This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20326.roa File: AS20326.roa (raw, json) Hash identifier: BuBFaVJlPxEzOoDRm2BNl8hkkd2f3aSLNm7KO//rV7c= Subject key identifier: 33:C4:0F:BC:0E:8D:98:2C:2F:00:DB:72:96:1D:5F:78:0D:D8:59:6F Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 60468C0E6BB90054D127CB0E779574EB93C1A738 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20326.roa Signing time: Thu 15 Jan 2026 09:01:27 +0000 ROA not before: Thu 15 Jan 2026 08:56:27 +0000 ROA not after: Thu 14 Jan 2027 09:01:27 +0000 asID: 20326 IP address blocks: 141.11.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:46:8c:0e:6b:b9:00:54:d1:27:cb:0e:77:95:74:eb:93:c1:a7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 15 08:56:27 2026 GMT Not After : Jan 14 09:01:27 2027 GMT Subject: CN=33C40FBC0E8D982C2F00DB72961D5F780DD8596F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:2a:f7:d8:6d:62:ac:6d:60:15:61:b9:16: dd:aa:34:9b:aa:26:26:63:3e:64:c7:00:be:0e:62: 31:8d:7d:d2:e7:fd:b7:1c:7f:2c:9f:7c:e2:bb:e5: 7e:ec:9b:b6:76:96:0d:60:f4:38:9e:cf:c2:e4:98: 4e:46:e3:b6:50:a2:5d:7f:ce:80:5f:d7:d4:a1:dc: 6a:d2:4d:88:28:a0:2d:ec:7c:13:86:12:76:b4:bb: 86:5f:75:c2:d2:52:0a:78:56:60:b5:b7:ba:58:3f: ef:ef:fb:87:57:56:3f:d7:09:8d:16:c6:e0:5d:be: 7f:84:2b:ec:e3:d5:41:9c:43:09:cf:b8:43:e3:a2: 4b:64:11:7b:03:23:ea:46:b3:3a:64:80:e9:69:2d: 72:5d:84:09:ea:7a:67:be:26:4f:51:27:94:30:f1: 27:2d:a1:da:3f:51:3b:32:5e:bc:42:a3:e8:ca:35: 96:78:1a:ce:c2:a9:86:db:11:cb:c7:9d:ff:a7:5e: fd:a0:df:39:81:e6:4a:09:76:c2:ae:cd:bc:e2:0d: fe:bb:1f:ec:29:b4:89:02:48:0f:09:03:47:21:cd: da:63:e9:c3:39:ec:57:7d:41:86:8f:49:91:52:03: f3:74:90:3e:fb:d7:78:37:36:7b:a7:ed:95:6d:0a: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C4:0F:BC:0E:8D:98:2C:2F:00:DB:72:96:1D:5F:78:0D:D8:59:6F X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20326.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:23:ad:8c:9e:80:6a:15:6f:18:64:d5:2e:ed:f2:82:f0:60: 41:5e:60:0f:8d:84:4c:63:e4:fd:a2:a8:d0:01:2b:fb:6b:c4: 95:ad:99:d1:9f:e8:09:47:27:d9:55:00:c9:4d:a3:3a:1f:26: c6:07:4f:d3:2d:ad:ec:53:56:b3:4b:67:62:16:3a:fc:36:96: 2c:0d:2a:a7:c0:9b:af:ca:c4:1c:2e:35:4e:17:6f:87:2f:87: ef:8a:fe:91:c5:6b:08:f2:de:d1:35:c5:1e:25:b0:fa:03:45: af:c3:96:d5:19:da:bc:18:2d:be:3f:1c:53:4a:6c:c3:3f:c4: 7e:a2:4d:1a:1a:fd:79:81:01:43:1b:37:2b:a5:6d:cb:d8:39: bb:6f:84:57:aa:1e:a9:fe:e4:3c:b1:d7:6f:02:ec:ab:5d:bf: d9:70:58:e2:5c:0f:24:92:41:be:cd:4e:9d:31:f1:bc:ae:85: bf:2d:f0:03:6c:be:b8:5a:65:3f:b2:f9:c7:c4:2e:a3:07:d2: 90:23:3a:34:54:9e:6e:60:d1:cc:03:20:17:a1:8b:a5:c0:35: b1:c7:71:48:5b:fe:73:27:a2:78:f5:2e:11:2f:35:ad:b8:a3: 09:f4:21:2e:aa:c8:31:fb:02:67:25:65:0b:3a:49:2c:e5:99: 7c:60:53:28 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUYEaMDmu5AFTRJ8sOd5V065PBpzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTUwODU2MjdaFw0yNzAxMTQwOTAxMjdaMDMxMTAvBgNV BAMTKDMzQzQwRkJDMEU4RDk4MkMyRjAwREI3Mjk2MUQ1Rjc4MEREODU5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lSr32G1irG1gFWG5Ft2qNJuq JiZjPmTHAL4OYjGNfdLn/bccfyyffOK75X7sm7Z2lg1g9Diez8LkmE5G47ZQol1/ zoBf19Sh3GrSTYgooC3sfBOGEna0u4ZfdcLSUgp4VmC1t7pYP+/v+4dXVj/XCY0W xuBdvn+EK+zj1UGcQwnPuEPjoktkEXsDI+pGszpkgOlpLXJdhAnqeme+Jk9RJ5Qw 8Sctodo/UTsyXrxCo+jKNZZ4Gs7CqYbbEcvHnf+nXv2g3zmB5koJdsKuzbziDf67 H+wptIkCSA8JA0chzdpj6cM57Fd9QYaPSZFSA/N0kD7713g3Nnun7ZVtClVdAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUM8QPvA6NmCwvANtylh1feA3YWW8wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAzMjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC3cw DQYJKoZIhvcNAQELBQADggEBABwjrYyegGoVbxhk1S7t8oLwYEFeYA+NhExj5P2i qNABK/trxJWtmdGf6AlHJ9lVAMlNozofJsYHT9MtrexTVrNLZ2IWOvw2liwNKqfA m6/KxBwuNU4Xb4cvh++K/pHFawjy3tE1xR4lsPoDRa/DltUZ2rwYLb4/HFNKbMM/ xH6iTRoa/XmBAUMbNyulbcvYObtvhFeqHqn+5Dyx128C7Ktdv9lwWOJcDySSQb7N Tp0x8byuhb8t8ANsvrhaZT+y+cfELqMH0pAjOjRUnm5g0cwDIBehi6XANbHHcUhb /nMnonj1LhEvNa24own0IS6qyDH7AmclZQs6SSzlmXxgUyg= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client