This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154402.roa File: AS154402.roa (raw, json) Hash identifier: 4CFUzREcOPJG/IusAnLFHgkPlKB53dPvJAYlaZ8dX9w= Subject key identifier: FE:49:15:2D:04:13:18:82:0F:54:B1:24:40:8A:A7:70:45:31:44:03 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 2AE42EF29A4AE73E5EDF91804A5055F37B8EE7E5 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154402.roa Signing time: Sat 20 Dec 2025 15:58:56 +0000 ROA not before: Sat 20 Dec 2025 15:53:56 +0000 ROA not after: Sat 19 Dec 2026 15:58:56 +0000 asID: 154402 IP address blocks: 143.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e4:2e:f2:9a:4a:e7:3e:5e:df:91:80:4a:50:55:f3:7b:8e:e7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 20 15:53:56 2025 GMT Not After : Dec 19 15:58:56 2026 GMT Subject: CN=FE49152D041318820F54B124408AA77045314403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:6f:95:51:a6:64:72:c6:d9:e0:70:e2:f0: e7:3f:de:81:40:18:3b:52:43:b5:d0:8b:82:03:f5: 65:ed:f8:79:b2:f1:52:ce:49:04:ca:22:8d:8c:64: 9b:f1:8b:dc:c5:c5:12:96:75:cc:e0:77:ec:f4:00: 27:10:22:26:34:3d:bf:38:1e:f8:c2:65:34:75:0b: 6a:aa:29:5f:3d:88:23:fe:59:af:8c:21:2d:04:56: 99:f4:24:f5:f4:60:52:45:17:53:d4:49:6b:f1:b7: c2:19:94:4f:98:cd:2e:86:5a:93:9a:2d:ef:4d:f1: 1f:89:57:13:cf:d9:68:7a:4b:36:6f:c6:69:9f:c5: af:e8:2e:e5:e1:f0:98:19:8a:9e:d5:25:47:72:22: 1c:4c:78:02:49:72:25:18:08:06:9d:79:98:67:8b: 14:22:2e:31:70:1d:e6:20:3d:70:9f:c4:0b:d8:a3: 13:d4:35:1e:6f:12:2c:ec:f8:c8:c5:ae:0b:7d:e1: 8b:ee:0c:9d:15:7e:7d:09:89:be:d9:16:28:ca:e8: 28:ee:c5:d5:99:da:21:70:da:9a:92:9e:73:a3:88: 65:cd:46:43:1d:05:36:64:59:58:c4:4a:30:92:37: a3:15:03:e7:0a:0f:b8:78:76:d4:06:f2:06:8f:3d: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:49:15:2D:04:13:18:82:0F:54:B1:24:40:8A:A7:70:45:31:44:03 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154402.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.246.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:04:33:16:1b:16:e0:d2:79:c2:73:8b:35:a9:50:d1:7c:c9: 99:f1:68:d8:9f:00:bf:b9:80:b8:b8:08:82:79:7d:9e:e4:a0: d6:42:45:f8:c3:00:16:3c:89:a0:c4:8e:68:82:2e:45:d8:d7: a1:06:55:eb:1b:00:dd:d6:a6:81:5a:9e:68:4b:8f:0b:8f:e2: 17:09:c3:1e:28:61:26:6b:7b:68:97:a2:13:91:8d:7d:47:95: db:8b:3f:6f:89:ae:1f:75:99:a4:68:0b:73:b8:16:31:22:88: 0d:31:3c:90:7b:57:4f:74:5f:dc:f3:54:e3:fd:a4:79:99:ae: c3:73:a7:19:b0:e8:64:e9:ef:9f:d4:a3:49:55:05:33:05:17: 2a:d6:34:e5:2b:1b:88:14:31:c3:1b:ee:47:4d:35:d7:3e:04: 00:a9:f1:e0:55:b7:1d:84:40:40:34:2b:9e:5b:e2:3e:59:a6: 49:fc:32:3a:b1:8d:ba:92:5c:93:49:a8:b3:bb:74:a0:17:5d: ee:cf:aa:18:24:c1:a5:73:38:b2:15:43:e4:d4:42:ef:58:5c: f9:9c:40:7c:39:4a:0a:ec:b8:d6:4a:93:c1:12:97:6b:03:74: d8:6d:02:e2:d9:2e:b3:a2:58:96:cc:73:7f:81:2c:67:11:5d: 4b:e1:bf:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKuQu8ppK5z5e35GASlBV83uO5+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMjAxNTUzNTZaFw0yNjEyMTkxNTU4NTZaMDMxMTAvBgNV BAMTKEZFNDkxNTJEMDQxMzE4ODIwRjU0QjEyNDQwOEFBNzcwNDUzMTQ0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZm+VUaZkcsbZ4HDi8Oc/3oFA GDtSQ7XQi4ID9WXt+Hmy8VLOSQTKIo2MZJvxi9zFxRKWdczgd+z0ACcQIiY0Pb84 HvjCZTR1C2qqKV89iCP+Wa+MIS0EVpn0JPX0YFJFF1PUSWvxt8IZlE+YzS6GWpOa Le9N8R+JVxPP2Wh6SzZvxmmfxa/oLuXh8JgZip7VJUdyIhxMeAJJciUYCAadeZhn ixQiLjFwHeYgPXCfxAvYoxPUNR5vEizs+MjFrgt94YvuDJ0Vfn0Jib7ZFijK6Cju xdWZ2iFw2pqSnnOjiGXNRkMdBTZkWVjESjCSN6MVA+cKD7h4dtQG8gaPPURhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU/kkVLQQTGIIPVLEkQIqncEUxRAMwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTU0NDAyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxT2 MA0GCSqGSIb3DQEBCwUAA4IBAQBrBDMWGxbg0nnCc4s1qVDRfMmZ8WjYnwC/uYC4 uAiCeX2e5KDWQkX4wwAWPImgxI5ogi5F2NehBlXrGwDd1qaBWp5oS48Lj+IXCcMe KGEma3tol6ITkY19R5Xbiz9via4fdZmkaAtzuBYxIogNMTyQe1dPdF/c81Tj/aR5 ma7Dc6cZsOhk6e+f1KNJVQUzBRcq1jTlKxuIFDHDG+5HTTXXPgQAqfHgVbcdhEBA NCueW+I+WaZJ/DI6sY26klyTSaizu3SgF13uz6oYJMGlcziyFUPk1ELvWFz5nEB8 OUoK7LjWSpPBEpdrA3TYbQLi2S6zoliWzHN/gSxnEV1L4b8I -----END CERTIFICATE-----Generated at Wed Dec 24 19:22:40 2025 by rpki-client