This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210542.roa File: AS210542.roa (raw, json) Hash identifier: BSkXEEXROfVXXouvqeoLV2h85yy6J+5tV+6c0fPFBFU= Subject key identifier: 54:7A:18:58:DA:D2:3B:25:3C:D9:A5:A2:3F:74:D9:ED:0C:4B:DD:02 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 376EB2837D35ACDCE88BB0693D2E9441ECE0D981 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210542.roa Signing time: Mon 12 Jan 2026 11:55:33 +0000 ROA not before: Mon 12 Jan 2026 11:50:33 +0000 ROA not after: Mon 11 Jan 2027 11:55:33 +0000 asID: 210542 IP address blocks: 141.11.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6e:b2:83:7d:35:ac:dc:e8:8b:b0:69:3d:2e:94:41:ec:e0:d9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 12 11:50:33 2026 GMT Not After : Jan 11 11:55:33 2027 GMT Subject: CN=547A1858DAD23B253CD9A5A23F74D9ED0C4BDD02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:75:bf:06:48:0f:49:9a:ac:40:c7:32:a4: 01:89:a6:ae:a9:59:ea:50:e1:5a:bb:80:48:be:5f: 3d:25:36:64:04:c5:ca:74:b0:ba:ca:37:28:08:ed: 0c:19:a5:23:a4:01:21:5e:c8:92:54:cc:28:ad:c4: 78:05:bb:b0:d5:b1:ec:23:60:f4:af:6f:d6:e3:b7: 3c:4f:13:58:48:90:85:72:14:2b:f6:32:7b:39:52: e7:41:bd:8e:7a:2e:7e:63:18:6b:e5:41:52:4d:37: c3:0f:47:dc:f2:72:0b:c1:57:03:f0:30:c9:b7:f4: c6:58:3d:a2:e4:c3:91:82:bd:96:90:08:a7:0f:cb: 59:3b:b0:37:6c:6b:c2:64:73:a5:37:83:a1:2a:75: ca:45:b3:c4:ed:b2:62:89:04:3a:e4:c2:77:86:ed: 79:0b:e0:19:e6:37:fa:f2:c3:ae:f8:83:fe:3f:11: fb:2a:04:a9:c7:fd:ac:9a:14:aa:89:e7:fd:35:51: f4:91:13:9c:26:b0:9a:ab:7e:51:d1:4c:fe:11:b7: fd:e5:da:8f:70:6a:63:b9:0d:df:e2:3e:36:c9:2d: c1:0b:00:fa:f2:38:b1:33:42:39:21:28:cd:44:c7: a7:52:d1:c2:24:fa:b5:e7:9d:05:8b:2e:b9:f7:65: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7A:18:58:DA:D2:3B:25:3C:D9:A5:A2:3F:74:D9:ED:0C:4B:DD:02 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.134.0/23 Signature Algorithm: sha256WithRSAEncryption 38:cf:25:5e:fb:f2:bc:5e:30:04:8d:4e:68:d0:28:5d:fa:10: b3:c2:09:79:87:a7:83:0b:2a:d7:9c:91:ee:7f:6c:82:f9:30: ca:9d:0c:37:18:9d:e8:2a:ce:b7:6e:91:e0:ac:ba:c8:51:7c: 55:6c:20:cc:8c:f8:38:15:e3:01:32:3b:7f:18:92:c1:c2:b8: 75:06:59:81:f2:74:5a:b9:9d:e4:2e:1c:af:ff:4f:ca:cf:e1: 15:3a:c7:ae:b1:bf:14:6b:13:42:d4:df:85:77:83:d4:ee:08: b4:9d:a6:35:53:60:71:34:f5:f7:cf:8a:1b:ed:3d:c1:4b:1d: 43:60:b5:5a:5a:2d:f2:f2:29:48:1e:92:0c:5a:83:40:a9:03: 24:6e:fb:2c:e3:1e:8d:e8:98:8e:47:e9:71:4a:aa:19:e9:dc: 98:10:94:c8:f0:72:ec:7b:27:52:25:46:76:29:7a:c9:e9:10: b4:37:04:7e:d8:fa:a7:4e:a0:72:3c:20:9c:4e:e5:d7:30:d4: fd:f8:be:97:a3:40:46:80:8b:bb:50:00:c2:25:1d:86:0e:4c: 35:a5:d3:15:ba:21:3e:67:d5:26:94:26:60:b3:30:93:bd:6a: 7b:3a:19:5a:4d:29:1e:15:e5:8f:05:73:ae:fb:7a:8c:ee:82: e9:41:ed:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUN26yg301rNzoi7BpPS6UQezg2YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTIxMTUwMzNaFw0yNzAxMTExMTU1MzNaMDMxMTAvBgNV BAMTKDU0N0ExODU4REFEMjNCMjUzQ0Q5QTVBMjNGNzREOUVEMEM0QkREMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHXW/BkgPSZqsQMcypAGJpq6p WepQ4Vq7gEi+Xz0lNmQExcp0sLrKNygI7QwZpSOkASFeyJJUzCitxHgFu7DVsewj YPSvb9bjtzxPE1hIkIVyFCv2Mns5UudBvY56Ln5jGGvlQVJNN8MPR9zycgvBVwPw MMm39MZYPaLkw5GCvZaQCKcPy1k7sDdsa8Jkc6U3g6EqdcpFs8TtsmKJBDrkwneG 7XkL4BnmN/ryw674g/4/EfsqBKnH/ayaFKqJ5/01UfSRE5wmsJqrflHRTP4Rt/3l 2o9wamO5Dd/iPjbJLcELAPryOLEzQjkhKM1Ex6dS0cIk+rXnnQWLLrn3ZS0BAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUVHoYWNrSOyU82aWiP3TZ7QxL3QIwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEwNTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQuG MA0GCSqGSIb3DQEBCwUAA4IBAQA4zyVe+/K8XjAEjU5o0Chd+hCzwgl5h6eDCyrX nJHuf2yC+TDKnQw3GJ3oKs63bpHgrLrIUXxVbCDMjPg4FeMBMjt/GJLBwrh1BlmB 8nRauZ3kLhyv/0/Kz+EVOseusb8UaxNC1N+Fd4PU7gi0naY1U2BxNPX3z4ob7T3B Sx1DYLVaWi3y8ilIHpIMWoNAqQMkbvss4x6N6JiOR+lxSqoZ6dyYEJTI8HLseydS JUZ2KXrJ6RC0NwR+2PqnTqByPCCcTuXXMNT9+L6Xo0BGgIu7UADCJR2GDkw1pdMV uiE+Z9UmlCZgszCTvWp7OhlaTSkeFeWPBXOu+3qM7oLpQe2c -----END CERTIFICATE-----Generated at Tue Jan 20 22:21:16 2026 by rpki-client