This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa File: AS53107.roa (raw, json) Hash identifier: BXFzglvrs1oRMn3K0w4kmDevObf65TGJCk7gaI/4xEM= Subject key identifier: 5E:23:1F:32:CF:F0:79:11:B2:BA:03:9A:0F:3D:9A:0F:D9:AF:23:F6 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 4DB58430914BFEFBB53B692B95B7589A73209032 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa Signing time: Mon 05 Jan 2026 21:55:33 +0000 ROA not before: Mon 05 Jan 2026 21:50:33 +0000 ROA not after: Mon 04 Jan 2027 21:55:33 +0000 asID: 53107 IP address blocks: 141.11.72.0/23 maxlen: 23 141.11.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b5:84:30:91:4b:fe:fb:b5:3b:69:2b:95:b7:58:9a:73:20:90:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 5 21:50:33 2026 GMT Not After : Jan 4 21:55:33 2027 GMT Subject: CN=5E231F32CFF07911B2BA039A0F3D9A0FD9AF23F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:54:15:25:29:bb:50:f8:23:75:2c:eb:35: a5:d0:a2:86:b0:f6:86:83:77:c9:26:67:a6:50:5d: 68:73:e3:18:e1:e1:4f:d7:e2:70:cf:e0:43:18:70: 9a:29:17:04:53:6e:89:08:34:70:98:4f:40:b2:bf: ae:2c:c3:14:a1:a8:6f:96:07:a2:3d:b7:1a:31:80: 1a:08:a4:88:06:3f:87:6c:91:37:f4:c8:05:9b:1c: c2:43:e8:31:83:2e:ae:de:96:d6:7a:4c:23:6e:52: 68:03:f1:f2:24:a0:9e:93:c6:74:2e:4d:44:ac:2d: 56:a3:08:b0:cc:2a:5c:90:e8:7e:16:a3:a2:4b:d1: ee:70:ae:15:25:0e:a8:7e:56:3f:d4:af:b7:e0:20: 69:26:78:6f:f1:00:93:33:cc:b8:af:ca:b0:b6:49: bd:4e:00:19:9a:05:61:a7:c0:a0:cc:b9:25:e0:b7: 8c:46:c2:4a:8f:48:f7:a8:3a:5e:e5:e4:38:dc:f4: d7:4d:0b:46:82:4b:13:aa:e3:ff:36:4a:5e:5f:85: 69:94:db:d2:fc:c7:5e:eb:f7:b2:50:33:94:fa:ce: d1:e7:4d:43:c3:e3:66:ff:73:36:2a:fe:1a:3e:d2: 39:66:8a:33:af:92:b3:8a:a5:fc:4b:1c:d9:d5:af: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:1F:32:CF:F0:79:11:B2:BA:03:9A:0F:3D:9A:0F:D9:AF:23:F6 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.72.0/23 141.11.128.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:5e:1d:0d:c2:26:6f:4a:77:fc:79:07:ff:a8:cc:67:0b:8e: e9:66:49:cb:b6:33:10:98:c8:9c:a9:f2:2e:95:00:ab:06:bf: 32:48:78:5e:ee:a5:51:93:97:a6:8c:68:14:8d:f1:fc:df:69: 90:10:0a:e6:02:ec:b8:1d:79:d3:b3:ce:30:43:1f:77:85:26: 48:5c:c0:55:fd:d2:ef:3a:47:de:af:5d:71:ad:9b:df:ea:16: 29:f9:16:f8:0e:46:d0:53:41:55:fe:76:2e:14:17:83:c0:3c: 67:c4:0e:99:3a:df:dc:d2:7e:31:2b:42:89:64:19:ce:70:92: c9:32:15:6a:84:46:38:cf:02:5d:36:3f:21:64:9b:28:f9:66: 77:43:d9:14:81:e7:db:d8:c5:08:52:e3:3a:8a:5c:88:e1:b0: fd:f6:20:a0:7f:6f:21:05:34:f6:d6:d1:b0:66:78:05:8f:2f: 5f:47:a7:65:16:06:76:8e:92:ae:1b:5b:18:18:41:4f:e1:0e: 9d:4a:a0:4e:cf:c6:4d:e5:09:fb:8d:94:63:47:e9:22:df:30: cc:c0:1b:80:8c:93:2e:79:d1:5a:7c:d0:a4:dc:b6:a2:b7:d9: 45:f0:07:52:7f:ab:7b:6b:b9:36:5f:1e:7a:fc:79:9e:df:e0: b6:01:60:0b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTbWEMJFL/vu1O2krlbdYmnMgkDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMDUyMTUwMzNaFw0yNzAxMDQyMTU1MzNaMDMxMTAvBgNV BAMTKDVFMjMxRjMyQ0ZGMDc5MTFCMkJBMDM5QTBGM0Q5QTBGRDlBRjIzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTOlQVJSm7UPgjdSzrNaXQooaw 9oaDd8kmZ6ZQXWhz4xjh4U/X4nDP4EMYcJopFwRTbokINHCYT0Cyv64swxShqG+W B6I9txoxgBoIpIgGP4dskTf0yAWbHMJD6DGDLq7eltZ6TCNuUmgD8fIkoJ6TxnQu TUSsLVajCLDMKlyQ6H4Wo6JL0e5wrhUlDqh+Vj/Ur7fgIGkmeG/xAJMzzLivyrC2 Sb1OABmaBWGnwKDMuSXgt4xGwkqPSPeoOl7l5Djc9NdNC0aCSxOq4/82Sl5fhWmU 29L8x17r97JQM5T6ztHnTUPD42b/czYq/ho+0jlmijOvkrOKpfxLHNnVr4XJAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUXiMfMs/weRGyugOaDz2aD9mvI/YwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTMxMDcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAGNC0gD BAGNC4AwDQYJKoZIhvcNAQELBQADggEBAE9eHQ3CJm9Kd/x5B/+ozGcLjulmScu2 MxCYyJyp8i6VAKsGvzJIeF7upVGTl6aMaBSN8fzfaZAQCuYC7LgdedOzzjBDH3eF JkhcwFX90u86R96vXXGtm9/qFin5FvgORtBTQVX+di4UF4PAPGfEDpk639zSfjEr QolkGc5wkskyFWqERjjPAl02PyFkmyj5ZndD2RSB59vYxQhS4zqKXIjhsP32IKB/ byEFNPbW0bBmeAWPL19Hp2UWBnaOkq4bWxgYQU/hDp1KoE7Pxk3lCfuNlGNH6SLf MMzAG4CMky550Vp80KTctqK32UXwB1J/q3truTZfHnr8eZ7f4LYBYAs= -----END CERTIFICATE-----Generated at Tue Jan 20 22:20:36 2026 by rpki-client