This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203923.roa File: AS203923.roa (raw, json) Hash identifier: 8Pz3p7ogvS3bGxPrQUiMRhV7XcCHbrDUIvvvkCfT2Xk= Subject key identifier: DF:94:B4:6F:9B:3A:EA:29:81:2E:D8:BD:F9:8F:75:59:10:83:83:68 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 509118CAB9A27A8BC6CE6CDD37EA5C15A938295C Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203923.roa Signing time: Wed 31 Dec 2025 05:38:41 +0000 ROA not before: Wed 31 Dec 2025 05:33:41 +0000 ROA not after: Wed 30 Dec 2026 05:38:41 +0000 asID: 203923 IP address blocks: 141.11.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:91:18:ca:b9:a2:7a:8b:c6:ce:6c:dd:37:ea:5c:15:a9:38:29:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 31 05:33:41 2025 GMT Not After : Dec 30 05:38:41 2026 GMT Subject: CN=DF94B46F9B3AEA29812ED8BDF98F755910838368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:00:30:28:44:f8:3b:0d:a7:85:17:24:77: f0:6c:f7:22:46:f3:df:53:97:b5:42:5e:73:e8:98: 05:f4:e2:b5:1f:30:b0:4c:c8:19:c4:f1:2f:b5:0d: c5:c5:9a:ca:3e:27:3b:01:e0:1b:59:3b:52:b5:34: a5:4f:7e:34:29:ef:0e:06:64:54:30:5c:05:19:5e: 15:d5:7b:02:91:9b:0b:d2:68:07:f8:a5:8e:00:63: 5d:4c:8f:91:96:38:22:4a:3e:ac:c0:b2:a0:a2:a6: 71:58:46:44:25:d5:b1:35:6d:99:28:d6:cb:1a:64: 19:fd:56:4b:89:56:5f:5b:e6:e4:11:84:ca:0c:d1: 50:5d:5a:5e:55:b4:7d:b3:fa:4b:ef:38:ed:ec:0c: 81:66:73:b3:c2:5f:dc:35:00:b5:79:9f:ab:3e:08: 1d:85:9a:da:c3:22:0f:00:42:36:f3:57:82:92:1d: e0:5e:79:b2:fe:20:e0:ad:07:4d:8f:e8:c3:83:04: 4b:54:08:39:5f:c2:e4:ba:0c:2f:6e:48:2d:5e:11: 99:6d:99:26:94:a3:c3:34:c7:b5:80:d8:bf:f8:f8: c1:e8:c4:52:9e:c1:56:bf:cb:0b:f7:f9:e4:a8:31: 5a:78:a6:36:21:2e:e0:04:f0:f1:58:76:ff:df:35: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:94:B4:6F:9B:3A:EA:29:81:2E:D8:BD:F9:8F:75:59:10:83:83:68 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203923.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.238.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:5c:55:1f:81:d5:01:7b:54:8b:b5:cb:3e:6c:f5:33:3c:a6: 7f:d5:8b:ad:f5:7f:9d:98:7b:2e:28:3f:d6:af:30:cb:74:8d: b4:0b:5a:35:bf:54:2e:e2:55:5c:19:92:c6:b6:b3:84:d6:92: 15:02:58:68:26:0c:75:f0:4e:b6:73:6c:17:8a:0e:e9:df:ab: 3e:fe:77:77:ca:da:e3:5e:e4:8f:be:a5:53:bb:91:10:a7:ff: 3f:2d:47:d0:7d:9c:ce:5e:55:77:1e:ae:41:e1:6a:22:d1:f9: b6:78:44:75:b9:e4:1d:7d:fb:6e:28:9d:f8:27:3f:7a:3b:14: 84:a6:c1:96:77:40:48:96:38:c4:28:bd:70:26:c2:4a:1e:93: e8:8f:d7:10:c5:43:1c:9a:99:27:13:71:99:b2:2a:51:f1:5c: 4f:61:90:c7:4c:55:5a:eb:d3:d7:b6:85:07:20:04:b1:69:43: 40:78:24:a2:89:5d:fb:3b:cc:03:d2:c0:00:b7:cf:85:7e:0c: 71:5b:ce:ff:14:f6:3a:eb:3d:21:02:da:3e:32:58:83:e8:9f: 65:bb:e4:2a:82:0e:26:c1:13:c5:2c:23:37:fa:6f:a1:86:b7: 5b:31:99:f0:3c:7c:55:50:e5:97:0d:0c:8a:1a:35:3f:25:d6: a4:99:1b:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUUJEYyrmieovGzmzdN+pcFak4KVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMzEwNTMzNDFaFw0yNjEyMzAwNTM4NDFaMDMxMTAvBgNV BAMTKERGOTRCNDZGOUIzQUVBMjk4MTJFRDhCREY5OEY3NTU5MTA4MzgzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8AAwKET4Ow2nhRckd/Bs9yJG 899Tl7VCXnPomAX04rUfMLBMyBnE8S+1DcXFmso+JzsB4BtZO1K1NKVPfjQp7w4G ZFQwXAUZXhXVewKRmwvSaAf4pY4AY11Mj5GWOCJKPqzAsqCipnFYRkQl1bE1bZko 1ssaZBn9VkuJVl9b5uQRhMoM0VBdWl5VtH2z+kvvOO3sDIFmc7PCX9w1ALV5n6s+ CB2FmtrDIg8AQjbzV4KSHeBeebL+IOCtB02P6MODBEtUCDlfwuS6DC9uSC1eEZlt mSaUo8M0x7WA2L/4+MHoxFKewVa/ywv3+eSoMVp4pjYhLuAE8PFYdv/fNQSRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU35S0b5s66imBLti9+Y91WRCDg2gwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAzOTIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQvu MA0GCSqGSIb3DQEBCwUAA4IBAQBOXFUfgdUBe1SLtcs+bPUzPKZ/1Yut9X+dmHsu KD/WrzDLdI20C1o1v1Qu4lVcGZLGtrOE1pIVAlhoJgx18E62c2wXig7p36s+/nd3 ytrjXuSPvqVTu5EQp/8/LUfQfZzOXlV3Hq5B4Woi0fm2eER1ueQdfftuKJ34Jz96 OxSEpsGWd0BIljjEKL1wJsJKHpPoj9cQxUMcmpknE3GZsipR8VxPYZDHTFVa69PX toUHIASxaUNAeCSiiV37O8wD0sAAt8+FfgxxW87/FPY66z0hAto+MliD6J9lu+Qq gg4mwRPFLCM3+m+hhrdbMZnwPHxVUOWXDQyKGjU/JdakmRvV -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:46 2026 by rpki-client