This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa File: AS36530.roa (raw, json) Hash identifier: jKEvl9s42+aK1IjECicGDUx8qzefNMDio/mnhIMxAFA= Subject key identifier: A1:CB:A7:E0:1D:2C:F8:0B:83:60:B9:FF:28:5D:AE:22:EE:66:4A:21 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 5F0FB4C1F2DE665B4159D5F6DD1132BA4C8F843D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa Signing time: Tue 25 Nov 2025 00:05:27 +0000 ROA not before: Tue 25 Nov 2025 00:00:27 +0000 ROA not after: Tue 24 Nov 2026 00:05:27 +0000 asID: 36530 IP address blocks: 141.11.108.0/24 maxlen: 24 141.11.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0f:b4:c1:f2:de:66:5b:41:59:d5:f6:dd:11:32:ba:4c:8f:84:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 25 00:00:27 2025 GMT Not After : Nov 24 00:05:27 2026 GMT Subject: CN=A1CBA7E01D2CF80B8360B9FF285DAE22EE664A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:b8:77:8d:c4:47:15:04:ef:d4:92:a3:58: a5:5d:28:89:be:b9:e9:70:14:d2:a6:4e:d8:58:78: df:fa:50:95:56:9e:c4:00:f8:e4:91:4f:f5:04:c8: f9:bb:73:14:64:be:52:61:1f:36:49:a5:ae:08:51: 9e:9b:8c:c2:78:69:34:c8:b4:93:fe:79:fd:09:3e: ed:bb:87:19:43:bc:f6:3a:32:81:02:80:95:3a:6c: ba:96:24:65:1a:4f:1b:10:9d:13:eb:d0:3c:b2:5f: 34:09:3e:3f:92:b4:33:bb:45:d6:81:4d:5b:b0:fa: 47:9d:0e:d3:c3:3b:ff:b5:a4:2e:9f:de:a7:b1:7b: 4b:46:1e:33:e1:ee:e9:e2:d6:7d:61:f1:51:ba:3c: 95:c9:59:36:9d:43:9f:01:3a:83:83:c3:e3:39:03: ef:6c:50:bd:3d:a1:a9:d3:e2:55:92:05:e8:a5:49: 13:b6:48:b4:74:63:35:8b:af:de:79:ea:4a:14:c9: 68:4d:aa:1b:b8:d7:af:c4:ab:39:54:75:dd:7a:2e: 4c:f6:85:c7:5a:f3:ea:16:25:d3:2f:82:10:c1:c2: bf:48:3c:23:9c:53:eb:fe:b0:ce:f6:fd:3f:ea:ff: 52:d7:a8:25:bc:34:61:33:77:74:f1:0e:06:95:b5: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CB:A7:E0:1D:2C:F8:0B:83:60:B9:FF:28:5D:AE:22:EE:66:4A:21 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.108.0/24 141.11.240.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:b4:ba:0b:18:e3:51:cf:00:d5:20:f7:10:e3:5d:72:5f:68: 0a:85:62:47:90:75:2b:97:2c:e9:28:0f:a4:22:70:bc:e7:60: a9:23:f1:35:aa:a7:90:97:af:36:63:c0:c4:45:20:10:cf:a8: 32:87:6c:a6:79:2e:f0:f8:f1:59:af:24:99:7a:f2:87:55:af: 34:15:28:2d:19:a8:27:af:c5:d1:67:b1:37:5d:a7:19:8a:9d: 82:21:e6:9b:47:83:95:90:c7:71:85:1f:11:1d:c5:09:eb:7a: 00:10:d5:06:79:10:a0:5b:89:8b:49:ff:19:74:8c:1e:b8:a5: 45:56:27:76:26:34:27:88:5f:02:11:8b:18:45:13:97:ee:60: ea:0c:ba:d3:b8:1d:27:1e:91:3c:96:1e:9d:8c:ba:98:36:2d: 58:a1:0b:e8:f7:48:c0:1c:5e:b5:8b:bc:0e:70:fe:b9:f1:cc: d3:65:68:07:8b:f0:07:b8:e7:3a:1f:9e:2b:12:c1:e2:a9:4a: 99:98:e7:fd:16:96:45:62:01:78:62:20:f4:e4:c7:5f:2a:98: 9f:ef:b8:ef:85:b8:00:5d:de:31:9c:87:2d:7c:d5:e9:5e:8b: b6:53:a8:d7:6c:d3:a6:9a:59:10:c3:61:17:3d:ba:a5:12:cd: 9b:7c:8d:74 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUXw+0wfLeZltBWdX23REyukyPhD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMjUwMDAwMjdaFw0yNjExMjQwMDA1MjdaMDMxMTAvBgNV BAMTKEExQ0JBN0UwMUQyQ0Y4MEI4MzYwQjlGRjI4NURBRTIyRUU2NjRBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvbh3jcRHFQTv1JKjWKVdKIm+ uelwFNKmTthYeN/6UJVWnsQA+OSRT/UEyPm7cxRkvlJhHzZJpa4IUZ6bjMJ4aTTI tJP+ef0JPu27hxlDvPY6MoECgJU6bLqWJGUaTxsQnRPr0DyyXzQJPj+StDO7RdaB TVuw+kedDtPDO/+1pC6f3qexe0tGHjPh7uni1n1h8VG6PJXJWTadQ58BOoODw+M5 A+9sUL09oanT4lWSBeilSRO2SLR0YzWLr9556koUyWhNqhu416/EqzlUdd16Lkz2 hcda8+oWJdMvghDBwr9IPCOcU+v+sM72/T/q/1LXqCW8NGEzd3TxDgaVtYYBAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUocun4B0s+AuDYLn/KF2uIu5mSiEwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNC2wD BACNC/AwDQYJKoZIhvcNAQELBQADggEBADu0ugsY41HPANUg9xDjXXJfaAqFYkeQ dSuXLOkoD6QicLznYKkj8TWqp5CXrzZjwMRFIBDPqDKHbKZ5LvD48VmvJJl68odV rzQVKC0ZqCevxdFnsTddpxmKnYIh5ptHg5WQx3GFHxEdxQnregAQ1QZ5EKBbiYtJ /xl0jB64pUVWJ3YmNCeIXwIRixhFE5fuYOoMutO4HScekTyWHp2Mupg2LVihC+j3 SMAcXrWLvA5w/rnxzNNlaAeL8Ae45zofnisSweKpSpmY5/0WlkViAXhiIPTkx18q mJ/vuO+FuABd3jGchy181elei7ZTqNds06aaWRDDYRc9uqUSzZt8jXQ= -----END CERTIFICATE-----Generated at Sat Dec 6 00:00:17 2025 by rpki-client