1a:a5:57:78:5f: 6e:ff:6f:03:ab:1c:58:9a:36:e5:e0:13:e1:f4:2f: 5d:c4:b4:3c:42:73:92:bb:a2:ac:cf:40:bc:72:49: c6:03:1b:70:4b:ef:d2:7e:85:94:73:d8:f4:86:d6: 21:a0:6f:57:63:5b:95:b3:67:2b:55:d1:fc:6b:04: 5e:3b:a9:44:77:e3:9c:8e:1e:ce:60:7a:8e:b8:2b: b2:39:a3:d4:d1:34:c0:9e:06:da:31:f0:83:89:8c: 99:89:4d:5f:3f:3e:2c:8d:60:2a:52:ba:6e:31:20: 2f:75:93:ca:3a:80:06:13:a6:7c:8c:99:56:20:69: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:98:67:58:F6:55:CF:D4:37:0B:5A:12:EC:AE:4D:8E:5A:0C:1B X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.95.0/24 162.141.113.0/24 167.148.168.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:13:1f:80:af:a2:c5:22:30:ca:bb:d9:40:81:3c:d0:9a:0f: 7c:33:79:3b:5a:48:39:71:5e:7a:08:a6:c3:2c:61:1e:33:b7: e3:e7:5c:29:1a:6d:68:20:da:4f:6e:49:7e:46:15:ad:d5:71: 7b:db:5b:a6:d6:76:dc:85:83:d0:3a:55:1d:03:8a:86:e0:4b: 32:5d:10:ef:0b:69:e5:c9:5f:0d:ce:38:62:9f:e8:f1:48:40: f3:96:4b:7d:69:5a:c0:80:43:2f:44:7c:ca:9a:a9:d0:19:70: 5b:f2:88:08:d8:16:81:a9:87:c2:7c:7f:c3:c3:57:b1:d2:5b: 2b:40:35:14:88:85:d6:be:e6:97:19:66:33:67:5d:cf:13:f5: b6:4e:4c:5b:c2:25:27:7b:17:de:d4:77:da:09:82:6b:de:1a: d4:35:4c:37:7b:65:b0:4f:7f:dc:5c:c4:69:97:33:19:e2:60: d6:e3:05:f4:6e:4e:b4:6d:24:21:84:ae:e8:b5:8b:28:11:0a: 93:dd:8a:14:0a:51:db:4e:75:70:15:58:c7:1d:7f:1a:37:29: f7:67:e8:58:5a:77:c7:5a:bf:58:8a:42:10:dd:ba:5c:65:4d: 79:a8:9d:de:04:64:e7:2c:16:b4:e6:60:f5:e3:05:62:02:08: 01:51:87:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUbMYJvyQ4B6yYsCwQALvP1VO8ghgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjQyMzU5MzNaFw0yNjExMjQwMDA0MzNaMDMxMTAvBgNV BAMTKDkzODU5ODY3NThGNjU1Q0ZENDM3MEI1QTEyRUNBRTREOEU1QTBDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgY+h39+bEDLuSEVP7x/evB4T pfMjfHVQb1kg41KeaCZOqcEBRudotgr7hZoHl/a5rt7T4Aq5VcOt1ZevGYgixmIc a06A5qYXa7mSeIlBvvH05U/vmFjsiho6ib9HqejI0kk1wqd3IKLKIYmLgZSbk0NN yLarcjAvcVKsuzy6Iq8apVd4X27/bwOrHFiaNuXgE+H0L13EtDxCc5K7oqzPQLxy ScYDG3BL79J+hZRz2PSG1iGgb1djW5WzZytV0fxrBF47qUR345yOHs5geo64K7I5 o9TRNMCeBtox8IOJjJmJTV8/PiyNYCpSum4xIC91k8o6gAYTpnyMmVYgabSjAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUk4WYZ1j2Vc/UNwtaEuyuTY5aDBswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM3NTE3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjw5f AwQAoo1xAwQAp5SoMA0GCSqGSIb3DQEBCwUAA4IBAQBOEx+Ar6LFIjDKu9lAgTzQ mg98M3k7Wkg5cV56CKbDLGEeM7fj51wpGm1oINpPbkl+RhWt1XF721um1nbchYPQ OlUdA4qG4EsyXRDvC2nlyV8Nzjhin+jxSEDzlkt9aVrAgEMvRHzKmqnQGXBb8ogI 2BaBqYfCfH/Dw1ex0lsrQDUUiIXWvuaXGWYzZ13PE/W2TkxbwiUnexfe1HfaCYJr 3hrUNUw3e2WwT3/cXMRplzMZ4mDW4wX0bk60bSQhhK7otYsoEQqT3YoUClHbTnVw FVjHHX8aNyn3Z+hYWnfHWr9YikIQ3bpcZU15qJ3eBGTnLBa05mD14wViAggBUYfm -----END CERTIFICATE-----Generated at Fri Dec 5 15:44:25 2025 by rpki-client