This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56367.roa File: AS56367.roa (raw, json) Hash identifier: 2tb35wLaY65ZHoeSlzr1zADZnIh7EvlT0vDigVRS3kA= Subject key identifier: 96:5E:5A:C3:D0:AB:ED:7A:CC:64:51:5A:63:BC:BB:0A:E5:9B:CA:83 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 0F5F5AE92D8DF0E3F55EE47AA9222314C0A1DD27 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56367.roa Signing time: Fri 23 Jan 2026 16:55:35 +0000 ROA not before: Fri 23 Jan 2026 16:50:35 +0000 ROA not after: Fri 22 Jan 2027 16:55:35 +0000 asID: 56367 IP address blocks: 141.11.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5f:5a:e9:2d:8d:f0:e3:f5:5e:e4:7a:a9:22:23:14:c0:a1:dd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 23 16:50:35 2026 GMT Not After : Jan 22 16:55:35 2027 GMT Subject: CN=965E5AC3D0ABED7ACC64515A63BCBB0AE59BCA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:50:51:03:93:10:3f:ea:96:64:fa:70:89: 40:80:bb:36:cc:1a:f8:c7:d0:e1:b8:eb:8d:60:43: db:af:a0:f2:c9:ad:97:df:a3:89:a4:08:46:d5:88: 1e:ee:ff:46:12:d6:a1:8a:c9:d0:eb:4a:46:37:f5: 70:46:f4:35:e4:dd:64:7b:c8:a8:c7:57:2d:cf:f5: c5:b8:b9:9d:ce:10:2d:d1:38:20:57:04:db:50:4f: d3:38:7b:57:47:a2:55:cd:e4:9b:73:c0:09:9f:c9: e9:3e:45:d1:07:50:36:7c:04:73:9b:ab:87:31:ba: a2:09:ed:b2:30:c0:20:4b:fb:97:83:3e:f9:ce:d9: db:66:84:40:3a:42:03:14:af:59:d8:39:86:93:21: 93:f4:fa:06:62:91:b2:8a:cd:b6:fd:97:d5:63:03: ab:64:7b:41:78:57:9c:4d:6f:df:42:50:4d:8f:22: 31:31:67:b6:5a:11:5e:6f:bd:ac:d2:d6:2f:0a:e9: 41:4a:25:38:3d:b4:73:49:35:c6:1f:75:a1:68:19: 14:46:0f:47:37:2b:26:ee:96:34:2b:70:07:85:bc: a0:fe:1f:a5:f3:aa:de:69:06:55:97:2f:b2:1f:da: 7c:cc:14:8f:47:29:dd:6c:39:67:ab:78:71:a0:df: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:5A:C3:D0:AB:ED:7A:CC:64:51:5A:63:BC:BB:0A:E5:9B:CA:83 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56367.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.108.0/24 Signature Algorithm: sha256WithRSAEncryption be:15:0b:0e:a1:e3:bf:9d:10:5a:9a:43:7e:ce:e8:b4:39:18: f8:c7:54:65:6b:42:af:9c:17:cf:0c:c4:87:3f:d7:55:a3:db: 48:d1:8c:2e:20:7f:26:d7:89:f0:4e:cb:28:47:46:aa:20:54: dd:99:34:44:c4:45:1c:af:5e:9f:33:27:83:ee:67:df:10:a4: 9d:2b:10:60:f2:d2:39:2d:aa:4c:d3:50:d2:c3:1a:21:4a:7d: 3c:0d:fd:5e:dc:18:36:7a:42:6a:1f:81:78:dd:02:03:dd:ca: 3b:36:2c:9a:a1:4c:f2:f9:0f:74:db:4b:c5:51:9e:ff:71:dc: 50:57:61:08:67:30:15:2b:58:c6:fa:06:71:3c:da:26:7b:0a: b7:01:21:73:ee:cc:3d:30:6a:6d:c5:ee:65:a7:55:01:0f:31: c6:ce:84:0e:da:86:27:0a:78:3c:4c:45:12:d4:02:78:26:c1: 69:0c:99:a1:a2:74:3a:be:17:0d:a3:cf:1b:06:99:f9:23:dc: 19:79:7b:14:38:a7:47:ca:b2:96:ac:4c:a0:85:04:25:f5:27: 11:0e:d1:4a:73:d0:2e:af:85:28:d1:2f:a6:d1:c2:7a:72:d6: a8:d5:7b:40:52:70:c6:62:13:a3:53:73:15:c4:7b:d2:24:74: a2:0b:df:20 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUD19a6S2N8OP1XuR6qSIjFMCh3ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMjMxNjUwMzVaFw0yNzAxMjIxNjU1MzVaMDMxMTAvBgNV BAMTKDk2NUU1QUMzRDBBQkVEN0FDQzY0NTE1QTYzQkNCQjBBRTU5QkNBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBFBRA5MQP+qWZPpwiUCAuzbM GvjH0OG4641gQ9uvoPLJrZffo4mkCEbViB7u/0YS1qGKydDrSkY39XBG9DXk3WR7 yKjHVy3P9cW4uZ3OEC3ROCBXBNtQT9M4e1dHolXN5JtzwAmfyek+RdEHUDZ8BHOb q4cxuqIJ7bIwwCBL+5eDPvnO2dtmhEA6QgMUr1nYOYaTIZP0+gZikbKKzbb9l9Vj A6tke0F4V5xNb99CUE2PIjExZ7ZaEV5vvazS1i8K6UFKJTg9tHNJNcYfdaFoGRRG D0c3KybuljQrcAeFvKD+H6Xzqt5pBlWXL7If2nzMFI9HKd1sOWereHGg3xYlAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUll5aw9Cr7XrMZFFaY7y7CuWbyoMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTYzNjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC2ww DQYJKoZIhvcNAQELBQADggEBAL4VCw6h47+dEFqaQ37O6LQ5GPjHVGVrQq+cF88M xIc/11Wj20jRjC4gfybXifBOyyhHRqogVN2ZNETERRyvXp8zJ4PuZ98QpJ0rEGDy 0jktqkzTUNLDGiFKfTwN/V7cGDZ6QmofgXjdAgPdyjs2LJqhTPL5D3TbS8VRnv9x 3FBXYQhnMBUrWMb6BnE82iZ7CrcBIXPuzD0wam3F7mWnVQEPMcbOhA7ahicKeDxM RRLUAngmwWkMmaGidDq+Fw2jzxsGmfkj3Bl5exQ4p0fKspasTKCFBCX1JxEO0Upz 0C6vhSjRL6bRwnpy1qjVe0BScMZiE6NTcxXEe9IkdKIL3yA= -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:03 2026 by rpki-client