This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS24961.roa File: AS24961.roa (raw, json) Hash identifier: FQ1+6QmMe5hD70BE5G4lQpXco2SsvfuWcpAU15FmqqA= Subject key identifier: C9:E4:0A:A5:B4:A6:BE:DB:78:AF:BA:54:5A:C5:06:82:A8:96:70:A3 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 42D0DFD94710787A90409F92F4977FB8AA9F4F5E Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS24961.roa Signing time: Wed 05 Nov 2025 11:07:08 +0000 ROA not before: Wed 05 Nov 2025 11:02:08 +0000 ROA not after: Wed 04 Nov 2026 11:07:08 +0000 asID: 24961 IP address blocks: 143.20.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d0:df:d9:47:10:78:7a:90:40:9f:92:f4:97:7f:b8:aa:9f:4f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 5 11:02:08 2025 GMT Not After : Nov 4 11:07:08 2026 GMT Subject: CN=C9E40AA5B4A6BEDB78AFBA545AC50682A89670A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:22:97:7a:da:eb:62:d3:4e:12:0f:fa:37: ee:cb:bc:c3:d1:0e:a2:c7:3a:8c:b4:ad:96:af:99: a2:8c:82:3e:e9:9b:49:f2:86:16:af:cd:88:32:d9: 25:f2:c3:65:3a:af:71:b1:8f:36:11:d5:7d:24:2c: 75:9b:6b:81:44:fe:42:19:4d:58:f6:7f:13:fa:89: 16:9b:47:94:91:77:e4:fc:d6:76:2c:ee:59:83:4b: a4:ac:88:86:af:2b:43:46:1b:55:fa:e2:ab:a4:40: f0:a0:01:e8:86:5c:84:26:53:ad:2c:b8:27:b5:98: 19:4c:30:89:be:f1:91:f8:16:1a:1d:53:b8:62:98: 3b:78:51:00:91:e3:19:3f:21:f7:ee:b3:3d:51:68: dd:cb:50:34:28:24:19:21:dc:92:b0:19:6d:3e:76: 0b:b9:17:e3:e8:14:20:d4:42:73:1e:fb:97:a2:c6: ec:71:c8:0c:0f:fa:f8:e2:18:21:14:b4:75:62:a6: 23:2f:7b:9a:a1:a7:c0:1f:60:1f:15:c3:86:0a:a5: 79:72:2b:f5:a8:99:e9:97:0c:81:6c:d3:27:77:d5: ef:b1:c3:8e:4b:1e:61:de:68:ae:99:07:05:d1:b9: 63:48:ee:fb:a3:12:0a:2c:a8:06:22:d7:7c:bb:ce: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E4:0A:A5:B4:A6:BE:DB:78:AF:BA:54:5A:C5:06:82:A8:96:70:A3 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS24961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.43.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a5:55:a5:ff:27:c2:c9:16:07:21:4e:62:04:f5:e8:b5:d3: b1:13:76:e7:08:8f:7f:be:70:e5:fa:82:16:8a:34:5b:fb:e0: ba:3b:2e:a5:bf:02:c3:f6:f0:5b:18:ec:af:a6:5e:78:09:16: 1d:fe:7e:4d:03:88:5c:67:5f:9b:9b:e8:ab:0b:4f:06:05:cf: e7:e2:15:fc:f0:51:82:57:a7:44:e6:9d:9d:a2:48:9e:6c:4e: 9c:aa:82:e7:ab:8a:a4:af:c0:46:ff:b1:b4:6a:c8:85:61:2e: 1b:22:a2:9f:4a:51:e3:cc:43:c8:bf:5d:63:2b:18:5f:58:24: 73:a6:36:01:ef:c9:57:b3:9b:68:a7:18:3e:da:15:8e:ed:60: e3:2d:0b:8a:8b:ac:90:53:cb:a8:76:af:95:7f:58:ac:51:58: c4:78:00:1d:4c:e3:34:c6:d9:69:ec:b0:3d:59:d0:a9:75:18: dc:09:07:49:15:1b:ab:f4:67:a2:a7:e9:f2:ef:1f:84:1f:46: c3:05:de:4f:f8:93:6b:48:fd:24:cd:8a:f0:a6:27:4a:91:0b: cd:a6:57:e3:41:81:d6:2e:b4:25:2e:b4:85:69:e8:1f:8f:ea: b8:ea:2e:2a:2f:bf:51:c1:7e:5a:29:a1:bc:19:e9:2b:2a:9f: f7:0f:2a:c0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUQtDf2UcQeHqQQJ+S9Jd/uKqfT14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMDUxMTAyMDhaFw0yNjExMDQxMTA3MDhaMDMxMTAvBgNV BAMTKEM5RTQwQUE1QjRBNkJFREI3OEFGQkE1NDVBQzUwNjgyQTg5NjcwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghiKXetrrYtNOEg/6N+7LvMPR DqLHOoy0rZavmaKMgj7pm0nyhhavzYgy2SXyw2U6r3GxjzYR1X0kLHWba4FE/kIZ TVj2fxP6iRabR5SRd+T81nYs7lmDS6SsiIavK0NGG1X64qukQPCgAeiGXIQmU60s uCe1mBlMMIm+8ZH4FhodU7himDt4UQCR4xk/Iffusz1RaN3LUDQoJBkh3JKwGW0+ dgu5F+PoFCDUQnMe+5eixuxxyAwP+vjiGCEUtHVipiMve5qhp8AfYB8Vw4YKpXly K/WomemXDIFs0yd31e+xw45LHmHeaK6ZBwXRuWNI7vujEgosqAYi13y7zleHAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUyeQKpbSmvtt4r7pUWsUGgqiWcKMwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjQ5NjEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFCsw DQYJKoZIhvcNAQELBQADggEBAG6lVaX/J8LJFgchTmIE9ei107ETducIj3++cOX6 ghaKNFv74Lo7LqW/AsP28FsY7K+mXngJFh3+fk0DiFxnX5ub6KsLTwYFz+fiFfzw UYJXp0TmnZ2iSJ5sTpyqgueriqSvwEb/sbRqyIVhLhsiop9KUePMQ8i/XWMrGF9Y JHOmNgHvyVezm2inGD7aFY7tYOMtC4qLrJBTy6h2r5V/WKxRWMR4AB1M4zTG2Wns sD1Z0Kl1GNwJB0kVG6v0Z6Kn6fLvH4QfRsMF3k/4k2tI/STNivCmJ0qRC82mV+NB gdYutCUutIVp6B+P6rjqLiovv1HBflopobwZ6Ssqn/cPKsA= -----END CERTIFICATE-----Generated at Fri Dec 5 17:06:45 2025 by rpki-client