This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216283.roa File: AS216283.roa (raw, json) Hash identifier: V4uDGiU6S9p3typA+e/n9n+BoNhTnT9jBsIeIsWHOuE= Subject key identifier: BD:43:B4:53:A2:AC:6D:65:07:E0:5D:8C:33:8F:8F:79:7C:80:F4:22 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 7284C502EFE56CC2F29E3BF2B4B534D03090E763 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216283.roa Signing time: Tue 13 Jan 2026 18:38:30 +0000 ROA not before: Tue 13 Jan 2026 18:33:30 +0000 ROA not after: Tue 12 Jan 2027 18:38:30 +0000 asID: 216283 IP address blocks: 141.11.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:c5:02:ef:e5:6c:c2:f2:9e:3b:f2:b4:b5:34:d0:30:90:e7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 13 18:33:30 2026 GMT Not After : Jan 12 18:38:30 2027 GMT Subject: CN=BD43B453A2AC6D6507E05D8C338F8F797C80F422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:d0:26:44:c5:5d:36:74:5c:84:66:41:ce: 8f:a4:f9:f0:15:e7:7a:3f:33:ca:3a:65:17:3f:b3: d9:49:c9:fa:f1:ab:48:0d:7c:f5:ed:b1:a8:1c:58: ec:0a:bb:8c:ed:dd:2c:41:49:b8:1d:19:4b:e8:2a: c3:47:bf:17:10:5d:5a:b7:31:c6:b0:2c:f8:57:58: 83:81:03:86:5f:5d:1a:20:fc:34:80:3b:db:74:26: 05:f1:c8:d2:a2:63:be:af:71:06:ed:14:39:7f:6c: cd:39:06:65:66:8d:0a:a9:21:9a:00:e8:91:6a:91: f8:40:fa:ba:40:75:2a:fc:18:a7:ed:92:9c:3c:df: a3:0b:c2:b1:88:05:a2:d4:fa:ba:c8:c7:c0:24:81: fd:c9:fa:2f:08:14:28:4e:4a:62:46:bd:a8:71:c9: 69:c8:f8:af:4d:b5:b1:76:2d:61:d4:d2:f7:60:3f: b8:9b:28:aa:cf:5b:60:6e:3a:82:72:83:c4:47:ef: 16:a8:8d:a1:61:c4:45:f2:7e:20:20:5f:de:8b:f3: 54:9a:8a:56:39:52:4c:f9:c3:7d:75:44:9d:c0:91: 9f:06:5c:ee:3d:28:1f:37:16:a9:01:a7:26:03:62: a8:76:e0:2b:72:fa:1d:b9:a4:85:da:23:40:07:a6: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:43:B4:53:A2:AC:6D:65:07:E0:5D:8C:33:8F:8F:79:7C:80:F4:22 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.48.0/24 Signature Algorithm: sha256WithRSAEncryption bb:17:e4:c9:78:02:66:54:ab:c1:ac:b8:03:68:13:07:6a:1c: b3:6d:7c:77:2c:fc:55:63:34:2c:0f:e1:58:e7:9a:cd:6b:8c: cb:b3:4b:b4:cf:65:48:18:4f:83:82:47:56:42:0b:84:65:c4: 38:e6:48:96:29:ed:8a:3b:76:d1:ca:60:c6:6f:94:4e:6b:0d: a5:34:07:0a:93:a3:e2:2e:67:ad:74:47:6c:b5:ef:c4:39:ea: 5a:f4:a0:5b:c8:1f:c1:4b:e9:4f:90:6c:ff:7c:23:26:f7:ef: 84:99:53:74:4c:ae:08:b5:f7:5e:16:f9:b0:4d:fc:1c:bd:ae: 5d:96:2a:f0:dd:3b:22:76:60:95:15:1f:02:75:e0:d3:77:03: 57:66:90:e6:1b:81:e8:94:3b:ce:32:61:57:ea:ee:8f:ec:5f: 61:d6:41:4a:59:e9:c2:39:bf:26:ad:92:c6:e2:d5:98:9b:b7: 0e:4f:3e:66:99:1f:3a:e9:27:1a:ca:83:27:08:f6:29:13:a0: ab:85:67:16:7e:59:4a:bb:71:a6:09:91:b3:a8:23:35:2c:c7: 5f:fb:e2:e2:d6:f6:f7:76:87:bf:8a:e9:eb:d5:1e:ce:03:f0: 34:d8:af:49:b6:97:5c:ed:49:d8:45:4b:67:f3:37:c8:66:89: 0a:f8:9c:ef -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUcoTFAu/lbMLynjvytLU00DCQ52MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTMxODMzMzBaFw0yNzAxMTIxODM4MzBaMDMxMTAvBgNV BAMTKEJENDNCNDUzQTJBQzZENjUwN0UwNUQ4QzMzOEY4Rjc5N0M4MEY0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwdAmRMVdNnRchGZBzo+k+fAV 53o/M8o6ZRc/s9lJyfrxq0gNfPXtsagcWOwKu4zt3SxBSbgdGUvoKsNHvxcQXVq3 McawLPhXWIOBA4ZfXRog/DSAO9t0JgXxyNKiY76vcQbtFDl/bM05BmVmjQqpIZoA 6JFqkfhA+rpAdSr8GKftkpw836MLwrGIBaLU+rrIx8Akgf3J+i8IFChOSmJGvahx yWnI+K9NtbF2LWHU0vdgP7ibKKrPW2BuOoJyg8RH7xaojaFhxEXyfiAgX96L81Sa ilY5Ukz5w311RJ3AkZ8GXO49KB83FqkBpyYDYqh24Cty+h25pIXaI0AHpt2TAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUvUO0U6KsbWUH4F2MM4+PeXyA9CIwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE2MjgzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsw MA0GCSqGSIb3DQEBCwUAA4IBAQC7F+TJeAJmVKvBrLgDaBMHahyzbXx3LPxVYzQs D+FY55rNa4zLs0u0z2VIGE+DgkdWQguEZcQ45kiWKe2KO3bRymDGb5ROaw2lNAcK k6PiLmetdEdste/EOepa9KBbyB/BS+lPkGz/fCMm9++EmVN0TK4ItfdeFvmwTfwc va5dlirw3TsidmCVFR8CdeDTdwNXZpDmG4HolDvOMmFX6u6P7F9h1kFKWenCOb8m rZLG4tWYm7cOTz5mmR866ScayoMnCPYpE6CrhWcWfllKu3GmCZGzqCM1LMdf++Li 1vb3doe/iunr1R7OA/A02K9Jtpdc7UnYRUtn8zfIZokK+Jzv -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:42 2026 by rpki-client