This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa File: AS141968.roa (raw, json) Hash identifier: /fek53ReQeghlx8uw5HsHfuxBpcHpqe6tLTGfSygr6Y= Subject key identifier: 1A:3C:21:A3:F3:19:5B:C4:A3:6F:8F:32:60:7A:C2:3C:8C:3A:E5:82 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 4E43361195E2047634B07A714F66592BC39CD99F Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa Signing time: Sun 21 Dec 2025 13:55:32 +0000 ROA not before: Sun 21 Dec 2025 13:50:32 +0000 ROA not after: Sun 20 Dec 2026 13:55:32 +0000 asID: 141968 IP address blocks: 141.11.25.0/24 maxlen: 24 141.11.160.0/24 maxlen: 24 141.11.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:43:36:11:95:e2:04:76:34:b0:7a:71:4f:66:59:2b:c3:9c:d9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 21 13:50:32 2025 GMT Not After : Dec 20 13:55:32 2026 GMT Subject: CN=1A3C21A3F3195BC4A36F8F32607AC23C8C3AE582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:66:11:bd:ae:e1:28:3a:df:65:40:21:3b: cb:d4:1f:da:e1:98:f0:0a:ba:1c:61:fa:e3:58:da: 3c:73:7c:44:4c:c6:c8:07:6c:ec:67:10:a4:cf:6b: ff:fc:d7:0c:a4:42:f1:db:51:79:68:e3:88:ab:b6: 09:f6:c7:e5:30:0d:b8:4b:40:69:cf:a0:c6:9a:63: 57:83:33:f4:5d:aa:75:43:b4:44:72:f9:fd:33:e7: 98:68:85:5e:4d:b3:01:a3:b9:0c:4f:6b:e4:fc:df: 8a:3d:83:e7:67:76:9d:c9:fa:bf:6a:33:96:0c:40: 73:22:4c:7c:ea:c1:1e:38:6d:30:11:58:80:b8:2f: 37:ce:35:89:21:0a:5a:a5:72:4c:2f:c8:22:12:da: 7c:d9:89:7c:df:fe:65:b2:08:e5:8b:90:93:f5:a0: e8:64:61:1d:0d:41:61:9e:0f:1c:01:55:1f:e2:22: 0b:37:41:d4:da:ec:19:94:61:3b:4b:d5:3c:07:53: aa:ff:c5:f8:dd:e3:b3:dd:36:7a:2b:a4:5c:51:f9: df:1e:81:e6:50:3f:da:31:37:e8:23:e4:d5:e9:e1: 4b:ef:2b:12:21:13:81:b4:6f:30:fb:fd:5b:9c:6a: 2e:9f:ad:e5:d9:4d:de:95:43:66:a2:45:88:b2:69: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:21:A3:F3:19:5B:C4:A3:6F:8F:32:60:7A:C2:3C:8C:3A:E5:82 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.25.0/24 141.11.160.0/24 141.11.190.0/24 Signature Algorithm: sha256WithRSAEncryption 93:7c:3c:2b:95:41:1b:4c:c8:fb:28:d3:1f:85:86:d5:83:6b: f9:08:1a:10:22:67:fb:d2:ef:7f:3e:a9:65:db:65:82:58:74: 0a:44:1e:94:14:08:bf:90:3f:3c:70:56:b4:1a:96:96:4c:43: 5f:9a:32:1d:9d:d3:5d:62:5d:a2:46:ab:02:0a:45:05:52:af: ef:0f:61:c1:95:21:fa:fc:07:e4:1d:92:e7:5a:94:d2:c8:3d: 2f:7c:a0:95:65:24:a6:f1:2c:73:2f:ea:cf:d4:d9:d8:06:b9: 24:d5:c7:e8:42:2b:77:2f:aa:48:cd:bd:1b:f5:bd:9c:1e:27: ad:46:b8:79:b0:73:0c:30:cf:92:ef:5e:82:09:30:b7:01:4f: 5e:59:d5:99:66:19:3f:89:68:a5:85:f6:0b:d4:8c:32:b1:60: 22:81:c7:8d:bf:67:1f:95:75:ae:79:fb:87:f1:fc:5d:cf:6e: 8d:3f:1f:87:07:48:82:dd:ff:23:23:ea:de:9f:0b:16:41:66: bf:d2:d2:4d:a4:0b:03:e7:38:34:d1:27:03:05:5a:93:bd:6f: 1b:68:a5:f6:d4:8b:1e:11:55:9a:19:b0:b8:e7:b4:c1:51:93: ad:bc:09:7a:a2:f5:1a:9b:1d:5e:86:e1:ba:dd:38:a9:79:e5: 82:87:1f:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUTkM2EZXiBHY0sHpxT2ZZK8Oc2Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMjExMzUwMzJaFw0yNjEyMjAxMzU1MzJaMDMxMTAvBgNV BAMTKDFBM0MyMUEzRjMxOTVCQzRBMzZGOEYzMjYwN0FDMjNDOEMzQUU1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEWYRva7hKDrfZUAhO8vUH9rh mPAKuhxh+uNY2jxzfERMxsgHbOxnEKTPa//81wykQvHbUXlo44irtgn2x+UwDbhL QGnPoMaaY1eDM/RdqnVDtERy+f0z55hohV5NswGjuQxPa+T834o9g+dndp3J+r9q M5YMQHMiTHzqwR44bTARWIC4LzfONYkhClqlckwvyCIS2nzZiXzf/mWyCOWLkJP1 oOhkYR0NQWGeDxwBVR/iIgs3QdTa7BmUYTtL1TwHU6r/xfjd47PdNnorpFxR+d8e geZQP9oxN+gj5NXp4UvvKxIhE4G0bzD7/Vucai6freXZTd6VQ2aiRYiyaf/hAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUGjwho/MZW8Sjb48yYHrCPIw65YIwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTQxOTY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjQsZ AwQAjQugAwQAjQu+MA0GCSqGSIb3DQEBCwUAA4IBAQCTfDwrlUEbTMj7KNMfhYbV g2v5CBoQImf70u9/Pqll22WCWHQKRB6UFAi/kD88cFa0GpaWTENfmjIdndNdYl2i RqsCCkUFUq/vD2HBlSH6/AfkHZLnWpTSyD0vfKCVZSSm8SxzL+rP1NnYBrkk1cfo Qit3L6pIzb0b9b2cHietRrh5sHMMMM+S716CCTC3AU9eWdWZZhk/iWilhfYL1Iwy sWAigceNv2cflXWuefuH8fxdz26NPx+HB0iC3f8jI+renwsWQWa/0tJNpAsD5zg0 0ScDBVqTvW8baKX21IseEVWaGbC457TBUZOtvAl6ovUamx1ehuG63TipeeWChx+d -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:41 2026 by rpki-client