This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53427.roa File: AS53427.roa (raw, json) Hash identifier: XhQDd/ywlragySRx6rxdm4oJQPT0T6/m6yWgZVsSDlo= Subject key identifier: 99:ED:1F:CF:8D:1F:54:88:0F:A2:6F:F2:98:44:F6:20:8E:3E:37:A0 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 1356D8B1EC0BE14F4B93962B0027B3586C5A0126 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53427.roa Signing time: Fri 09 Jan 2026 21:21:39 +0000 ROA not before: Fri 09 Jan 2026 21:16:39 +0000 ROA not after: Fri 08 Jan 2027 21:21:39 +0000 asID: 53427 IP address blocks: 141.11.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:56:d8:b1:ec:0b:e1:4f:4b:93:96:2b:00:27:b3:58:6c:5a:01:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 9 21:16:39 2026 GMT Not After : Jan 8 21:21:39 2027 GMT Subject: CN=99ED1FCF8D1F54880FA26FF29844F6208E3E37A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:d6:7b:5d:67:00:67:87:8f:0b:ef:3a:17: 1c:f7:78:c2:23:5c:d3:67:49:99:83:9d:a9:45:3d: 8a:3d:26:a9:e1:c0:8a:a5:84:8b:39:60:e6:ac:bd: bd:60:86:4f:5c:57:70:91:01:b5:b5:64:ed:98:c8: 07:60:cd:62:4e:a5:46:5a:47:53:d8:2a:a9:aa:6a: 22:7e:b6:21:54:32:e3:2f:ef:9c:b2:48:69:a9:e9: f4:ea:2a:bb:37:32:ec:20:07:72:8d:a8:ae:ef:87: 36:28:90:a6:f0:a8:5c:f7:6d:2f:27:eb:36:32:cb: 1f:cf:4a:e8:48:5d:89:47:c2:c5:00:10:15:47:f5: 52:48:93:10:f1:81:c2:45:1f:d4:b9:1b:25:1d:91: a6:3e:56:18:d0:44:6f:ea:81:c2:03:f7:8a:e4:9a: 49:2e:41:e1:3a:54:b3:b4:71:73:bd:24:02:55:29: 00:a0:6d:a5:5b:ca:60:f2:b3:f9:21:b8:1c:45:46: 5e:d3:13:e4:0b:94:bc:1a:d5:48:de:8a:b9:15:3b: a3:42:7d:88:76:d0:4d:dd:46:61:93:49:df:c5:80: ab:4a:25:4d:5a:45:ef:01:4d:0f:88:f5:2f:03:5b: 01:cb:8e:4b:c4:69:d5:b4:59:f1:73:e6:cb:18:1d: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:1F:CF:8D:1F:54:88:0F:A2:6F:F2:98:44:F6:20:8E:3E:37:A0 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.34.0/24 Signature Algorithm: sha256WithRSAEncryption 98:28:48:dd:8d:c0:fb:87:70:1d:38:ad:00:c1:c4:5b:4a:fc: d0:50:28:b1:c7:d2:6f:7b:6b:ce:f7:e9:ed:d5:eb:e9:ab:91: 50:bd:83:ff:b0:02:12:2b:20:5e:da:75:11:33:bd:9c:19:1c: ea:bc:37:cb:78:1c:9d:8a:cc:ad:df:2c:3f:fe:10:04:17:f3: 82:fc:dc:33:4f:bb:94:8e:4f:6e:83:d8:4b:33:85:25:90:ff: e9:8a:b2:8f:bd:93:d8:ba:dd:c5:fe:d6:92:cb:c0:12:9b:a3: a6:ea:3f:29:23:8d:d2:14:d8:ac:89:ec:a9:32:b0:78:91:1a: 90:f8:ad:bf:4b:e7:06:29:8e:76:bc:9b:37:c9:46:78:e5:fd: ed:99:f2:60:70:b9:10:ae:23:e2:58:98:c5:ac:51:ed:19:42: ad:b6:08:09:75:34:d6:25:bc:56:49:e2:cc:43:18:f8:24:d9: 03:30:30:47:e6:7b:20:bb:28:fd:ae:be:e3:0f:4c:7f:65:73: 4f:53:dd:d6:0a:54:bb:75:55:41:be:15:3a:c3:df:78:37:da: b1:e0:64:df:96:bf:87:d9:c1:05:6c:d2:a3:47:52:29:eb:f0: 9f:b9:e6:bc:44:e3:5b:22:1e:b2:ee:ad:00:d2:df:f2:60:2e: c7:5f:ef:fb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUE1bYsewL4U9Lk5YrACezWGxaASYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMDkyMTE2MzlaFw0yNzAxMDgyMTIxMzlaMDMxMTAvBgNV BAMTKDk5RUQxRkNGOEQxRjU0ODgwRkEyNkZGMjk4NDRGNjIwOEUzRTM3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4dZ7XWcAZ4ePC+86Fxz3eMIj XNNnSZmDnalFPYo9JqnhwIqlhIs5YOasvb1ghk9cV3CRAbW1ZO2YyAdgzWJOpUZa R1PYKqmqaiJ+tiFUMuMv75yySGmp6fTqKrs3MuwgB3KNqK7vhzYokKbwqFz3bS8n 6zYyyx/PSuhIXYlHwsUAEBVH9VJIkxDxgcJFH9S5GyUdkaY+VhjQRG/qgcID94rk mkkuQeE6VLO0cXO9JAJVKQCgbaVbymDys/khuBxFRl7TE+QLlLwa1UjeirkVO6NC fYh20E3dRmGTSd/FgKtKJU1aRe8BTQ+I9S8DWwHLjkvEadW0WfFz5ssYHX0RAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUme0fz40fVIgPom/ymET2II4+N6AwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTM0Mjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCyIw DQYJKoZIhvcNAQELBQADggEBAJgoSN2NwPuHcB04rQDBxFtK/NBQKLHH0m97a873 6e3V6+mrkVC9g/+wAhIrIF7adREzvZwZHOq8N8t4HJ2KzK3fLD/+EAQX84L83DNP u5SOT26D2EszhSWQ/+mKso+9k9i63cX+1pLLwBKbo6bqPykjjdIU2KyJ7KkysHiR GpD4rb9L5wYpjna8mzfJRnjl/e2Z8mBwuRCuI+JYmMWsUe0ZQq22CAl1NNYlvFZJ 4sxDGPgk2QMwMEfmeyC7KP2uvuMPTH9lc09T3dYKVLt1VUG+FTrD33g32rHgZN+W v4fZwQVs0qNHUinr8J+55rxE41siHrLurQDS3/JgLsdf7/s= -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:43 2026 by rpki-client