This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207529.roa File: AS207529.roa (raw, json) Hash identifier: RTRyCwNCa24khSH/2g3qW9vCxQk2lZFexBVc+iJiqI8= Subject key identifier: 0C:EC:80:B6:C5:DE:72:6B:D6:EA:0E:0D:73:1B:50:03:D6:1B:69:C0 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 14D5D43C09FD493F2A7F79E6CC9BB2EFB68C604D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207529.roa Signing time: Fri 12 Dec 2025 07:20:26 +0000 ROA not before: Fri 12 Dec 2025 07:15:26 +0000 ROA not after: Fri 11 Dec 2026 07:20:26 +0000 asID: 207529 IP address blocks: 141.11.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d5:d4:3c:09:fd:49:3f:2a:7f:79:e6:cc:9b:b2:ef:b6:8c:60:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 12 07:15:26 2025 GMT Not After : Dec 11 07:20:26 2026 GMT Subject: CN=0CEC80B6C5DE726BD6EA0E0D731B5003D61B69C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:f4:11:41:45:ed:bf:c2:ce:38:d6:89:a3: aa:d7:3f:1f:55:9f:42:97:06:3d:7f:3d:a3:34:3b: c7:6f:d2:1a:ca:b0:fb:a7:e9:14:c2:0a:34:d5:2e: 19:a8:ca:02:a0:6f:7c:b0:8a:28:3a:03:55:e5:15: 26:a3:31:5a:1a:a1:ba:24:d4:17:0a:af:fc:12:85: cd:e6:45:a8:15:17:ba:c9:b2:4d:b3:6e:f5:58:86: ec:6d:cb:d0:4a:01:30:19:ad:41:4a:9c:14:0e:27: f3:6d:7b:0f:91:3e:34:1c:4a:97:f0:c5:18:89:c3: ca:ed:1c:e1:29:1d:7a:c2:5f:7e:ac:8d:eb:e4:df: a8:a5:96:17:18:10:82:d9:85:54:ab:1c:ff:ff:5f: 15:aa:1b:2b:3c:83:cf:84:fe:2e:ee:ee:a6:bc:dc: 30:7f:f8:17:ed:f4:c3:3d:cd:82:f9:3f:f9:cf:0b: f6:34:5d:e9:b3:d1:fe:4d:69:3b:7a:cc:fc:78:2a: 2c:86:32:cb:3f:bd:f1:63:bf:0d:ac:84:34:db:38: b3:8e:85:2b:f9:44:62:65:eb:39:e1:a8:3a:91:99: ae:c6:61:f3:a5:3b:d5:95:23:6a:58:43:32:60:9f: 2a:18:74:83:18:b6:e9:14:82:3b:b0:14:88:9d:f1: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:80:B6:C5:DE:72:6B:D6:EA:0E:0D:73:1B:50:03:D6:1B:69:C0 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.141.0/24 Signature Algorithm: sha256WithRSAEncryption ab:d1:6f:46:92:53:94:3c:db:d1:44:1d:c3:b0:00:72:5b:8e: 5b:5c:c6:3c:29:d4:0e:4f:2c:58:37:ac:07:bd:37:5b:e3:b2: 28:4b:eb:86:6e:63:bf:35:ac:d5:1b:87:d7:39:7e:6a:8d:2a: 68:c5:bb:dc:14:21:bd:81:b3:f7:30:62:69:c8:ab:8b:5a:a6: 48:a8:61:c0:a4:1a:f4:0d:5e:2f:7c:c5:b9:4c:3e:ca:98:98: eb:d9:7e:5e:f5:3f:d5:89:20:1d:d9:72:20:cf:5d:99:df:ac: 4b:09:a2:53:9d:a1:b9:cf:50:e0:19:c2:e5:84:7d:4b:48:a3: 60:ce:25:7b:3d:7d:23:f8:49:88:3e:c1:f8:5d:19:9c:4a:73: bf:be:b1:7b:50:19:84:ac:f2:c7:8d:41:5a:ce:67:f4:e3:e2: 84:a1:6a:51:c1:28:b7:34:a0:09:6f:95:a4:51:89:19:6f:6e: 98:14:79:b5:e9:2f:35:2d:42:35:2b:8e:08:c1:a9:16:73:83: 5b:67:e7:db:c1:06:3d:80:af:5b:7e:77:5c:b4:c3:05:a3:f1: 35:de:58:c1:27:3e:32:1f:26:c3:de:9a:66:a2:bf:4e:fe:f0: 62:0b:a0:8c:49:c1:e3:8e:50:c6:41:54:14:9f:1a:f4:02:cf: 9f:d1:f4:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUFNXUPAn9ST8qf3nmzJuy77aMYE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTIwNzE1MjZaFw0yNjEyMTEwNzIwMjZaMDMxMTAvBgNV BAMTKDBDRUM4MEI2QzVERTcyNkJENkVBMEUwRDczMUI1MDAzRDYxQjY5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9PQRQUXtv8LOONaJo6rXPx9V n0KXBj1/PaM0O8dv0hrKsPun6RTCCjTVLhmoygKgb3ywiig6A1XlFSajMVoaobok 1BcKr/wShc3mRagVF7rJsk2zbvVYhuxty9BKATAZrUFKnBQOJ/Ntew+RPjQcSpfw xRiJw8rtHOEpHXrCX36sjevk36illhcYEILZhVSrHP//XxWqGys8g8+E/i7u7qa8 3DB/+Bft9MM9zYL5P/nPC/Y0Xemz0f5NaTt6zPx4KiyGMss/vfFjvw2shDTbOLOO hSv5RGJl6znhqDqRma7GYfOlO9WVI2pYQzJgnyoYdIMYtukUgjuwFIid8QXtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUDOyAtsXecmvW6g4NcxtQA9YbacAwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA3NTI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuN MA0GCSqGSIb3DQEBCwUAA4IBAQCr0W9GklOUPNvRRB3DsAByW45bXMY8KdQOTyxY N6wHvTdb47IoS+uGbmO/NazVG4fXOX5qjSpoxbvcFCG9gbP3MGJpyKuLWqZIqGHA pBr0DV4vfMW5TD7KmJjr2X5e9T/ViSAd2XIgz12Z36xLCaJTnaG5z1DgGcLlhH1L SKNgziV7PX0j+EmIPsH4XRmcSnO/vrF7UBmErPLHjUFazmf04+KEoWpRwSi3NKAJ b5WkUYkZb26YFHm16S81LUI1K44IwakWc4NbZ+fbwQY9gK9bfndctMMFo/E13ljB Jz4yHybD3ppmor9O/vBiC6CMScHjjlDGQVQUnxr0As+f0fSG -----END CERTIFICATE-----Generated at Thu Dec 18 20:01:20 2025 by rpki-client