This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58065.roa File: AS58065.roa (raw, json) Hash identifier: eXLMEFY1vEzJOJgS3rjO79q+kjZwVVDtkKkfi/TE7TU= Subject key identifier: 9E:18:84:0E:65:87:81:FA:CA:B4:72:9D:94:C2:D4:F1:C8:D4:42:D3 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 178A31E0087DE793B555F1D02C04A839018738AD Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58065.roa Signing time: Thu 15 Jan 2026 14:28:49 +0000 ROA not before: Thu 15 Jan 2026 14:23:49 +0000 ROA not after: Thu 14 Jan 2027 14:28:49 +0000 asID: 58065 IP address blocks: 141.11.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8a:31:e0:08:7d:e7:93:b5:55:f1:d0:2c:04:a8:39:01:87:38:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 15 14:23:49 2026 GMT Not After : Jan 14 14:28:49 2027 GMT Subject: CN=9E18840E658781FACAB4729D94C2D4F1C8D442D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:bd:40:59:c9:1d:13:2b:0a:ee:95:0b:97: 6c:09:a7:34:5b:02:62:f4:26:5d:7d:1b:75:88:3d: ef:68:25:6f:7b:58:bf:4a:66:50:a5:7c:b2:e5:a8: f7:8b:a0:67:6b:de:cb:89:21:e8:63:aa:26:11:81: de:29:49:d5:1a:18:51:9d:cd:1f:0c:f8:60:42:e7: 2f:b3:63:25:ea:6b:51:dd:10:a2:47:44:e9:4a:d5: b3:fe:c4:e1:16:79:94:60:54:0c:cc:a7:5a:35:06: bc:80:b3:68:3c:ec:87:51:a0:74:5c:b3:ac:b7:92: 39:98:7e:4e:b0:46:13:26:43:8d:3a:31:95:60:41: f4:3c:a2:7f:23:f9:34:dd:15:e6:ac:08:c6:ca:0f: f3:7d:74:d5:6f:7a:01:37:2e:72:3b:ba:17:35:c4: fe:cf:34:23:74:8d:c3:0b:f6:8f:bd:b0:8a:8c:9d: ea:03:60:6c:29:49:40:cf:3c:72:7b:30:91:7f:b3: 45:03:55:5e:71:30:f0:0e:af:62:32:b3:24:97:7f: 6a:4f:d0:4b:79:31:9d:78:c6:8c:2f:d9:f9:c9:92: 10:a4:e7:ec:b6:58:05:7f:88:95:56:4c:31:25:04: 3f:c7:a6:c2:e5:9f:a1:14:78:b7:a3:2b:62:e7:a4: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:84:0E:65:87:81:FA:CA:B4:72:9D:94:C2:D4:F1:C8:D4:42:D3 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.16.0/24 Signature Algorithm: sha256WithRSAEncryption c5:8c:98:c6:5e:74:da:d7:03:f8:0b:16:83:2f:11:52:af:61: 1d:48:83:45:8f:5e:02:7a:57:a1:27:95:26:93:b8:06:2d:04: 62:b9:3b:b9:f2:70:d6:84:06:a0:87:d7:17:f4:bc:eb:fa:c0: df:99:07:fe:5e:eb:75:5b:0b:2a:d8:9e:26:cf:22:30:32:59: 20:9a:fb:69:47:bc:59:66:fd:b3:f0:e1:f1:c5:6f:35:f7:ed: 5e:e5:50:d2:f4:70:c9:37:0d:14:eb:36:94:35:a4:33:2a:eb: 80:6a:fb:df:71:67:83:59:6c:07:69:55:79:53:9f:fc:ea:21: c2:68:52:ae:51:ab:b8:38:e7:b3:0e:f9:76:92:84:c8:bc:fb: b2:be:9f:5d:ad:88:af:62:5f:d5:f5:c3:4c:80:c4:71:bb:d1: 01:39:d8:09:a3:c6:76:ca:3c:e5:28:a8:38:46:d9:fb:93:ab: 0a:c1:b0:9e:7c:e5:39:8f:48:d3:17:12:42:b9:0a:f5:2d:03: a5:bc:58:5c:6b:f7:f7:e1:3d:aa:40:49:81:be:e3:fd:fd:b9: 55:bd:5d:40:23:9a:16:47:d7:67:be:07:e4:a1:a0:7b:4f:b3: 18:58:50:45:6f:87:53:60:dd:f3:95:9e:1b:fd:ce:2f:3e:6f: aa:be:d6:77 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUF4ox4Ah955O1VfHQLASoOQGHOK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTUxNDIzNDlaFw0yNzAxMTQxNDI4NDlaMDMxMTAvBgNV BAMTKDlFMTg4NDBFNjU4NzgxRkFDQUI0NzI5RDk0QzJENEYxQzhENDQyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJL1AWckdEysK7pULl2wJpzRb AmL0Jl19G3WIPe9oJW97WL9KZlClfLLlqPeLoGdr3suJIehjqiYRgd4pSdUaGFGd zR8M+GBC5y+zYyXqa1HdEKJHROlK1bP+xOEWeZRgVAzMp1o1BryAs2g87IdRoHRc s6y3kjmYfk6wRhMmQ406MZVgQfQ8on8j+TTdFeasCMbKD/N9dNVvegE3LnI7uhc1 xP7PNCN0jcML9o+9sIqMneoDYGwpSUDPPHJ7MJF/s0UDVV5xMPAOr2IysySXf2pP 0Et5MZ14xowv2fnJkhCk5+y2WAV/iJVWTDElBD/HpsLln6EUeLejK2LnpDP9AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUnhiEDmWHgfrKtHKdlMLU8cjUQtMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTgwNjUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCxAw DQYJKoZIhvcNAQELBQADggEBAMWMmMZedNrXA/gLFoMvEVKvYR1Ig0WPXgJ6V6En lSaTuAYtBGK5O7nycNaEBqCH1xf0vOv6wN+ZB/5e63VbCyrYnibPIjAyWSCa+2lH vFlm/bPw4fHFbzX37V7lUNL0cMk3DRTrNpQ1pDMq64Bq+99xZ4NZbAdpVXlTn/zq IcJoUq5Rq7g457MO+XaShMi8+7K+n12tiK9iX9X1w0yAxHG70QE52AmjxnbKPOUo qDhG2fuTqwrBsJ585TmPSNMXEkK5CvUtA6W8WFxr9/fhPapASYG+4/39uVW9XUAj mhZH12e+B+ShoHtPsxhYUEVvh1Ng3fOVnhv9zi8+b6q+1nc= -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:44 2026 by rpki-client