This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa File: AS22427.roa (raw, json) Hash identifier: 3Iz6rMl2arCBnv6m9Y5+pd4N3QNuTBqQFhoQHOyWuwY= Subject key identifier: 38:0C:83:05:9C:14:ED:5C:3A:1A:77:F0:E6:48:BC:BC:92:C2:A0:0D Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 7E9C319D30723499FF3715B89E9590D302A9006F Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa Signing time: Tue 18 Nov 2025 05:50:09 +0000 ROA not before: Tue 18 Nov 2025 05:45:09 +0000 ROA not after: Tue 17 Nov 2026 05:50:09 +0000 asID: 22427 IP address blocks: 141.11.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9c:31:9d:30:72:34:99:ff:37:15:b8:9e:95:90:d3:02:a9:00:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 18 05:45:09 2025 GMT Not After : Nov 17 05:50:09 2026 GMT Subject: CN=380C83059C14ED5C3A1A77F0E648BCBC92C2A00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:b0:a2:b3:e7:8c:44:db:5e:d8:24:f2:ae: 5f:85:9e:47:9b:a9:fc:3a:57:5b:f9:6d:60:b7:99: 35:fe:7e:20:24:9f:18:11:8d:d6:1d:6a:14:15:13: 42:52:fd:6a:28:02:db:51:d8:39:17:fb:07:72:e9: e2:e7:e1:82:88:51:c6:1c:ca:5c:6e:53:14:3b:c5: 4b:2f:01:42:5a:95:ed:5b:e2:11:ba:49:a5:6e:74: 57:2c:d7:88:5c:31:e2:80:9f:61:46:f1:7e:09:fa: ec:de:db:83:4e:a1:33:ba:0a:ef:46:ba:4f:49:58: 5b:ee:0a:9d:af:22:77:49:47:8b:17:22:ad:d0:c0: 74:8f:1d:81:ef:f9:e6:fd:40:ff:58:63:4d:8b:e8: c7:71:43:a3:e4:97:24:b8:2f:0c:f3:28:0f:04:25: a5:de:cb:b4:e4:1d:fd:f2:58:cd:a1:57:52:0f:89: 55:ec:df:3a:b9:fd:df:a8:98:2b:2f:2f:57:41:f4: 9d:4a:af:b6:bb:24:b6:22:64:43:d0:e5:78:db:92: 96:db:36:06:59:45:04:44:9a:ab:d2:ec:08:de:75: c7:93:5b:9d:59:f8:79:21:11:b6:c1:4f:07:2a:82: 15:98:6a:96:ee:8c:3a:97:d3:a8:69:5a:e3:66:67: 4e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:83:05:9C:14:ED:5C:3A:1A:77:F0:E6:48:BC:BC:92:C2:A0:0D X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.245.0/24 Signature Algorithm: sha256WithRSAEncryption bb:df:d5:c8:97:a9:a7:ab:42:90:4a:bf:05:5f:bc:30:a5:6f: c6:76:6b:c0:ed:de:54:17:85:39:47:58:c9:2d:75:63:6a:13: cf:e4:f2:53:fa:53:a2:28:68:95:32:11:57:3b:c1:13:cf:9b: 55:7b:a6:8b:34:85:a9:6c:7b:93:e3:c7:fe:a9:c9:71:e7:db: 92:55:cf:80:64:c5:23:aa:1f:05:de:5f:c1:58:cc:cb:e8:89: da:4c:78:33:71:49:3e:d9:94:56:93:15:b0:ad:d1:6f:dc:08: 87:81:c0:ff:4d:32:f1:86:ee:f9:5d:69:bb:0a:e5:94:64:4d: 9a:41:f3:ad:86:15:c2:a7:03:44:d9:fd:4b:99:b0:5a:89:fa: a4:10:65:f1:2d:1f:69:4c:c6:91:18:f3:fe:98:28:29:c1:f1: 09:1f:5e:9a:8f:cf:ed:04:9d:aa:7a:09:9d:98:99:28:81:cc: ef:34:4f:3c:30:6d:b1:81:01:ad:64:47:b5:21:e3:07:5d:9b: a6:ff:a3:76:76:be:15:d8:e3:71:fa:c2:a0:85:03:03:e9:e7: 80:7c:06:f0:4d:fd:c2:4f:99:49:a8:37:c8:7d:c5:b1:2e:63: 69:ba:52:51:22:31:ae:f5:87:40:da:c3:93:6f:16:c3:07:1b: d3:5a:d0:96 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUfpwxnTByNJn/NxW4npWQ0wKpAG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMTgwNTQ1MDlaFw0yNjExMTcwNTUwMDlaMDMxMTAvBgNV BAMTKDM4MEM4MzA1OUMxNEVENUMzQTFBNzdGMEU2NDhCQ0JDOTJDMkEwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRbCis+eMRNte2CTyrl+Fnkeb qfw6V1v5bWC3mTX+fiAknxgRjdYdahQVE0JS/WooAttR2DkX+wdy6eLn4YKIUcYc ylxuUxQ7xUsvAUJale1b4hG6SaVudFcs14hcMeKAn2FG8X4J+uze24NOoTO6Cu9G uk9JWFvuCp2vIndJR4sXIq3QwHSPHYHv+eb9QP9YY02L6MdxQ6PklyS4LwzzKA8E JaXey7TkHf3yWM2hV1IPiVXs3zq5/d+omCsvL1dB9J1Kr7a7JLYiZEPQ5Xjbkpbb NgZZRQREmqvS7AjedceTW51Z+HkhEbbBTwcqghWYapbujDqX06hpWuNmZ04ZAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUOAyDBZwU7Vw6Gnfw5ki8vJLCoA0wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjI0Mjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC/Uw DQYJKoZIhvcNAQELBQADggEBALvf1ciXqaerQpBKvwVfvDClb8Z2a8Dt3lQXhTlH WMktdWNqE8/k8lP6U6IoaJUyEVc7wRPPm1V7pos0halse5Pjx/6pyXHn25JVz4Bk xSOqHwXeX8FYzMvoidpMeDNxST7ZlFaTFbCt0W/cCIeBwP9NMvGG7vldabsK5ZRk TZpB862GFcKnA0TZ/UuZsFqJ+qQQZfEtH2lMxpEY8/6YKCnB8QkfXpqPz+0Enap6 CZ2YmSiBzO80TzwwbbGBAa1kR7Uh4wddm6b/o3Z2vhXY43H6wqCFAwPp54B8BvBN /cJPmUmoN8h9xbEuY2m6UlEiMa71h0Daw5NvFsMHG9Na0JY= -----END CERTIFICATE-----Generated at Fri Dec 5 18:11:57 2025 by rpki-client