This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS24940.roa File: AS24940.roa (raw, json) Hash identifier: 9llPOqU1kkKR3lcv6by46UJ3h/kj9YxcNOMcBr6oIUw= Subject key identifier: 07:FB:3B:1B:2F:65:79:84:73:FB:83:A1:47:2B:AD:89:67:0A:3F:30 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 22C104CFEFBD91C034DD65C0FDB2DFB4C67F11CC Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS24940.roa Signing time: Sat 22 Nov 2025 16:56:31 +0000 ROA not before: Sat 22 Nov 2025 16:51:31 +0000 ROA not after: Sat 21 Nov 2026 16:56:31 +0000 asID: 24940 IP address blocks: 212.60.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c1:04:cf:ef:bd:91:c0:34:dd:65:c0:fd:b2:df:b4:c6:7f:11:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 22 16:51:31 2025 GMT Not After : Nov 21 16:56:31 2026 GMT Subject: CN=07FB3B1B2F65798473FB83A1472BAD89670A3F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:ad:2b:ff:89:01:46:c1:24:87:0d:94:d1: e6:a6:6e:b2:9b:61:93:7b:00:92:fa:0e:f9:21:02: 66:00:a3:3d:9e:cd:27:e1:fa:7f:90:28:20:ba:75: eb:a5:81:5f:38:df:2e:4f:25:f6:90:ba:6d:69:88: de:88:02:76:86:41:4b:ca:f2:fd:06:e5:6c:28:48: 2b:a5:29:5f:f1:10:e9:9a:8d:9b:b2:a8:32:75:02: 6b:5f:36:ff:58:ba:c5:34:20:0a:0a:d0:bf:fe:a7: 99:e8:d5:ff:1f:b5:0b:af:63:8c:37:43:57:65:19: 71:d1:4b:6f:73:50:ea:b0:83:eb:a0:6a:37:68:9b: 47:d3:4e:54:3e:c6:49:00:39:7a:8d:bf:c9:bf:a4: e4:cd:65:c6:9a:b9:cb:31:34:d8:f5:da:2e:ca:6f: 90:9e:20:e4:2b:ec:af:b0:cb:76:2b:bf:08:ff:0b: 72:54:f8:9f:25:de:de:46:24:f6:91:6b:a4:95:80: eb:14:73:ce:47:c1:4c:c4:72:f8:45:ad:08:3d:34: e4:81:0d:d0:08:38:d3:a4:dc:92:af:ee:1c:3b:e6: 3e:4a:0a:69:14:b2:b2:95:ec:51:30:28:28:51:9b: 9a:20:2f:82:5d:53:e5:4a:54:b7:78:6f:0e:81:db: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FB:3B:1B:2F:65:79:84:73:FB:83:A1:47:2B:AD:89:67:0A:3F:30 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS24940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.60.144.0/24 Signature Algorithm: sha256WithRSAEncryption 06:33:74:f7:97:4d:80:50:f9:a9:a1:11:6a:56:ce:ea:1d:b8: a1:38:c9:b6:75:40:eb:6c:31:96:5c:3e:f4:f3:0f:0f:5b:3d: ea:db:30:64:14:ba:6a:0c:2a:d6:f8:84:b2:60:be:7a:2d:08: a3:85:66:d0:0e:f3:24:6d:73:97:6d:9f:76:1e:37:69:2d:ba: 68:de:a3:e0:2b:b6:5b:d0:21:00:f7:47:91:0b:74:90:28:f3: fc:c4:cd:01:0b:68:67:cb:9e:08:ea:a0:94:be:1d:2a:3c:75: 5e:04:a2:ec:86:8a:9d:bb:5f:bc:87:ef:6b:96:62:77:d9:4a: da:e4:5c:34:56:06:ab:e7:12:11:92:de:78:02:94:82:09:78: 62:44:ae:63:79:40:6a:da:ae:bc:15:9c:3a:c1:02:1a:a2:a2: 8a:78:47:6e:a2:b8:b7:72:80:e0:da:b8:37:19:ad:a3:22:6d: 89:f8:24:be:ed:dd:90:f6:75:1a:a6:5f:2f:7c:d2:6b:73:ad: ce:93:44:01:d9:3e:90:6f:aa:42:68:79:9d:db:ae:ff:28:f1: f6:7d:52:fb:bd:70:5b:0c:c4:3d:94:f8:26:94:a4:3e:15:33: 62:34:d1:6f:45:e7:e9:22:2f:ac:29:2d:48:05:3b:c5:46:36: ea:6c:ca:62 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUIsEEz++9kcA03WXA/bLftMZ/EcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMjIxNjUxMzFaFw0yNjExMjExNjU2MzFaMDMxMTAvBgNV BAMTKDA3RkIzQjFCMkY2NTc5ODQ3M0ZCODNBMTQ3MkJBRDg5NjcwQTNGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+60r/4kBRsEkhw2U0eambrKb YZN7AJL6DvkhAmYAoz2ezSfh+n+QKCC6deulgV843y5PJfaQum1piN6IAnaGQUvK 8v0G5WwoSCulKV/xEOmajZuyqDJ1AmtfNv9YusU0IAoK0L/+p5no1f8ftQuvY4w3 Q1dlGXHRS29zUOqwg+ugajdom0fTTlQ+xkkAOXqNv8m/pOTNZcaaucsxNNj12i7K b5CeIOQr7K+wy3Yrvwj/C3JU+J8l3t5GJPaRa6SVgOsUc85HwUzEcvhFrQg9NOSB DdAIONOk3JKv7hw75j5KCmkUsrKV7FEwKChRm5ogL4JdU+VKVLd4bw6B2yP5AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUB/s7Gy9leYRz+4OhRyutiWcKPzAwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjQ5NDAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUPJAw DQYJKoZIhvcNAQELBQADggEBAAYzdPeXTYBQ+amhEWpWzuoduKE4ybZ1QOtsMZZc PvTzDw9bPerbMGQUumoMKtb4hLJgvnotCKOFZtAO8yRtc5dtn3YeN2ktumjeo+Ar tlvQIQD3R5ELdJAo8/zEzQELaGfLngjqoJS+HSo8dV4EouyGip27X7yH72uWYnfZ StrkXDRWBqvnEhGS3ngClIIJeGJErmN5QGrarrwVnDrBAhqioop4R26iuLdygODa uDcZraMibYn4JL7t3ZD2dRqmXy980mtzrc6TRAHZPpBvqkJoeZ3brv8o8fZ9Uvu9 cFsMxD2U+CaUpD4VM2I00W9F5+kiL6wpLUgFO8VGNupsymI= -----END CERTIFICATE-----Generated at Sat Dec 6 03:35:09 2025 by rpki-client