This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS395201.roa File: AS395201.roa (raw, json) Hash identifier: S7cRmKUOqfN5U+PIzl/0cMwnPflPSzIhU9L0YyuF5LE= Subject key identifier: 2B:22:C7:E6:33:33:EC:74:8D:AC:27:27:D2:2A:9F:E2:18:C9:A6:18 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 0365F11C7287AFF8A1E7B6B62CE713CB4B94340D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS395201.roa Signing time: Thu 15 Jan 2026 09:42:13 +0000 ROA not before: Thu 15 Jan 2026 09:37:13 +0000 ROA not after: Thu 14 Jan 2027 09:42:13 +0000 asID: 395201 IP address blocks: 141.11.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 14:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:65:f1:1c:72:87:af:f8:a1:e7:b6:b6:2c:e7:13:cb:4b:94:34:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 15 09:37:13 2026 GMT Not After : Jan 14 09:42:13 2027 GMT Subject: CN=2B22C7E63333EC748DAC2727D22A9FE218C9A618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:23:38:3e:40:81:e8:18:81:c6:20:91:f5: de:ea:a4:7e:4d:27:01:c7:9e:33:e7:aa:03:4b:83: 9c:94:92:2d:6a:22:8f:4e:c7:cc:22:78:9b:80:eb: e6:be:d6:8f:8e:fc:79:a6:62:74:f2:83:05:74:a7: cc:60:ba:eb:a1:5a:7d:cd:31:eb:18:07:fc:45:d2: bc:c4:10:b6:1f:3a:aa:af:a9:04:8f:9c:28:ce:f7: c6:42:35:8b:6e:30:ad:7c:7f:dd:c8:19:df:27:03: 06:29:12:2d:f6:85:55:0e:ad:4d:17:2d:e2:92:92: 28:ed:2c:e7:3d:96:2a:5b:31:48:26:0d:ef:c7:3c: ca:b1:fd:79:6b:7c:07:fd:9f:6a:d7:d9:f3:76:61: bb:6a:df:12:39:1a:82:ab:f3:e1:8b:79:9e:85:33: 3b:a4:f4:6e:ec:3d:b1:3a:58:40:57:94:51:f6:76: e9:6b:a3:f6:62:bf:5d:c0:6c:9c:ff:cd:47:50:4a: 26:81:c0:25:34:fa:dd:35:d9:4b:03:bf:4b:cd:5e: 3b:91:23:1c:62:11:18:bb:a7:ee:3c:9f:68:cd:31: 41:35:4c:18:24:69:d1:2b:07:ee:83:58:36:b3:49: 58:51:6e:2e:8c:93:86:a4:9b:31:c5:18:be:f9:e3: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:C7:E6:33:33:EC:74:8D:AC:27:27:D2:2A:9F:E2:18:C9:A6:18 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS395201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.172.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:4e:7b:eb:d7:8b:23:a1:a7:14:54:f3:16:4c:33:a4:a6:c7: 4e:d7:49:e2:73:15:d9:33:9e:d6:77:43:45:a1:eb:f2:52:f5: 43:48:e3:38:63:64:4e:35:ac:f1:2b:df:6c:46:45:ba:24:89: 4d:7b:d1:ca:32:be:25:70:45:07:91:52:7f:09:84:1e:ee:c3: b4:2b:71:e9:59:b7:ca:b6:81:03:53:58:e8:b0:de:ad:6b:c2: f5:84:ee:a6:21:40:8f:51:57:89:f0:a5:bc:21:73:67:d3:54: 83:be:63:80:1f:f9:a1:71:97:6d:e8:74:3e:1f:c2:27:7a:2b: e9:71:ae:14:f8:b2:0a:d2:ef:df:78:7b:9f:c9:41:e1:fa:e8: 3a:fc:ae:03:53:31:03:a0:bc:e3:bb:ab:75:4f:2a:17:20:36: e1:75:67:2b:a6:34:bb:c5:7b:cb:3a:58:03:f2:3c:8e:d0:b7: a8:03:d4:48:63:f4:39:2f:2d:64:6a:e8:29:6f:f3:38:67:27: 06:df:ed:51:7e:39:89:c7:3c:07:0d:18:9b:5e:66:37:c8:e7: 4c:32:d4:ba:9a:a6:c3:2b:b0:fe:93:61:1b:e5:67:35:7f:da: 92:ff:a6:09:cb:89:53:15:36:ed:c4:1c:6e:d5:f7:55:49:d8: 14:8c:51:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUA2XxHHKHr/ih57a2LOcTy0uUNA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTUwOTM3MTNaFw0yNzAxMTQwOTQyMTNaMDMxMTAvBgNV BAMTKDJCMjJDN0U2MzMzM0VDNzQ4REFDMjcyN0QyMkE5RkUyMThDOUE2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgyM4PkCB6BiBxiCR9d7qpH5N JwHHnjPnqgNLg5yUki1qIo9Ox8wieJuA6+a+1o+O/HmmYnTygwV0p8xguuuhWn3N MesYB/xF0rzEELYfOqqvqQSPnCjO98ZCNYtuMK18f93IGd8nAwYpEi32hVUOrU0X LeKSkijtLOc9lipbMUgmDe/HPMqx/XlrfAf9n2rX2fN2Ybtq3xI5GoKr8+GLeZ6F Mzuk9G7sPbE6WEBXlFH2dulro/Ziv13AbJz/zUdQSiaBwCU0+t012UsDv0vNXjuR IxxiERi7p+48n2jNMUE1TBgkadErB+6DWDazSVhRbi6Mk4akmzHFGL75471TAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUKyLH5jMz7HSNrCcn0iqf4hjJphgwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzk1MjAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQus MA0GCSqGSIb3DQEBCwUAA4IBAQBKTnvr14sjoacUVPMWTDOkpsdO10nicxXZM57W d0NFoevyUvVDSOM4Y2RONazxK99sRkW6JIlNe9HKMr4lcEUHkVJ/CYQe7sO0K3Hp WbfKtoEDU1josN6ta8L1hO6mIUCPUVeJ8KW8IXNn01SDvmOAH/mhcZdt6HQ+H8In eivpca4U+LIK0u/feHufyUHh+ug6/K4DUzEDoLzju6t1TyoXIDbhdWcrpjS7xXvL OlgD8jyO0LeoA9RIY/Q5Ly1kaugpb/M4ZycG3+1RfjmJxzwHDRibXmY3yOdMMtS6 mqbDK7D+k2Eb5Wc1f9qS/6YJy4lTFTbtxBxu1fdVSdgUjFHy -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:28 2026 by rpki-client