This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8100.roa File: AS8100.roa (raw, json) Hash identifier: NjRoHOTQ5DtabaLmNmNT31GvboWnV5vZHsL6Y50yDDo= Subject key identifier: 7F:6D:0B:6F:04:72:66:79:B4:E7:D6:AE:01:9D:82:77:D8:E1:E1:3D Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 2735F40E2DF6F04746DB2C9369E1B14D2D40D22A Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8100.roa Signing time: Thu 15 Jan 2026 14:26:00 +0000 ROA not before: Thu 15 Jan 2026 14:21:00 +0000 ROA not after: Thu 14 Jan 2027 14:26:00 +0000 asID: 8100 IP address blocks: 141.11.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:35:f4:0e:2d:f6:f0:47:46:db:2c:93:69:e1:b1:4d:2d:40:d2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 15 14:21:00 2026 GMT Not After : Jan 14 14:26:00 2027 GMT Subject: CN=7F6D0B6F04726679B4E7D6AE019D8277D8E1E13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:6e:ad:a8:d2:60:a7:4b:ee:9b:cd:0d:ca: cf:f2:89:ae:63:36:de:b8:a5:3f:bf:42:77:b8:09: 2f:9c:d6:7b:56:9e:33:77:61:3d:14:7d:b6:4b:cc: 59:de:db:83:9f:c7:88:31:47:20:a9:48:9b:d9:41: a9:37:f9:5e:55:3c:12:3a:48:7d:a9:68:a5:d8:63: 57:c0:dd:2c:a5:2e:c3:e5:2c:71:be:30:3f:a0:c2: 98:dd:b1:d3:39:ce:21:ee:73:0c:47:79:b7:cb:49: 26:a6:d1:05:18:a0:49:90:24:a1:08:77:b8:0a:d4: 91:32:1d:05:93:12:77:ee:e6:b5:57:b9:96:c3:13: fd:28:91:11:f5:82:a7:59:7c:24:2b:9b:e1:64:e3: dc:e8:92:78:27:4f:34:3e:e3:2e:5d:6c:af:3e:b5: 8f:4e:66:3a:bb:34:5e:f6:3d:43:3b:3b:64:19:a0: 65:70:8b:77:c8:a2:b2:1a:92:7c:54:53:cc:ec:5b: a7:82:4f:f6:87:8b:55:0f:75:84:0c:3a:b5:45:5d: b3:7f:72:86:45:0c:f0:80:fd:59:ce:dd:2d:22:21: 89:e8:1b:6a:5f:4e:ee:1b:e4:38:7d:7d:36:85:5b: 13:65:bb:dc:86:21:b5:31:f2:08:b8:1b:17:c8:c5: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:0B:6F:04:72:66:79:B4:E7:D6:AE:01:9D:82:77:D8:E1:E1:3D X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8100.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.251.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:53:57:a1:4f:0f:cd:02:ce:2d:fe:82:02:d0:51:57:d6:ea: fc:e9:13:f6:5f:18:84:82:49:52:c4:4a:15:33:4b:8c:d3:a5: 40:55:b1:15:30:6e:4e:26:51:1a:91:cd:1d:0c:90:04:89:7d: 9f:45:92:94:0c:60:25:22:ac:d3:99:c6:e7:0e:e1:84:46:87: e6:8f:79:4e:9e:53:f4:22:4d:08:5e:d6:b4:67:84:f9:cc:1a: e5:4d:9a:44:b6:38:48:40:14:e9:5a:8c:e1:43:e0:fa:23:39: 4e:9a:ba:61:1c:15:56:4b:ea:cd:84:50:5e:27:bd:73:b2:eb: 01:9c:b9:d5:3b:f2:93:8e:e3:c2:9a:5f:fe:89:af:b8:6c:99: c5:e0:b5:f8:dc:72:bd:55:6c:c0:59:ed:0e:03:5a:1a:ca:f2: f5:5c:e2:83:f8:d3:1e:8d:eb:59:95:71:b1:7b:a5:6a:f5:bd: bf:41:b3:00:a1:79:9f:30:d3:e9:f5:e1:35:7a:b6:6e:40:4c: 5e:b3:69:a3:5b:68:3b:46:e8:ec:27:81:25:2d:19:be:b5:cb: 1e:e3:4e:c6:bd:1c:9e:64:2f:a7:5d:bf:39:1d:bb:32:64:f4: 40:42:f7:25:fa:87:11:22:8a:34:14:d1:c0:0c:3b:05:26:0a: 82:6c:18:fd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUJzX0Di328EdG2yyTaeGxTS1A0iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTUxNDIxMDBaFw0yNzAxMTQxNDI2MDBaMDMxMTAvBgNV BAMTKDdGNkQwQjZGMDQ3MjY2NzlCNEU3RDZBRTAxOUQ4Mjc3RDhFMUUxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KG6tqNJgp0vum80Nys/yia5j Nt64pT+/Qne4CS+c1ntWnjN3YT0UfbZLzFne24Ofx4gxRyCpSJvZQak3+V5VPBI6 SH2paKXYY1fA3SylLsPlLHG+MD+gwpjdsdM5ziHucwxHebfLSSam0QUYoEmQJKEI d7gK1JEyHQWTEnfu5rVXuZbDE/0okRH1gqdZfCQrm+Fk49zokngnTzQ+4y5dbK8+ tY9OZjq7NF72PUM7O2QZoGVwi3fIorIaknxUU8zsW6eCT/aHi1UPdYQMOrVFXbN/ coZFDPCA/VnO3S0iIYnoG2pfTu4b5Dh9fTaFWxNlu9yGIbUx8gi4GxfIxas1AgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUf20LbwRyZnm059auAZ2Cd9jh4T0wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTODEwMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0L+zAN BgkqhkiG9w0BAQsFAAOCAQEAWlNXoU8PzQLOLf6CAtBRV9bq/OkT9l8YhIJJUsRK FTNLjNOlQFWxFTBuTiZRGpHNHQyQBIl9n0WSlAxgJSKs05nG5w7hhEaH5o95Tp5T 9CJNCF7WtGeE+cwa5U2aRLY4SEAU6VqM4UPg+iM5Tpq6YRwVVkvqzYRQXie9c7Lr AZy51Tvyk47jwppf/omvuGyZxeC1+NxyvVVswFntDgNaGsry9Vzig/jTHo3rWZVx sXulavW9v0GzAKF5nzDT6fXhNXq2bkBMXrNpo1toO0bo7CeBJS0ZvrXLHuNOxr0c nmQvp12/OR27MmT0QEL3JfqHESKKNBTRwAw7BSYKgmwY/Q== -----END CERTIFICATE-----Generated at Tue Jan 20 22:20:37 2026 by rpki-client