This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49981.roa File: AS49981.roa (raw, json) Hash identifier: UtDm8nqUbwhJf8Ayic/SInoJmKmMz48sBZxN9fECoas= Subject key identifier: A1:FA:73:52:B2:33:B9:43:07:CC:50:CE:0F:40:D2:06:10:03:50:1F Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 075AC3580E7EBD6A4A9DF9EFBC0AE1DC5430A84B Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49981.roa Signing time: Wed 14 Jan 2026 00:55:33 +0000 ROA not before: Wed 14 Jan 2026 00:50:33 +0000 ROA not after: Wed 13 Jan 2027 00:55:33 +0000 asID: 49981 IP address blocks: 141.11.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5a:c3:58:0e:7e:bd:6a:4a:9d:f9:ef:bc:0a:e1:dc:54:30:a8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 14 00:50:33 2026 GMT Not After : Jan 13 00:55:33 2027 GMT Subject: CN=A1FA7352B233B94307CC50CE0F40D2061003501F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:39:a6:97:11:d1:e6:41:1f:3d:05:f3:59: 24:e1:f2:0f:ba:2a:d1:ce:b2:a3:8f:b9:9b:44:b5: a3:48:ef:2f:cc:59:e7:d5:5e:2a:76:2b:df:c5:c2: 84:43:ab:d2:24:3d:79:ab:db:b8:27:da:3d:9a:5c: b1:73:8e:b6:b0:69:78:0a:4b:29:9b:34:60:fc:f1: 7d:ab:09:2d:d0:f0:96:ac:43:a3:ab:9e:63:0c:1a: 8e:53:2a:aa:f3:76:71:fe:ed:51:bf:00:82:94:09: 8c:e0:62:69:94:80:f4:19:1f:b3:81:6f:b0:f3:1c: 62:ae:ac:31:92:ae:68:0a:47:8a:58:56:cf:6f:84: 16:74:5e:5c:0a:27:ce:97:d4:7d:b3:4e:99:4d:b8: 0a:e3:87:e5:48:85:5c:40:90:7c:8c:81:21:09:48: 3c:76:91:40:64:04:26:0a:56:cc:ee:53:af:5c:38: 42:5c:7f:15:b2:2c:c0:4b:33:a8:1b:70:01:99:d2: d0:b3:1a:ad:6e:b8:fa:cd:55:18:fc:12:79:8a:8e: 5a:0c:61:7b:87:16:0a:58:19:9d:ba:03:89:49:31: 1a:6b:7d:a3:a8:d2:04:66:e3:79:f3:99:7b:4c:07: 8c:e3:9a:45:e5:9d:14:a1:17:68:6e:bd:b0:7e:b5: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FA:73:52:B2:33:B9:43:07:CC:50:CE:0F:40:D2:06:10:03:50:1F X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.0.0/24 Signature Algorithm: sha256WithRSAEncryption a7:70:0d:2a:b5:ed:31:62:91:db:3c:29:bf:f6:60:b7:a0:ad: 6d:60:4b:4e:34:29:3c:ec:50:35:fb:3d:35:75:ed:a8:24:e0: 63:8e:ab:ef:8b:19:24:dc:18:0b:43:c3:7d:89:3d:d2:8c:ad: 4a:ac:2e:95:c5:a1:a6:f2:33:35:cc:77:b9:05:be:07:ab:b1: 79:01:9d:5a:f7:06:db:69:81:03:1b:3e:0b:c4:10:bb:43:e1: ba:83:1a:24:d6:4d:16:80:4a:27:f5:2a:23:17:1d:f4:1b:66: d7:9f:4d:d6:9f:94:5f:03:a2:e8:b9:4f:20:bd:f1:8d:1d:ca: 82:0d:92:ed:46:2d:99:c9:dc:4a:22:b0:43:ea:ad:00:ee:61: 40:fa:d7:56:25:2a:89:d5:e9:b3:50:40:fc:39:23:27:28:a0: ca:11:35:92:71:b3:82:89:16:50:e0:b0:52:10:6b:8a:8a:83: 3d:a8:21:16:0c:43:73:0f:4e:6b:02:79:cb:25:bd:7f:87:eb: 31:90:ac:1c:d1:7f:fb:00:b3:fc:d8:73:5a:5e:60:df:03:bc: e5:77:ca:91:b9:46:f8:23:6c:36:85:4b:05:c3:ef:6c:85:41: a1:e0:8c:c5:1e:a7:7b:47:88:6a:0b:94:d1:18:bb:1c:e6:20: 69:c2:42:c7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUB1rDWA5+vWpKnfnvvArh3FQwqEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTQwMDUwMzNaFw0yNzAxMTMwMDU1MzNaMDMxMTAvBgNV BAMTKEExRkE3MzUyQjIzM0I5NDMwN0NDNTBDRTBGNDBEMjA2MTAwMzUwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvDmmlxHR5kEfPQXzWSTh8g+6 KtHOsqOPuZtEtaNI7y/MWefVXip2K9/FwoRDq9IkPXmr27gn2j2aXLFzjrawaXgK SymbNGD88X2rCS3Q8JasQ6OrnmMMGo5TKqrzdnH+7VG/AIKUCYzgYmmUgPQZH7OB b7DzHGKurDGSrmgKR4pYVs9vhBZ0XlwKJ86X1H2zTplNuArjh+VIhVxAkHyMgSEJ SDx2kUBkBCYKVszuU69cOEJcfxWyLMBLM6gbcAGZ0tCzGq1uuPrNVRj8EnmKjloM YXuHFgpYGZ26A4lJMRprfaOo0gRm43nzmXtMB4zjmkXlnRShF2huvbB+tSQVAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUofpzUrIzuUMHzFDOD0DSBhADUB8wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDk5ODEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCwAw DQYJKoZIhvcNAQELBQADggEBAKdwDSq17TFikds8Kb/2YLegrW1gS040KTzsUDX7 PTV17agk4GOOq++LGSTcGAtDw32JPdKMrUqsLpXFoabyMzXMd7kFvgersXkBnVr3 BttpgQMbPgvEELtD4bqDGiTWTRaASif1KiMXHfQbZtefTdaflF8Doui5TyC98Y0d yoINku1GLZnJ3EoisEPqrQDuYUD611YlKonV6bNQQPw5IycooMoRNZJxs4KJFlDg sFIQa4qKgz2oIRYMQ3MPTmsCecslvX+H6zGQrBzRf/sAs/zYc1peYN8DvOV3ypG5 RvgjbDaFSwXD72yFQaHgjMUep3tHiGoLlNEYuxzmIGnCQsc= -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:25 2026 by rpki-client