This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa File: AS213574.roa (raw, json) Hash identifier: 4VWTvUSwnJMNO/GpxXGPG3pLGE9KTGb8k5gQ0RLEszQ= Subject key identifier: 63:36:43:A0:C1:45:75:49:F9:EE:AA:CF:E7:9C:DE:93:D3:E0:6E:C1 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 41D2D281AD051B17CA0BAE6A1D6C24E48640C454 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa Signing time: Fri 21 Nov 2025 12:19:12 +0000 ROA not before: Fri 21 Nov 2025 12:14:12 +0000 ROA not after: Fri 20 Nov 2026 12:19:12 +0000 asID: 213574 IP address blocks: 162.141.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:d2:81:ad:05:1b:17:ca:0b:ae:6a:1d:6c:24:e4:86:40:c4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 21 12:14:12 2025 GMT Not After : Nov 20 12:19:12 2026 GMT Subject: CN=633643A0C1457549F9EEAACFE79CDE93D3E06EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ea:32:b9:93:5e:b1:5d:4f:bc:c0:c4:b4:29: 43:10:e4:ee:bb:5d:94:27:13:e9:c1:05:2b:6a:4b: a2:bd:8c:a9:fd:4d:a9:9a:8b:15:64:3c:2c:d7:ea: a2:9f:59:2c:26:e2:02:9d:88:36:b7:09:0b:77:79: 81:30:46:e0:bf:fe:f4:83:65:ac:84:e0:0f:81:46: ca:65:e7:03:3b:e1:43:aa:65:00:14:0f:db:88:0b: f6:bc:70:04:17:f1:25:94:51:0c:7b:39:00:13:d3: b4:6c:a4:bf:0a:f3:cb:66:7f:ae:c5:eb:1f:9a:1b: bb:ec:0c:b7:f5:d3:68:f4:26:a9:75:73:aa:5b:42: d2:05:9f:db:6e:ed:63:fd:02:85:4f:1b:56:65:eb: 4d:e6:df:54:7d:10:33:1c:10:a7:b9:a5:be:0f:81: 7a:bd:4b:f8:9d:12:a4:ba:c1:e5:75:0a:b7:b1:b8: 35:aa:3e:1a:2d:fc:43:b1:91:ad:e5:86:97:79:29: 44:6e:13:5b:ed:38:6b:8c:6b:38:ce:94:5e:f5:20: f6:1e:44:5c:f8:1e:ea:ff:97:70:18:cf:89:51:1f: 9e:04:d4:68:4c:46:e8:ad:06:64:dc:54:ac:b1:fa: 55:09:65:ad:6c:2f:05:33:44:25:96:cb:bd:e1:98: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:36:43:A0:C1:45:75:49:F9:EE:AA:CF:E7:9C:DE:93:D3:E0:6E:C1 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.0.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:3d:55:42:4a:6b:9b:33:10:21:51:6f:af:ca:8a:bc:1e:1f: 6f:14:4c:14:84:a3:04:3f:f2:f3:91:b7:f6:72:10:6e:5d:5c: 5b:97:5f:c5:86:b3:4a:c0:da:8a:58:1c:ed:cc:19:26:e0:a4: 77:c0:98:38:9a:36:bc:4c:0e:0a:d8:fe:76:e4:1e:cb:6d:67: fc:95:65:68:5b:f2:35:25:a9:d9:79:ac:f2:9b:f0:11:c2:58: 90:6d:5e:18:50:bc:51:4a:34:eb:52:cf:1b:57:9e:d7:46:e3: 00:f0:41:d7:03:51:7e:55:64:5f:b3:d1:98:7a:69:11:bb:9a: b3:27:b7:c5:a5:1d:ce:89:83:59:3d:ab:2e:d5:1b:9c:57:6a: f0:1a:04:8c:df:91:c8:c3:d7:2f:4f:33:6d:b5:49:34:d1:d8: d4:3e:76:66:c3:63:ff:1c:b0:ec:0d:c4:52:0c:dd:f6:f0:b0: b8:0b:f2:d4:62:25:7a:42:6c:fa:c1:bf:25:cd:40:3e:a1:0a: d6:5a:b1:c0:a1:28:92:63:64:ae:1d:99:53:e0:b3:56:e6:5a: 5f:8e:f2:5b:07:06:68:59:c8:ad:31:42:77:ed:8d:67:d8:00: cb:d8:8c:93:4a:af:d2:18:c1:8c:cf:13:c8:1c:9e:6e:7a:65: ae:79:01:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQdLSga0FGxfKC65qHWwk5IZAxFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjExMjE0MTJaFw0yNjExMjAxMjE5MTJaMDMxMTAvBgNV BAMTKDYzMzY0M0EwQzE0NTc1NDlGOUVFQUFDRkU3OUNERTkzRDNFMDZFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6jK5k16xXU+8wMS0KUMQ5O67 XZQnE+nBBStqS6K9jKn9TamaixVkPCzX6qKfWSwm4gKdiDa3CQt3eYEwRuC//vSD ZayE4A+BRspl5wM74UOqZQAUD9uIC/a8cAQX8SWUUQx7OQAT07RspL8K88tmf67F 6x+aG7vsDLf102j0Jql1c6pbQtIFn9tu7WP9AoVPG1Zl603m31R9EDMcEKe5pb4P gXq9S/idEqS6weV1CrexuDWqPhot/EOxka3lhpd5KURuE1vtOGuMazjOlF71IPYe RFz4Hur/l3AYz4lRH54E1GhMRuitBmTcVKyx+lUJZa1sLwUzRCWWy73hmI0XAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUYzZDoMFFdUn57qrP55zek9PgbsEwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNTc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoo0A MA0GCSqGSIb3DQEBCwUAA4IBAQBePVVCSmubMxAhUW+vyoq8Hh9vFEwUhKMEP/Lz kbf2chBuXVxbl1/FhrNKwNqKWBztzBkm4KR3wJg4mja8TA4K2P525B7LbWf8lWVo W/I1JanZeazym/ARwliQbV4YULxRSjTrUs8bV57XRuMA8EHXA1F+VWRfs9GYemkR u5qzJ7fFpR3OiYNZPasu1RucV2rwGgSM35HIw9cvTzNttUk00djUPnZmw2P/HLDs DcRSDN328LC4C/LUYiV6Qmz6wb8lzUA+oQrWWrHAoSiSY2SuHZlT4LNW5lpfjvJb BwZoWcitMUJ37Y1n2ADL2IyTSq/SGMGMzxPIHJ5uemWueQH4 -----END CERTIFICATE-----Generated at Fri Dec 5 05:07:04 2025 by rpki-client