This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa File: AS137517.roa (raw, json) Hash identifier: by3GedHyoQmL+Y5WcCDqtvDYr0yvEm0OcbiQK5g89MI= Subject key identifier: 2A:96:D6:A9:EB:83:A2:FD:FF:D1:C6:B0:AF:42:FB:44:B4:D8:C7:7D Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 49D2F69F4C997EAF45A333B8E92B4F0542DE8690 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa Signing time: Mon 12 Jan 2026 03:39:22 +0000 ROA not before: Mon 12 Jan 2026 03:34:22 +0000 ROA not after: Mon 11 Jan 2027 03:39:22 +0000 asID: 137517 IP address blocks: 141.11.57.0/24 maxlen: 24 141.11.124.0/24 maxlen: 24 194.60.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d2:f6:9f:4c:99:7e:af:45:a3:33:b8:e9:2b:4f:05:42:de:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 12 03:34:22 2026 GMT Not After : Jan 11 03:39:22 2027 GMT Subject: CN=2A96D6A9EB83A2FDFFD1C6B0AF42FB44B4D8C77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:bb:40:5b:aa:15:ce:57:bc:77:30:52:07: 26:c4:72:0c:7c:08:c3:45:1c:bd:7c:5f:47:45:25: 99:ba:0a:e3:5c:0f:36:1e:50:d5:22:fa:75:ac:f7: 8c:11:85:64:49:fc:e5:c3:34:26:4e:3c:ba:e1:06: 47:0b:4f:f7:e2:87:32:93:24:6f:cb:8f:7f:78:1b: 36:c3:a2:56:13:68:2e:45:fa:c8:0c:5b:60:a5:2e: fa:21:fe:08:60:5d:8d:8a:bf:0f:06:13:95:ab:e4: 85:4c:e4:b5:4b:81:13:b5:91:f3:91:96:c4:10:32: 24:a8:5f:11:a9:96:3b:42:05:21:9d:96:0a:b0:01: 09:31:f2:f1:9d:08:65:38:f2:e8:dd:0e:05:c6:3d: bb:dd:85:ab:7a:93:29:ba:4b:8f:de:13:a2:cd:02: 62:62:1c:35:83:b4:4a:b4:4c:ef:5e:96:63:98:7e: 47:2b:f5:e9:f2:fb:d3:bf:bd:23:04:28:25:68:da: 15:ba:87:4f:9e:c8:cd:d3:5d:c0:30:f7:96:b4:c9: 48:5c:d6:ab:94:05:4b:2c:b5:73:78:c3:65:f1:b2: 9a:eb:41:18:75:8f:ac:ea:67:18:3c:16:37:e6:e4: 83:25:2f:64:8d:bc:35:c3:9c:b6:9f:e0:9c:dd:c4: 8d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:D6:A9:EB:83:A2:FD:FF:D1:C6:B0:AF:42:FB:44:B4:D8:C7:7D X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.57.0/24 141.11.124.0/24 194.60.93.0/24 Signature Algorithm: sha256WithRSAEncryption 05:9e:76:d3:a1:60:09:6b:aa:96:5c:ad:c0:9a:6e:0e:97:59: c0:af:d6:43:43:ae:f7:88:ad:76:aa:c7:2c:d8:3b:f8:55:bd: 9e:ab:d0:87:3b:b1:a1:20:38:a7:8e:46:f0:01:a8:56:9e:14: 1d:8c:ef:47:e1:1f:fd:e6:14:60:b9:62:b6:e0:49:da:9f:3b: 50:d1:11:57:9d:1d:af:0e:06:f7:fd:2a:76:a5:80:34:f5:3c: cb:3b:e0:16:56:c7:14:76:84:e4:2b:c4:37:a6:0b:f4:ec:c8: d0:43:c9:7f:0d:5e:6e:6a:f8:e2:5a:b2:ed:d9:41:cf:15:ca: 2b:41:31:f5:7f:51:92:a1:13:cd:9f:6e:56:9d:f8:bc:8e:f7: 07:86:4c:4a:1f:79:ef:ee:e2:2a:f8:6e:51:7a:43:41:57:19: 2d:6c:b2:6d:1f:a6:03:fd:9f:4a:44:b2:8f:a0:03:b9:b6:9b: 4c:f9:0a:e4:c4:40:cf:13:f2:f5:97:02:fc:09:00:ed:5b:04: 0f:2d:17:bd:83:b7:91:e3:ca:2e:2f:b9:ab:55:43:95:93:19: 2b:d6:45:63:7a:4a:81:05:ce:e7:0c:55:71:dd:5a:d6:7a:4b: 32:06:b0:47:72:9d:0c:b3:42:70:1b:7f:3c:1c:88:37:6c:1b: 78:c6:67:db -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUSdL2n0yZfq9FozO46StPBULehpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTIwMzM0MjJaFw0yNzAxMTEwMzM5MjJaMDMxMTAvBgNV BAMTKDJBOTZENkE5RUI4M0EyRkRGRkQxQzZCMEFGNDJGQjQ0QjREOEM3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4T7tAW6oVzle8dzBSBybEcgx8 CMNFHL18X0dFJZm6CuNcDzYeUNUi+nWs94wRhWRJ/OXDNCZOPLrhBkcLT/fihzKT JG/Lj394GzbDolYTaC5F+sgMW2ClLvoh/ghgXY2Kvw8GE5Wr5IVM5LVLgRO1kfOR lsQQMiSoXxGpljtCBSGdlgqwAQkx8vGdCGU48ujdDgXGPbvdhat6kym6S4/eE6LN AmJiHDWDtEq0TO9elmOYfkcr9eny+9O/vSMEKCVo2hW6h0+eyM3TXcAw95a0yUhc 1quUBUsstXN4w2XxsprrQRh1j6zqZxg8Fjfm5IMlL2SNvDXDnLaf4JzdxI3RAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUKpbWqeuDov3/0cawr0L7RLTYx30wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM3NTE3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjQs5 AwQAjQt8AwQAwjxdMA0GCSqGSIb3DQEBCwUAA4IBAQAFnnbToWAJa6qWXK3Amm4O l1nAr9ZDQ673iK12qscs2Dv4Vb2eq9CHO7GhIDinjkbwAahWnhQdjO9H4R/95hRg uWK24EnanztQ0RFXnR2vDgb3/Sp2pYA09TzLO+AWVscUdoTkK8Q3pgv07MjQQ8l/ DV5uavjiWrLt2UHPFcorQTH1f1GSoRPNn25Wnfi8jvcHhkxKH3nv7uIq+G5RekNB VxktbLJtH6YD/Z9KRLKPoAO5tptM+QrkxEDPE/L1lwL8CQDtWwQPLRe9g7eR48ou L7mrVUOVkxkr1kVjekqBBc7nDFVx3VrWeksyBrBHcp0Ms0JwG388HIg3bBt4xmfb -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:40 2026 by rpki-client