This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141718.roa File: AS141718.roa (raw, json) Hash identifier: Qmr8zcBYgGP6vc6Z2nvnl4g3fXveySkHMwfQrVmGfkM= Subject key identifier: 35:A6:3E:90:91:E8:F0:88:26:16:BB:71:63:89:B9:C2:50:4D:71:A0 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 1470105B9DFFF032A3B63CB494CC38B8D67B521D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141718.roa Signing time: Thu 20 Nov 2025 21:12:31 +0000 ROA not before: Thu 20 Nov 2025 21:07:31 +0000 ROA not after: Thu 19 Nov 2026 21:12:31 +0000 asID: 141718 IP address blocks: 141.11.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:70:10:5b:9d:ff:f0:32:a3:b6:3c:b4:94:cc:38:b8:d6:7b:52:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 20 21:07:31 2025 GMT Not After : Nov 19 21:12:31 2026 GMT Subject: CN=35A63E9091E8F0882616BB716389B9C2504D71A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:7b:0e:7a:c7:d3:ea:56:b9:62:bf:ad:32: 7d:75:81:b0:ae:0f:43:a5:65:a0:7b:a3:26:cd:f5: b6:50:bc:0e:82:d4:96:0d:9c:ea:8b:b7:39:b4:f0: a9:3d:3a:ab:9a:c4:4c:30:22:0c:b7:65:83:c3:c0: a0:03:c6:93:dc:d7:03:16:60:5b:96:93:81:12:9e: ca:24:97:93:70:9a:57:9d:2c:78:51:25:9e:fe:cb: b2:38:2e:89:70:f8:4a:a8:fb:0a:14:3a:10:da:bf: 6d:d0:af:17:c7:e3:88:9f:8c:dd:9c:5b:f9:4d:63: 41:6d:11:15:f2:67:0d:bb:fd:06:7c:2f:21:f8:1a: b6:9d:63:74:86:d9:04:2b:30:26:24:f6:08:93:c3: ce:b1:d8:e2:3f:64:d8:82:e4:74:05:61:c0:6a:c0: 99:8e:8e:9c:e3:da:ac:b9:5d:8a:a9:2e:e6:ad:51: ff:7f:53:e9:e8:83:af:3f:15:4b:d2:60:6a:86:5c: 59:88:55:59:8c:ca:4b:d1:5b:97:ff:3c:77:d9:9a: ba:e8:ad:ad:2a:c1:dc:31:a3:a3:c3:a6:af:46:c6: 1e:43:f3:5b:46:54:70:01:d2:7c:c1:01:12:2f:18: ab:29:82:5f:3c:42:1c:f0:75:a6:f7:ea:23:33:13: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A6:3E:90:91:E8:F0:88:26:16:BB:71:63:89:B9:C2:50:4D:71:A0 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141718.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.63.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ca:78:9e:fb:c4:1b:7a:27:16:15:c4:52:c9:d2:4e:9d:48: f9:dd:4e:1d:62:27:ee:55:27:5f:3f:c0:bf:0b:2a:01:fe:20: f7:fc:0c:5e:12:4e:fa:d3:1e:79:66:70:f3:e0:86:5a:a0:bf: 67:18:35:99:57:f6:4a:68:ca:05:1e:6b:6b:28:f8:e7:d5:ba: de:71:8f:22:bf:8a:c2:46:9d:3e:fe:e3:d0:47:72:3b:09:71: cf:aa:f0:68:e0:5f:43:a9:c7:be:55:7d:98:3d:3c:4f:4e:89: ab:2a:b6:35:98:c8:f0:99:1d:81:08:7f:da:40:5b:f9:9f:a3: a8:1e:49:cb:85:09:0d:07:e8:89:6a:0b:b8:73:4b:bd:d1:85: 88:58:15:60:e8:f1:72:01:30:f4:03:f6:9d:1f:5c:2a:6a:4f: 48:b7:2d:ef:35:39:b9:b5:10:2c:78:cc:6e:c0:3c:d5:76:2b: 83:54:31:a2:d0:fe:bb:53:ce:7e:cb:cf:f9:26:67:c0:d2:7b: 61:67:e1:bb:23:fc:9c:0e:35:0d:a7:18:05:df:a2:a8:37:18: 91:2e:5a:1f:0e:8c:10:9b:8a:4d:bc:78:8b:da:15:a2:5c:fa: 0a:d4:70:72:29:07:37:c6:79:85:9c:84:17:0f:7e:1d:0e:07: e5:98:58:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUFHAQW53/8DKjtjy0lMw4uNZ7Uh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMjAyMTA3MzFaFw0yNjExMTkyMTEyMzFaMDMxMTAvBgNV BAMTKDM1QTYzRTkwOTFFOEYwODgyNjE2QkI3MTYzODlCOUMyNTA0RDcxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu73sOesfT6la5Yr+tMn11gbCu D0OlZaB7oybN9bZQvA6C1JYNnOqLtzm08Kk9OquaxEwwIgy3ZYPDwKADxpPc1wMW YFuWk4ESnsokl5NwmledLHhRJZ7+y7I4Lolw+Eqo+woUOhDav23QrxfH44ifjN2c W/lNY0FtERXyZw27/QZ8LyH4GradY3SG2QQrMCYk9giTw86x2OI/ZNiC5HQFYcBq wJmOjpzj2qy5XYqpLuatUf9/U+nog68/FUvSYGqGXFmIVVmMykvRW5f/PHfZmrro ra0qwdwxo6PDpq9Gxh5D81tGVHAB0nzBARIvGKspgl88Qhzwdab36iMzE+6NAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUNaY+kJHo8IgmFrtxY4m5wlBNcaAwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTQxNzE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQs/ MA0GCSqGSIb3DQEBCwUAA4IBAQC0ynie+8QbeicWFcRSydJOnUj53U4dYifuVSdf P8C/CyoB/iD3/AxeEk760x55ZnDz4IZaoL9nGDWZV/ZKaMoFHmtrKPjn1brecY8i v4rCRp0+/uPQR3I7CXHPqvBo4F9Dqce+VX2YPTxPTomrKrY1mMjwmR2BCH/aQFv5 n6OoHknLhQkNB+iJagu4c0u90YWIWBVg6PFyATD0A/adH1wqak9Ity3vNTm5tRAs eMxuwDzVdiuDVDGi0P67U85+y8/5JmfA0nthZ+G7I/ycDjUNpxgF36KoNxiRLlof DowQm4pNvHiL2hWiXPoK1HByKQc3xnmFnIQXD34dDgflmFit -----END CERTIFICATE-----Generated at Sat Dec 6 00:06:43 2025 by rpki-client