This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154294.roa File: AS154294.roa (raw, json) Hash identifier: S+IR3J0i/LL/y//SuWcqrRzkW8UtvWDMoWpDLSPMfX0= Subject key identifier: 9C:19:79:CF:AA:77:BD:22:C9:05:DE:4B:9A:E2:6C:FF:9B:CE:9E:B4 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 338BB4EB783ACC2BBE9B5AD848249B91BFB1B1F8 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154294.roa Signing time: Fri 14 Nov 2025 08:45:04 +0000 ROA not before: Fri 14 Nov 2025 08:40:04 +0000 ROA not after: Fri 13 Nov 2026 08:45:04 +0000 asID: 154294 IP address blocks: 143.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8b:b4:eb:78:3a:cc:2b:be:9b:5a:d8:48:24:9b:91:bf:b1:b1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 14 08:40:04 2025 GMT Not After : Nov 13 08:45:04 2026 GMT Subject: CN=9C1979CFAA77BD22C905DE4B9AE26CFF9BCE9EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:61:ce:96:d9:af:83:5f:2a:60:37:3d:9a: df:6b:c5:92:9f:46:8f:1e:d4:26:24:e9:a9:43:28: f1:c7:d7:74:a9:ef:2e:ad:c9:a3:ed:f0:ee:e2:09: 6b:62:f4:5f:82:63:4d:26:79:71:25:b9:93:d2:35: 35:8b:cc:62:02:ad:68:52:93:3e:16:c6:5e:e8:00: e7:ac:fd:b5:47:8e:95:c5:b1:41:f7:02:0d:85:59: 64:17:3e:20:25:22:0c:91:cb:b9:7d:f4:39:c0:a3: cd:af:6f:a5:1e:a5:08:6b:cb:66:54:07:22:60:33: 58:ff:94:dc:69:29:5f:4a:cc:87:e1:64:9a:26:f1: 71:d1:46:d1:80:9c:af:90:8f:06:ca:43:c7:07:d9: 27:78:57:fc:1b:7b:be:0b:58:03:98:12:85:9d:1a: 76:bf:80:8b:7b:76:d2:42:73:62:d3:66:1b:86:4a: 36:cd:44:c4:fc:b1:5b:24:27:07:df:f7:8d:03:70: 51:a5:78:e8:77:43:03:65:e7:9b:90:ea:b2:0c:38: 22:bf:e9:59:79:4c:89:1a:1d:47:c3:5f:14:47:74: 3e:8d:30:fe:bd:66:74:48:a7:b6:9d:1c:6f:8b:9e: 32:e9:ba:de:a4:7b:3e:63:23:20:27:b1:02:91:be: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:19:79:CF:AA:77:BD:22:C9:05:DE:4B:9A:E2:6C:FF:9B:CE:9E:B4 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.31.0/24 Signature Algorithm: sha256WithRSAEncryption b9:10:67:9d:1a:98:4f:9e:c0:26:53:48:1b:e0:b3:ee:81:66: ba:00:0a:d4:7b:b4:57:f2:20:da:32:bb:73:3d:7f:62:a2:44: b8:6c:cf:fc:1a:69:e9:bb:60:ae:0f:64:11:61:d7:13:67:66: cb:23:2f:6f:cd:1a:47:f1:68:19:fd:c8:03:5e:2f:d0:da:e6: 77:13:29:8e:ad:76:e7:51:a5:22:68:a5:f0:6f:77:c5:c2:1c: c5:61:a3:1f:ef:6d:00:31:a4:1a:8d:ac:7d:65:47:47:3e:0b: e1:f8:21:19:48:d6:db:00:f2:fd:2d:8c:95:0e:78:ad:ba:89: d5:fa:47:f6:d7:44:d8:53:6c:e4:bc:31:2a:99:4d:d5:fc:73: 34:aa:cb:60:6e:3d:9a:31:9d:b0:33:a3:91:f0:f9:58:ad:0d: 44:92:cc:52:a1:08:2b:3d:c2:2c:46:ea:f3:58:37:b7:7b:37: 48:7d:9d:b8:1c:e2:30:88:2e:dc:fa:f3:cc:77:71:ce:0e:41: a8:ee:f7:c7:9d:79:c2:42:9b:1a:62:a5:c6:97:1a:8d:4c:ba: 5e:20:17:1c:a5:61:40:2d:20:0d:f4:41:96:3b:e4:5e:01:d5: 3a:be:98:85:8c:6c:bc:fd:92:b0:53:16:b2:6c:da:69:3d:94: 29:fc:c7:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUM4u063g6zCu+m1rYSCSbkb+xsfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMTQwODQwMDRaFw0yNjExMTMwODQ1MDRaMDMxMTAvBgNV BAMTKDlDMTk3OUNGQUE3N0JEMjJDOTA1REU0QjlBRTI2Q0ZGOUJDRTlFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeWHOltmvg18qYDc9mt9rxZKf Ro8e1CYk6alDKPHH13Sp7y6tyaPt8O7iCWti9F+CY00meXEluZPSNTWLzGICrWhS kz4Wxl7oAOes/bVHjpXFsUH3Ag2FWWQXPiAlIgyRy7l99DnAo82vb6UepQhry2ZU ByJgM1j/lNxpKV9KzIfhZJom8XHRRtGAnK+QjwbKQ8cH2Sd4V/wbe74LWAOYEoWd Gna/gIt7dtJCc2LTZhuGSjbNRMT8sVskJwff940DcFGleOh3QwNl55uQ6rIMOCK/ 6Vl5TIkaHUfDXxRHdD6NMP69ZnRIp7adHG+LnjLput6kez5jIyAnsQKRvl5lAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUnBl5z6p3vSLJBd5LmuJs/5vOnrQwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTU0Mjk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQf MA0GCSqGSIb3DQEBCwUAA4IBAQC5EGedGphPnsAmU0gb4LPugWa6AArUe7RX8iDa MrtzPX9iokS4bM/8Gmnpu2CuD2QRYdcTZ2bLIy9vzRpH8WgZ/cgDXi/Q2uZ3EymO rXbnUaUiaKXwb3fFwhzFYaMf720AMaQajax9ZUdHPgvh+CEZSNbbAPL9LYyVDnit uonV+kf210TYU2zkvDEqmU3V/HM0qstgbj2aMZ2wM6OR8PlYrQ1EksxSoQgrPcIs RurzWDe3ezdIfZ24HOIwiC7c+vPMd3HODkGo7vfHnXnCQpsaYqXGlxqNTLpeIBcc pWFALSAN9EGWO+ReAdU6vpiFjGy8/ZKwUxaybNppPZQp/Mea -----END CERTIFICATE-----Generated at Fri Dec 5 17:06:44 2025 by rpki-client