This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213605.roa File: AS213605.roa (raw, json) Hash identifier: 6SQIehoG3jvXR4sTkABSDfXSdGwhr7MYYlxpEjdiWFY= Subject key identifier: FE:37:62:40:BC:DE:96:85:F3:2A:7F:D2:A9:77:6C:FA:18:53:14:3C Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 5E5D9E2DD7CBC9B1C2E8669773E07D72AAAA7038 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213605.roa Signing time: Thu 11 Dec 2025 15:04:06 +0000 ROA not before: Thu 11 Dec 2025 14:59:06 +0000 ROA not after: Thu 10 Dec 2026 15:04:06 +0000 asID: 213605 IP address blocks: 141.11.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5d:9e:2d:d7:cb:c9:b1:c2:e8:66:97:73:e0:7d:72:aa:aa:70:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 11 14:59:06 2025 GMT Not After : Dec 10 15:04:06 2026 GMT Subject: CN=FE376240BCDE9685F32A7FD2A9776CFA1853143C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:99:bd:3c:99:7c:47:85:22:77:7d:64:b5: 34:26:27:10:77:f5:84:f6:97:9b:dc:97:d8:ca:c4: 01:f6:88:95:96:7d:41:18:d1:ee:17:df:bb:ad:66: e1:2c:b4:8a:d5:fe:b7:1a:e4:e7:58:cc:9c:8d:34: 7e:4a:08:c4:a9:f4:5e:65:27:49:4a:1f:e9:75:9f: a0:aa:07:eb:0d:79:4c:90:3b:9c:38:31:00:d4:0c: ba:0e:e0:fa:11:2f:66:34:87:b2:33:05:61:32:7b: e7:20:93:55:20:ff:9b:71:71:c9:7f:b7:37:58:ab: 3c:64:33:a0:57:5d:4c:06:63:db:84:ab:c4:34:e5: ea:08:89:8d:fd:3c:1f:c7:4b:b7:8d:e4:33:4d:71: 34:58:2b:70:ad:ee:2e:55:1a:16:ae:e1:f1:95:7a: 5c:b8:ac:cf:68:cc:53:13:db:49:0d:3e:38:f0:70: e5:2e:d8:16:1f:8b:aa:fc:4f:89:33:37:28:85:ad: cf:84:73:33:77:d1:76:4b:9d:00:d3:61:87:e5:68: 42:65:a1:36:0d:08:57:0e:ad:98:67:2c:c3:7a:fb: bf:c0:d4:b4:a1:b4:5a:d2:11:f6:21:12:09:85:98: 43:15:87:8e:97:37:04:8e:22:81:ed:1d:67:01:66: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:62:40:BC:DE:96:85:F3:2A:7F:D2:A9:77:6C:FA:18:53:14:3C X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.141.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:e2:78:ec:65:4c:02:63:b5:8a:c8:ea:e9:b5:4b:ce:7d:a8: fd:3f:ae:8a:15:92:14:48:25:8f:89:dd:c8:83:71:ef:52:86: d3:b2:6a:7a:9a:39:de:49:68:10:e0:ba:b1:99:73:44:e5:b6: b0:78:8f:a6:2f:12:7d:2a:22:3b:8d:c5:f0:19:9c:ff:b8:4f: 54:54:50:17:49:25:b1:50:ee:24:f5:d1:01:f2:21:c8:ed:97: 0d:5e:7f:08:55:08:de:67:b6:75:9d:6d:80:b2:8b:c8:5a:ec: c2:88:f4:0d:f3:d2:26:3b:a0:9f:a1:2c:06:6a:56:7d:a5:78: 0b:bd:9d:d1:cb:9f:30:fd:54:5c:27:e0:73:14:9c:cf:ce:56: 1c:d4:6e:db:9a:44:a1:e3:cb:df:37:fd:11:71:86:53:00:b7: 14:58:97:4c:2f:c7:61:dd:bd:10:6d:1c:b6:c5:87:b7:80:2e: ef:ce:82:ba:ae:e8:82:ce:63:8e:67:41:a8:7b:70:1c:b8:fa: 38:f0:ad:2b:9e:f2:02:e7:ad:0b:6a:e1:78:78:23:5c:28:9a: 59:ad:ca:c7:c5:eb:73:4a:8c:0d:3c:93:1f:80:d3:3d:6e:f8: 88:bc:13:ca:4f:db:67:21:6a:d3:48:d3:33:9f:96:74:42:e0: 84:d9:7f:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUXl2eLdfLybHC6GaXc+B9cqqqcDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTExNDU5MDZaFw0yNjEyMTAxNTA0MDZaMDMxMTAvBgNV BAMTKEZFMzc2MjQwQkNERTk2ODVGMzJBN0ZEMkE5Nzc2Q0ZBMTg1MzE0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuJm9PJl8R4Uid31ktTQmJxB3 9YT2l5vcl9jKxAH2iJWWfUEY0e4X37utZuEstIrV/rca5OdYzJyNNH5KCMSp9F5l J0lKH+l1n6CqB+sNeUyQO5w4MQDUDLoO4PoRL2Y0h7IzBWEye+cgk1Ug/5txccl/ tzdYqzxkM6BXXUwGY9uEq8Q05eoIiY39PB/HS7eN5DNNcTRYK3Ct7i5VGhau4fGV ely4rM9ozFMT20kNPjjwcOUu2BYfi6r8T4kzNyiFrc+EczN30XZLnQDTYYflaEJl oTYNCFcOrZhnLMN6+7/A1LShtFrSEfYhEgmFmEMVh46XNwSOIoHtHWcBZpuDAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU/jdiQLzeloXzKn/SqXds+hhTFDwwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEzNjA1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuN MA0GCSqGSIb3DQEBCwUAA4IBAQBa4njsZUwCY7WKyOrptUvOfaj9P66KFZIUSCWP id3Ig3HvUobTsmp6mjneSWgQ4LqxmXNE5baweI+mLxJ9KiI7jcXwGZz/uE9UVFAX SSWxUO4k9dEB8iHI7ZcNXn8IVQjeZ7Z1nW2AsovIWuzCiPQN89ImO6CfoSwGalZ9 pXgLvZ3Ry58w/VRcJ+BzFJzPzlYc1G7bmkSh48vfN/0RcYZTALcUWJdML8dh3b0Q bRy2xYe3gC7vzoK6ruiCzmOOZ0Goe3AcuPo48K0rnvIC560LauF4eCNcKJpZrcrH xetzSowNPJMfgNM9bviIvBPKT9tnIWrTSNMzn5Z0QuCE2X/O -----END CERTIFICATE-----Generated at Tue Dec 16 09:18:05 2025 by rpki-client