This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20454.roa File: AS20454.roa (raw, json) Hash identifier: V3L/5Nm9e96hqTYWk8/wCiu2HP57VB2P8XJuLbIJTpw= Subject key identifier: 8B:4C:93:D3:56:9B:56:FF:9A:60:33:19:2F:4F:B8:16:D1:CB:E9:34 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5FB32AE41945ADEE70799EB0C92DA99CDBC49065 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20454.roa Signing time: Tue 11 Nov 2025 12:37:35 +0000 ROA not before: Tue 11 Nov 2025 12:32:35 +0000 ROA not after: Tue 10 Nov 2026 12:37:35 +0000 asID: 20454 IP address blocks: 96.62.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b3:2a:e4:19:45:ad:ee:70:79:9e:b0:c9:2d:a9:9c:db:c4:90:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 11 12:32:35 2025 GMT Not After : Nov 10 12:37:35 2026 GMT Subject: CN=8B4C93D3569B56FF9A6033192F4FB816D1CBE934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:af:49:a6:82:4f:4d:a6:51:69:2e:71:f7: 4e:6e:82:ad:41:75:47:22:da:7b:d4:87:d6:32:b9: 50:9e:23:17:e7:32:7c:5f:bf:6d:ac:ef:01:fc:b3: fd:73:e5:b6:49:26:f7:b7:70:2a:fd:db:2f:d4:04: 16:60:87:b1:49:a0:3d:a5:ed:c3:fd:23:0d:6d:77: 4f:aa:67:98:1c:3b:94:b2:29:3b:79:38:c7:43:b5: b5:56:f5:0a:a7:5b:14:b2:f5:72:5e:e6:9b:b7:5e: f6:e8:94:fa:6a:53:df:12:43:14:f2:a2:f4:80:96: 0a:29:69:9f:e0:7c:ba:60:7d:de:7d:82:42:0e:2f: ad:a4:b4:59:db:52:a5:8d:0e:e3:4d:63:31:9c:79: 61:3f:18:75:e0:45:d1:27:c1:fd:b3:f9:e7:c8:ee: c8:99:f4:2f:b3:40:b4:dc:c8:c1:81:2c:e1:4c:35: c2:33:60:05:2e:8d:9f:a5:e5:9c:fd:8f:97:dd:c8: 00:35:c4:f5:a1:d3:a6:61:a8:41:7e:bb:c7:d6:87: b5:d7:44:42:78:9c:8d:a0:dd:95:8f:06:27:c0:a1: a2:1a:8d:6e:20:6a:0b:d7:a9:1c:b7:8c:ed:b4:56: 10:67:8e:a9:a5:5e:f2:b4:a3:03:31:ea:15:31:bb: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4C:93:D3:56:9B:56:FF:9A:60:33:19:2F:4F:B8:16:D1:CB:E9:34 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.243.0/24 Signature Algorithm: sha256WithRSAEncryption bb:e9:e1:5c:33:ff:76:6d:85:04:5e:21:67:0b:a7:60:cc:f8: b8:bf:7f:76:b7:41:64:16:61:91:7c:8c:8b:90:c3:e9:bb:ca: df:f9:7f:5b:05:78:4c:2a:cf:0b:15:67:7e:83:cf:7b:e9:91: 05:56:e4:cf:16:5d:63:49:19:2e:97:dd:ad:09:52:d2:c4:a5: 5b:19:08:58:8f:d0:ba:dd:67:8b:16:7e:c1:cf:b2:39:04:99: 4d:ac:4a:6e:05:71:21:cd:e8:36:ab:54:49:a5:b4:f9:1d:d0: ac:8a:44:80:4c:47:d9:3b:70:d6:0f:b9:c7:ee:f8:fa:92:c9: b5:57:eb:3e:65:20:10:41:5c:8d:3e:e9:58:cf:e0:e2:4e:66: 99:9b:28:ab:8f:53:3e:09:80:66:7c:9a:1c:1b:ca:f9:1f:cd: 43:43:f5:3c:b3:23:2b:ce:16:78:24:5f:90:05:65:d9:c5:e2: 0e:5d:d2:96:44:5d:5e:e3:15:55:14:d8:57:66:d5:5f:2d:25: 48:3b:e3:62:9a:b8:4d:0f:fc:d4:e4:ec:b7:25:a1:af:93:ef: b4:52:e5:9c:a5:76:7a:dc:b0:fc:0d:b0:93:31:24:fb:75:f0: d1:e5:10:6b:c6:bc:f9:f2:5a:7b:34:4c:7a:c8:78:37:62:74: 5e:84:cc:77 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUX7Mq5BlFre5weZ6wyS2pnNvEkGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTExMjMyMzVaFw0yNjExMTAxMjM3MzVaMDMxMTAvBgNV BAMTKDhCNEM5M0QzNTY5QjU2RkY5QTYwMzMxOTJGNEZCODE2RDFDQkU5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aa9JpoJPTaZRaS5x905ugq1B dUci2nvUh9YyuVCeIxfnMnxfv22s7wH8s/1z5bZJJve3cCr92y/UBBZgh7FJoD2l 7cP9Iw1td0+qZ5gcO5SyKTt5OMdDtbVW9QqnWxSy9XJe5pu3XvbolPpqU98SQxTy ovSAlgopaZ/gfLpgfd59gkIOL62ktFnbUqWNDuNNYzGceWE/GHXgRdEnwf2z+efI 7siZ9C+zQLTcyMGBLOFMNcIzYAUujZ+l5Zz9j5fdyAA1xPWh06ZhqEF+u8fWh7XX REJ4nI2g3ZWPBifAoaIajW4gagvXqRy3jO20VhBnjqmlXvK0owMx6hUxu/MrAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUi0yT01abVv+aYDMZL0+4FtHL6TQwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA0NTQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABgPvMw DQYJKoZIhvcNAQELBQADggEBALvp4Vwz/3ZthQReIWcLp2DM+Li/f3a3QWQWYZF8 jIuQw+m7yt/5f1sFeEwqzwsVZ36Dz3vpkQVW5M8WXWNJGS6X3a0JUtLEpVsZCFiP 0LrdZ4sWfsHPsjkEmU2sSm4FcSHN6DarVEmltPkd0KyKRIBMR9k7cNYPucfu+PqS ybVX6z5lIBBBXI0+6VjP4OJOZpmbKKuPUz4JgGZ8mhwbyvkfzUND9TyzIyvOFngk X5AFZdnF4g5d0pZEXV7jFVUU2Fdm1V8tJUg742KauE0P/NTk7Lcloa+T77RS5Zyl dnrcsPwNsJMxJPt18NHlEGvGvPnyWns0THrIeDdidF6EzHc= -----END CERTIFICATE-----Generated at Fri Dec 5 05:08:17 2025 by rpki-client