This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa File: AS153564.roa (raw, json) Hash identifier: Xscza1qfKRoOXbJpH/AWXftL2fgCw7ho7jZxJNhmJjE= Subject key identifier: 3A:45:96:26:EB:B2:61:B0:04:4E:94:5D:36:8F:59:52:B1:83:7C:57 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 308B6773AEB8FFE28EE1EF95B6818E7408CE1309 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa Signing time: Fri 21 Nov 2025 12:19:12 +0000 ROA not before: Fri 21 Nov 2025 12:14:12 +0000 ROA not after: Fri 20 Nov 2026 12:19:12 +0000 asID: 153564 IP address blocks: 162.141.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8b:67:73:ae:b8:ff:e2:8e:e1:ef:95:b6:81:8e:74:08:ce:13:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 21 12:14:12 2025 GMT Not After : Nov 20 12:19:12 2026 GMT Subject: CN=3A459626EBB261B0044E945D368F5952B1837C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:d1:d8:56:4d:94:4a:a1:12:a6:c9:a4:35: 24:af:31:d1:cb:98:e3:3d:1f:47:01:21:70:76:87: f8:36:50:5b:2e:20:e7:24:98:f1:b8:d0:98:8e:ca: 8b:c0:7c:8a:bb:81:3a:60:e4:0a:d5:3b:60:23:ec: 70:0d:34:ed:c9:8d:3c:cb:80:2f:ae:dd:54:6e:89: 98:3b:0a:db:ea:bc:49:5c:70:ed:cb:f3:f2:f1:e7: 64:de:9a:ba:02:e1:96:5d:0d:55:0e:bf:63:bd:cd: dd:e5:9b:9e:40:da:e2:e6:f1:34:a9:6f:37:a9:9b: 6c:51:ee:bc:1f:68:dd:63:1c:f3:ea:0d:18:94:d9: 6a:1f:00:f9:f1:8d:73:65:71:d3:96:f7:75:b5:6d: cc:a1:5b:1f:49:bd:a6:f1:bc:9c:0b:f5:89:e9:1d: f0:4c:df:0c:36:ca:6d:75:83:54:ea:b1:f6:d8:5f: 17:8b:33:ef:af:8f:eb:1a:29:34:b1:77:35:31:9a: c8:f5:4f:62:8c:71:c7:58:c9:06:22:1e:fa:da:9e: a9:4f:0a:47:d5:16:04:00:71:55:9a:dd:1d:52:5c: 53:4e:88:c2:81:d3:d4:ce:f3:96:62:ca:72:98:03: 35:60:ff:60:36:32:d2:c8:44:e9:e1:86:2e:66:42: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:96:26:EB:B2:61:B0:04:4E:94:5D:36:8F:59:52:B1:83:7C:57 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153564.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.0.0/23 Signature Algorithm: sha256WithRSAEncryption 78:35:08:5c:51:dc:69:73:11:30:f8:4c:98:c8:2e:9e:6d:22: c4:8b:d3:60:04:7c:55:6e:9c:e0:48:31:e3:2b:30:95:b8:9d: 6e:d0:b9:f8:22:90:22:5e:f2:39:dd:46:dd:9d:79:9d:4a:e3: ce:e3:c7:cb:b2:ba:a4:bc:4a:46:75:16:e6:d4:0d:01:d6:b3: b0:78:2d:45:22:29:52:c0:b1:76:63:ee:f0:26:e6:b7:a0:50: 01:be:7a:fa:77:20:78:c2:0f:bc:12:1d:5b:2d:3d:72:2d:36: 0e:04:61:db:9a:4c:2e:41:2a:af:1a:6e:05:e6:8a:02:b9:e9: 56:23:98:f5:97:8e:af:53:95:2e:39:f1:70:3c:d8:d8:19:79: f3:2c:45:9d:4f:da:96:b8:12:3d:e8:01:34:20:75:81:55:b9: f6:f5:0d:06:a5:f1:6f:85:0f:67:41:6e:10:e7:5a:07:e7:84: be:a4:1d:6c:bb:91:44:93:a5:a2:76:57:76:2b:f4:a2:aa:82: 40:01:fb:72:5d:e9:ad:25:c9:5f:d6:ab:00:66:a0:32:49:c9: 9f:79:3a:3d:86:44:ba:47:76:1a:58:ce:83:9b:7a:24:78:4f: c2:b8:67:61:34:15:ee:59:0e:7a:fe:59:6f:f8:aa:59:60:62: b8:66:28:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMItnc664/+KO4e+VtoGOdAjOEwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjExMjE0MTJaFw0yNjExMjAxMjE5MTJaMDMxMTAvBgNV BAMTKDNBNDU5NjI2RUJCMjYxQjAwNDRFOTQ1RDM2OEY1OTUyQjE4MzdDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrdHYVk2USqESpsmkNSSvMdHL mOM9H0cBIXB2h/g2UFsuIOckmPG40JiOyovAfIq7gTpg5ArVO2Aj7HANNO3JjTzL gC+u3VRuiZg7CtvqvElccO3L8/Lx52TemroC4ZZdDVUOv2O9zd3lm55A2uLm8TSp bzepm2xR7rwfaN1jHPPqDRiU2WofAPnxjXNlcdOW93W1bcyhWx9JvabxvJwL9Ynp HfBM3ww2ym11g1TqsfbYXxeLM++vj+saKTSxdzUxmsj1T2KMccdYyQYiHvranqlP CkfVFgQAcVWa3R1SXFNOiMKB09TO85ZiynKYAzVg/2A2MtLIROnhhi5mQiknAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUOkWWJuuyYbAETpRdNo9ZUrGDfFcwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUzNTY0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoo0A MA0GCSqGSIb3DQEBCwUAA4IBAQB4NQhcUdxpcxEw+EyYyC6ebSLEi9NgBHxVbpzg SDHjKzCVuJ1u0Ln4IpAiXvI53UbdnXmdSuPO48fLsrqkvEpGdRbm1A0B1rOweC1F IilSwLF2Y+7wJua3oFABvnr6dyB4wg+8Eh1bLT1yLTYOBGHbmkwuQSqvGm4F5ooC uelWI5j1l46vU5UuOfFwPNjYGXnzLEWdT9qWuBI96AE0IHWBVbn29Q0GpfFvhQ9n QW4Q51oH54S+pB1su5FEk6Widld2K/SiqoJAAftyXemtJclf1qsAZqAyScmfeTo9 hkS6R3YaWM6Dm3okeE/CuGdhNBXuWQ56/llv+KpZYGK4Zijq -----END CERTIFICATE-----Generated at Wed Dec 3 11:47:48 2025 by rpki-client