This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205880.roa File: AS205880.roa (raw, json) Hash identifier: W0EB2zosbNKdiCPfGUmDumUEmujiugTzVcvRP8YBPrQ= Subject key identifier: 24:3B:9A:92:70:1A:83:02:03:B9:D7:68:52:A2:A0:68:66:4B:86:96 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 5EBCB14EEC7EAC9C0C0E7188C99B3D1BE391507D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205880.roa Signing time: Tue 06 Jan 2026 10:26:21 +0000 ROA not before: Tue 06 Jan 2026 10:21:21 +0000 ROA not after: Tue 05 Jan 2027 10:26:21 +0000 asID: 205880 IP address blocks: 141.11.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bc:b1:4e:ec:7e:ac:9c:0c:0e:71:88:c9:9b:3d:1b:e3:91:50:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 6 10:21:21 2026 GMT Not After : Jan 5 10:26:21 2027 GMT Subject: CN=243B9A92701A830203B9D76852A2A068664B8696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:4c:b2:4d:2e:4b:97:0c:72:69:99:36:be: 7d:08:c3:04:97:7a:9b:48:76:55:5f:78:7b:a4:80: ab:d2:9f:ac:35:5f:bb:99:aa:2e:27:40:f4:07:c8: d7:a2:58:c3:bf:9b:75:cb:a9:b1:cd:d3:e9:a5:c4: f3:bc:37:de:29:ac:82:fc:3d:f8:74:1b:49:02:9b: 56:5b:2b:c0:1a:fc:a4:b3:26:40:51:a6:0c:e4:b9: 76:cd:35:f5:cb:61:fd:09:0c:57:3f:30:31:63:b9: 79:b0:2d:17:c3:73:73:27:ad:4d:ba:30:fc:be:b8: 06:54:36:a1:c6:61:ec:65:3f:38:d0:0a:33:01:6a: 15:60:24:21:62:d0:ce:1d:a4:fa:62:50:d0:42:5e: 47:4c:1d:ce:6c:fc:05:e4:60:e5:5e:bf:ce:d3:1f: 39:88:8a:bd:d3:f5:26:b4:9a:2e:b0:e6:d9:6d:8d: 47:4b:98:0f:11:56:b8:1a:bc:41:ab:bd:ba:dc:16: 15:6a:ba:66:88:07:69:39:a0:f8:bc:a6:e0:22:30: 90:0a:0f:51:3e:79:80:53:31:4f:0b:a1:0f:ed:2e: a4:a1:5a:82:8e:db:96:1d:3a:52:fa:56:c6:46:ef: c0:eb:5a:4a:f5:cb:eb:04:61:d9:f6:99:6d:42:1f: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:9A:92:70:1A:83:02:03:B9:D7:68:52:A2:A0:68:66:4B:86:96 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.219.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:9e:aa:6c:1e:cd:e0:7c:b5:ad:1c:07:76:9e:3b:26:f8:d2: 91:68:cb:2d:f1:49:18:cf:59:a1:67:8f:e1:ce:d5:80:ee:08: 96:13:88:fd:48:eb:1c:81:3c:31:c3:84:43:7d:e6:03:d3:16: 33:73:cc:a1:5b:6e:9a:cc:6f:24:8a:c3:96:cd:8e:37:42:23: 45:96:98:a1:53:b1:51:d6:6c:5d:6b:a8:c8:70:9c:2b:d8:05: a6:56:75:31:4d:71:0c:13:79:ee:71:96:d5:c4:f4:ff:9f:f4: 27:29:95:a1:be:ce:67:3f:9a:5c:f9:5f:d9:17:98:4a:03:be: e9:91:ae:16:66:71:33:f5:12:49:4a:a5:b3:c3:a9:42:5d:66: 18:c4:27:5a:f7:2f:e2:33:83:98:c8:b6:2b:b0:1f:43:76:9a: 94:04:b9:06:37:c3:39:e1:a8:16:67:f0:2b:ab:93:98:7a:f9: ec:a3:a9:b3:05:77:11:a8:fb:f5:5d:53:2f:63:c5:90:97:90: bb:59:d0:47:54:88:ee:0b:43:87:f9:84:96:43:0b:cd:d7:b0: ef:83:6a:e0:8a:ee:89:d6:cd:66:c7:66:2e:7a:13:aa:83:53: 5a:cb:ef:ac:91:c0:6c:96:11:0d:51:42:68:ca:25:35:80:c1: 66:9d:35:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUXryxTux+rJwMDnGIyZs9G+ORUH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMDYxMDIxMjFaFw0yNzAxMDUxMDI2MjFaMDMxMTAvBgNV BAMTKDI0M0I5QTkyNzAxQTgzMDIwM0I5RDc2ODUyQTJBMDY4NjY0Qjg2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGkyyTS5LlwxyaZk2vn0IwwSX eptIdlVfeHukgKvSn6w1X7uZqi4nQPQHyNeiWMO/m3XLqbHN0+mlxPO8N94prIL8 Pfh0G0kCm1ZbK8Aa/KSzJkBRpgzkuXbNNfXLYf0JDFc/MDFjuXmwLRfDc3MnrU26 MPy+uAZUNqHGYexlPzjQCjMBahVgJCFi0M4dpPpiUNBCXkdMHc5s/AXkYOVev87T HzmIir3T9Sa0mi6w5tltjUdLmA8RVrgavEGrvbrcFhVqumaIB2k5oPi8puAiMJAK D1E+eYBTMU8LoQ/tLqShWoKO25YdOlL6VsZG78DrWkr1y+sEYdn2mW1CH5r7AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUJDuaknAagwIDuddoUqKgaGZLhpYwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA1ODgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvb MA0GCSqGSIb3DQEBCwUAA4IBAQA8nqpsHs3gfLWtHAd2njsm+NKRaMst8UkYz1mh Z4/hztWA7giWE4j9SOscgTwxw4RDfeYD0xYzc8yhW26azG8kisOWzY43QiNFlpih U7FR1mxda6jIcJwr2AWmVnUxTXEME3nucZbVxPT/n/QnKZWhvs5nP5pc+V/ZF5hK A77pka4WZnEz9RJJSqWzw6lCXWYYxCda9y/iM4OYyLYrsB9DdpqUBLkGN8M54agW Z/Arq5OYevnso6mzBXcRqPv1XVMvY8WQl5C7WdBHVIjuC0OH+YSWQwvN17Dvg2rg iu6J1s1mx2YuehOqg1Nay++skcBslhENUUJoyiU1gMFmnTWu -----END CERTIFICATE-----Generated at Sun Jan 18 11:00:27 2026 by rpki-client