This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: 2C/BH2erJOrkdt30hoclHCu22XiCytpAEdLArY/uQOE= Subject key identifier: 25:74:08:23:08:02:94:F6:A2:00:65:58:F0:24:FD:0C:B4:67:55:37 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 6367C0D0D168324FA084775820B0216C693EDC07 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa Signing time: Thu 29 Jan 2026 10:57:31 +0000 ROA not before: Thu 29 Jan 2026 10:52:31 +0000 ROA not after: Thu 28 Jan 2027 10:57:31 +0000 asID: 29802 IP address blocks: 141.11.35.0/24 maxlen: 24 141.11.38.0/24 maxlen: 24 141.11.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:67:c0:d0:d1:68:32:4f:a0:84:77:58:20:b0:21:6c:69:3e:dc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 29 10:52:31 2026 GMT Not After : Jan 28 10:57:31 2027 GMT Subject: CN=25740823080294F6A2006558F024FD0CB4675537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:ac:17:3e:00:87:5d:0a:3f:39:5b:79:b4: 08:08:74:5c:bf:90:e1:d2:4e:24:df:27:94:27:13: 25:cb:54:95:80:0f:4f:93:b3:10:11:2b:d4:c6:f1: 16:8b:8a:aa:78:91:58:99:14:66:3c:e1:99:da:cf: 69:1f:6e:fa:d8:14:77:d9:a3:84:2c:93:27:99:67: be:46:0c:99:90:de:7a:cc:25:45:5a:45:a8:8e:83: ca:6f:b4:f3:88:82:96:6d:a9:e3:4f:98:49:85:29: 9e:85:52:33:c7:b9:f6:61:ba:42:30:4c:e4:9f:21: d8:1e:c4:12:44:3a:13:d9:f3:31:f9:10:f8:42:ee: ed:aa:d6:d4:14:bd:90:24:6c:0d:55:d9:12:b5:2c: 16:b8:7d:7b:ae:9d:bb:fe:bf:fa:ee:22:49:89:17: a3:4a:ae:5e:22:f0:b1:d0:49:ee:da:53:dd:7b:52: dc:cf:da:1f:cd:55:80:82:e5:37:1f:40:85:8e:aa: 85:ea:74:7d:0d:45:22:9d:dd:ef:c7:e9:f0:59:8f: 2a:82:a8:ef:62:9a:bd:af:ad:8d:26:90:33:dc:93: b8:01:ed:5c:52:25:88:8c:21:b4:87:f2:92:64:49: 9a:87:84:6b:2f:52:9d:93:f2:05:3f:ee:5e:68:cd: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:08:23:08:02:94:F6:A2:00:65:58:F0:24:FD:0C:B4:67:55:37 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.35.0/24 141.11.38.0/24 141.11.82.0/23 Signature Algorithm: sha256WithRSAEncryption c7:fc:68:58:82:c4:6e:d3:2b:3d:71:44:10:c1:2e:7c:bc:fc: 80:52:f7:ca:db:f8:6b:89:0c:c5:40:6d:8f:6a:d3:32:f5:c8: 21:12:82:ba:15:8d:fe:c8:97:58:93:83:9f:5d:0e:77:b2:4f: d0:94:51:7a:88:c9:71:45:a4:7a:44:d7:92:e1:98:12:b2:e7: ab:6a:cd:72:74:fc:a7:04:1d:81:33:55:7d:a0:ae:ff:a2:c5: 08:cc:66:c6:b2:84:c5:75:9c:ad:a8:a7:dd:b1:df:b0:1e:a3: 8e:b8:b9:dc:b2:e8:f7:6c:59:54:e1:82:45:58:b0:92:6f:69: 6a:67:66:39:d9:74:67:a6:73:51:f2:cc:31:fd:58:68:6a:c9: 63:e6:93:ed:92:4b:b3:b3:26:08:eb:15:2f:52:d5:5a:52:19: 52:c4:0b:b4:a2:d7:85:33:91:5b:79:3e:85:96:18:3d:dd:42: 7f:88:3c:7d:d6:5e:1b:3e:16:76:2b:d4:b4:64:26:33:09:15: c8:f7:21:c5:ce:ff:69:3c:61:40:83:dc:fc:f2:0a:9d:10:a2: f5:87:06:5d:23:41:c1:b7:ed:02:e0:72:15:bf:4e:74:0e:1f: 02:36:46:d1:c1:60:00:39:a6:b9:fa:a7:20:bf:31:b5:62:6b: f6:99:8b:d0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUY2fA0NFoMk+ghHdYILAhbGk+3AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMjkxMDUyMzFaFw0yNzAxMjgxMDU3MzFaMDMxMTAvBgNV BAMTKDI1NzQwODIzMDgwMjk0RjZBMjAwNjU1OEYwMjRGRDBDQjQ2NzU1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgawXPgCHXQo/OVt5tAgIdFy/ kOHSTiTfJ5QnEyXLVJWAD0+TsxARK9TG8RaLiqp4kViZFGY84Znaz2kfbvrYFHfZ o4QskyeZZ75GDJmQ3nrMJUVaRaiOg8pvtPOIgpZtqeNPmEmFKZ6FUjPHufZhukIw TOSfIdgexBJEOhPZ8zH5EPhC7u2q1tQUvZAkbA1V2RK1LBa4fXuunbv+v/ruIkmJ F6NKrl4i8LHQSe7aU917UtzP2h/NVYCC5TcfQIWOqoXqdH0NRSKd3e/H6fBZjyqC qO9imr2vrY0mkDPck7gB7VxSJYiMIbSH8pJkSZqHhGsvUp2T8gU/7l5ozcuhAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUJXQIIwgClPaiAGVY8CT9DLRnVTcwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACNCyMD BACNCyYDBAGNC1IwDQYJKoZIhvcNAQELBQADggEBAMf8aFiCxG7TKz1xRBDBLny8 /IBS98rb+GuJDMVAbY9q0zL1yCESgroVjf7Il1iTg59dDneyT9CUUXqIyXFFpHpE 15LhmBKy56tqzXJ0/KcEHYEzVX2grv+ixQjMZsayhMV1nK2op92x37Aeo464udyy 6PdsWVThgkVYsJJvaWpnZjnZdGemc1HyzDH9WGhqyWPmk+2SS7OzJgjrFS9S1VpS GVLEC7Si14UzkVt5PoWWGD3dQn+IPH3WXhs+FnYr1LRkJjMJFcj3IcXO/2k8YUCD 3PzyCp0QovWHBl0jQcG37QLgchW/TnQOHwI2RtHBYAA5prn6pyC/MbVia/aZi9A= -----END CERTIFICATE-----Generated at Thu Jan 29 17:50:02 2026 by rpki-client