This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa File: AS137517.roa (raw, json) Hash identifier: NYOZW9fSeFzc6uF3Arrr/0XZ6coG6gq/nLl0k2rs5eU= Subject key identifier: 54:0A:5D:F2:60:AF:3E:1A:33:30:6E:F2:2C:FE:EF:87:2D:76:8A:3B Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 48BAE5D593980BDF1F6A676E97D8D36E94A7E7B7 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa Signing time: Fri 14 Nov 2025 11:07:54 +0000 ROA not before: Fri 14 Nov 2025 11:02:54 +0000 ROA not after: Fri 13 Nov 2026 11:07:54 +0000 asID: 137517 IP address blocks: 141.11.124.0/24 maxlen: 24 194.60.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ba:e5:d5:93:98:0b:df:1f:6a:67:6e:97:d8:d3:6e:94:a7:e7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 14 11:02:54 2025 GMT Not After : Nov 13 11:07:54 2026 GMT Subject: CN=540A5DF260AF3E1A33306EF22CFEEF872D768A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:73:96:64:c0:8d:70:9c:5e:c1:9c:9f:d2: 6c:4c:e6:32:5c:dd:03:9b:6a:c3:81:ed:00:2a:6c: b5:0a:96:56:7b:85:cf:5d:a0:22:7f:03:9f:57:3d: be:3f:e6:a5:13:83:08:84:9b:d9:50:7e:91:c2:cc: 30:be:cf:bd:e1:45:34:4e:36:a8:a4:da:8c:c0:62: 1e:40:af:d4:89:3b:e6:a7:2f:5f:c0:fb:89:f5:45: d6:93:96:34:fc:08:41:f6:37:f9:f9:2a:5b:4b:ca: 66:d1:02:a0:21:9f:01:55:12:cc:07:d1:1e:6d:b1: d6:b3:d5:91:f8:66:5e:f0:9e:26:e5:b5:66:36:e7: fb:b7:11:9d:8f:aa:da:f0:26:76:60:4e:b2:e8:28: 2c:29:58:5f:d9:24:60:ca:4f:e2:71:da:1f:e0:70: 52:f5:f2:a5:3f:e2:9b:ef:cf:4f:4d:05:4b:c8:65: 76:e7:00:03:d9:6f:09:a2:26:49:95:87:b6:f1:1c: 5c:34:85:07:4b:cb:33:77:a8:7e:9b:df:c0:f9:b7: 2b:4f:9b:36:e5:88:9f:38:15:95:b1:18:4a:c4:96: 08:16:c4:2c:04:fe:59:01:8c:c3:f8:50:8e:1f:e5: 5e:b5:0f:9d:1b:42:73:93:bd:c4:f1:aa:e4:32:8c: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0A:5D:F2:60:AF:3E:1A:33:30:6E:F2:2C:FE:EF:87:2D:76:8A:3B X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.124.0/24 194.60.93.0/24 Signature Algorithm: sha256WithRSAEncryption 51:14:bc:6f:37:88:a3:4b:fe:b4:54:8f:99:b7:61:0d:16:b8: fb:1d:b3:b0:0c:95:f9:94:4b:1d:e3:62:75:7c:f9:da:94:f0: 4d:c2:39:95:09:7d:df:07:7a:9e:cf:a1:31:1e:52:3d:6c:b9: f3:2b:1e:90:7b:b8:dd:2e:0a:66:37:89:59:e2:14:44:b3:71: ee:94:ef:be:58:06:cd:ec:5e:d7:1c:77:5f:59:b6:d6:81:90: 4e:d6:02:18:2c:54:af:10:2d:66:e6:83:98:b9:df:7f:42:97: f9:b2:f9:a6:65:b6:de:69:61:2c:4b:3b:9a:1a:2f:7a:9b:0d: f6:df:d1:40:6c:c0:d9:55:53:54:08:84:6d:a6:8e:9e:60:86: 75:f8:28:5e:11:ab:68:f1:85:e6:fe:1e:43:81:96:e9:58:26: 3e:76:a8:4a:74:6f:f0:3f:b7:4c:5d:ca:97:1a:80:4f:8b:20: 8e:21:62:6a:0f:70:c6:15:8a:63:f0:1c:67:c1:0a:7c:78:3e: 02:ca:72:90:d1:39:33:85:43:ee:7b:ed:8a:14:fe:e8:ed:00: e2:54:52:a3:47:97:be:47:a1:5d:9a:ac:aa:4f:b6:f8:63:0c: 88:d6:6b:0a:3c:19:06:90:1b:44:eb:a7:d6:8d:77:f1:99:d8: 95:cb:fc:d8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUSLrl1ZOYC98famdul9jTbpSn57cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMTQxMTAyNTRaFw0yNjExMTMxMTA3NTRaMDMxMTAvBgNV BAMTKDU0MEE1REYyNjBBRjNFMUEzMzMwNkVGMjJDRkVFRjg3MkQ3NjhBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1U3OWZMCNcJxewZyf0mxM5jJc 3QObasOB7QAqbLUKllZ7hc9doCJ/A59XPb4/5qUTgwiEm9lQfpHCzDC+z73hRTRO Nqik2ozAYh5Ar9SJO+anL1/A+4n1RdaTljT8CEH2N/n5KltLymbRAqAhnwFVEswH 0R5tsdaz1ZH4Zl7wnibltWY25/u3EZ2PqtrwJnZgTrLoKCwpWF/ZJGDKT+Jx2h/g cFL18qU/4pvvz09NBUvIZXbnAAPZbwmiJkmVh7bxHFw0hQdLyzN3qH6b38D5tytP mzbliJ84FZWxGErElggWxCwE/lkBjMP4UI4f5V61D50bQnOTvcTxquQyjBzPAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUVApd8mCvPhozMG7yLP7vhy12ijswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM3NTE3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQt8 AwQAwjxdMA0GCSqGSIb3DQEBCwUAA4IBAQBRFLxvN4ijS/60VI+Zt2ENFrj7HbOw DJX5lEsd42J1fPnalPBNwjmVCX3fB3qez6ExHlI9bLnzKx6Qe7jdLgpmN4lZ4hRE s3HulO++WAbN7F7XHHdfWbbWgZBO1gIYLFSvEC1m5oOYud9/Qpf5svmmZbbeaWEs SzuaGi96mw3239FAbMDZVVNUCIRtpo6eYIZ1+CheEato8YXm/h5DgZbpWCY+dqhK dG/wP7dMXcqXGoBPiyCOIWJqD3DGFYpj8BxnwQp8eD4CynKQ0TkzhUPue+2KFP7o 7QDiVFKjR5e+R6FdmqyqT7b4YwyI1msKPBkGkBtE66fWjXfxmdiVy/zY -----END CERTIFICATE-----Generated at Fri Dec 5 15:40:23 2025 by rpki-client