This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203453.roa File: AS203453.roa (raw, json) Hash identifier: PivLiC5zCUQNAaNbimnyfeyfWIolIcoCNIMK0rEhe/w= Subject key identifier: 53:F1:85:E5:F4:89:66:DD:27:58:8B:8E:C3:2E:DA:FF:B6:4F:32:6C Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 4B54EEDE6FA62DB5CECFEC00B7E3E42BD9878E5D Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203453.roa Signing time: Thu 27 Nov 2025 13:44:53 +0000 ROA not before: Thu 27 Nov 2025 13:39:53 +0000 ROA not after: Thu 26 Nov 2026 13:44:53 +0000 asID: 203453 IP address blocks: 143.20.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:54:ee:de:6f:a6:2d:b5:ce:cf:ec:00:b7:e3:e4:2b:d9:87:8e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 27 13:39:53 2025 GMT Not After : Nov 26 13:44:53 2026 GMT Subject: CN=53F185E5F48966DD27588B8EC32EDAFFB64F326C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:87:68:4b:f7:0c:6d:ab:ed:49:0e:af:2d:d1: 87:d9:c4:26:56:23:2e:1e:2c:1a:ca:a2:9f:1c:ff: 90:ea:a9:9e:78:18:28:04:52:7f:d4:39:e4:97:38: 61:0e:7b:dd:e8:53:f1:0e:ad:d8:5c:6f:e0:1f:ad: 62:cb:42:ab:1f:52:2c:09:74:13:75:8a:bd:58:ac: 6d:0d:af:89:55:00:a9:c9:d2:3e:84:db:82:d6:cd: 9d:23:ae:d4:56:58:6f:f8:33:74:6d:52:aa:f8:e7: 56:29:16:e4:a5:de:fa:1a:70:15:2f:b6:9f:9c:70: 24:82:22:4a:81:59:fc:05:44:ca:2a:30:80:7a:d5: f5:d1:22:e9:8e:fe:d7:1f:95:9a:7a:9a:ca:9c:88: 80:33:a9:0c:e8:1d:9a:ae:3d:df:c3:13:b3:83:df: 1f:98:a5:82:c5:66:98:1e:79:d4:fe:50:c2:a6:4c: ee:50:cf:ac:97:0e:26:a9:c8:34:2a:c3:75:c0:39: 64:89:10:4d:50:4b:9c:79:9c:35:d1:1e:33:70:d9: 44:c9:e7:44:ad:01:a6:47:17:1a:75:16:06:a0:be: af:23:35:2b:6c:06:c2:c6:2f:8f:b9:f4:67:48:1c: 99:45:33:37:d7:25:13:0b:46:51:d9:65:f3:e5:75: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F1:85:E5:F4:89:66:DD:27:58:8B:8E:C3:2E:DA:FF:B6:4F:32:6C X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203453.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.19.0/24 Signature Algorithm: sha256WithRSAEncryption 95:fd:ed:5f:fd:1f:0d:bb:ec:b0:bb:19:08:db:a8:2d:d9:66: f8:07:8b:00:cd:ce:43:69:03:6d:b7:a6:69:5e:d5:f5:73:ed: 86:7a:11:c4:bd:0e:14:81:43:c6:70:90:40:9c:8e:75:58:85: 11:d6:ae:d0:eb:69:b0:38:9c:13:71:8a:f9:01:4f:f9:e4:27: f3:55:ab:e2:80:9d:ba:18:66:4c:da:b9:d8:6f:6e:e8:c8:ec: 6e:7a:e1:4c:0c:59:ac:d1:a6:0d:78:b7:02:15:76:44:fc:d0: f1:8e:7a:fc:70:37:3b:81:16:7e:13:25:ca:5f:50:55:b5:12: a4:1a:34:f8:17:1d:95:38:31:d9:c7:9a:4e:04:68:d7:86:f8: 87:28:f3:ee:a3:4f:b9:b6:dd:e4:16:4a:c6:16:cb:b3:c1:80: 7a:dc:af:97:b9:5e:55:d2:c7:bc:fb:84:f5:7e:08:5d:a2:05: c5:cc:bf:a0:da:31:de:33:e7:c3:73:14:d6:56:c0:56:f9:c9: 92:48:77:67:bf:4e:fd:36:e1:4a:21:ce:9a:ed:92:92:4c:d4: 74:4b:db:0a:3e:d7:c6:ab:ed:9c:31:cf:84:ef:70:ab:cb:83: 35:c3:0a:bc:05:a1:7c:ab:f0:8f:6b:49:f9:ea:ca:3f:04:bf: 9e:5e:50:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUS1Tu3m+mLbXOz+wAt+PkK9mHjl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjcxMzM5NTNaFw0yNjExMjYxMzQ0NTNaMDMxMTAvBgNV BAMTKDUzRjE4NUU1RjQ4OTY2REQyNzU4OEI4RUMzMkVEQUZGQjY0RjMyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxh2hL9wxtq+1JDq8t0YfZxCZW Iy4eLBrKop8c/5DqqZ54GCgEUn/UOeSXOGEOe93oU/EOrdhcb+AfrWLLQqsfUiwJ dBN1ir1YrG0Nr4lVAKnJ0j6E24LWzZ0jrtRWWG/4M3RtUqr451YpFuSl3voacBUv tp+ccCSCIkqBWfwFRMoqMIB61fXRIumO/tcflZp6msqciIAzqQzoHZquPd/DE7OD 3x+YpYLFZpgeedT+UMKmTO5Qz6yXDiapyDQqw3XAOWSJEE1QS5x5nDXRHjNw2UTJ 50StAaZHFxp1Fgagvq8jNStsBsLGL4+59GdIHJlFMzfXJRMLRlHZZfPldRsTAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUU/GF5fSJZt0nWIuOwy7a/7ZPMmwwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjAzNDUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQT MA0GCSqGSIb3DQEBCwUAA4IBAQCV/e1f/R8Nu+ywuxkI26gt2Wb4B4sAzc5DaQNt t6ZpXtX1c+2GehHEvQ4UgUPGcJBAnI51WIUR1q7Q62mwOJwTcYr5AU/55CfzVavi gJ26GGZM2rnYb27oyOxueuFMDFms0aYNeLcCFXZE/NDxjnr8cDc7gRZ+EyXKX1BV tRKkGjT4Fx2VODHZx5pOBGjXhviHKPPuo0+5tt3kFkrGFsuzwYB63K+XuV5V0se8 +4T1fghdogXFzL+g2jHeM+fDcxTWVsBW+cmSSHdnv079NuFKIc6a7ZKSTNR0S9sK PtfGq+2cMc+E73Cry4M1wwq8BaF8q/CPa0n56so/BL+eXlDY -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:22 2025 by rpki-client