This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS36530.roa File: AS36530.roa (raw, json) Hash identifier: tS88khQGR0OiMIOvmHAfJe5vkuHS+Gpnw2fE9ezsaKM= Subject key identifier: D0:0C:63:6F:1C:AA:21:77:70:DB:09:1A:0C:C0:85:F3:87:0C:C1:6C Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 1A10F53BA8AF89D91C04B118C074A6BF6601F0D2 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS36530.roa Signing time: Wed 03 Dec 2025 09:51:48 +0000 ROA not before: Wed 03 Dec 2025 09:46:48 +0000 ROA not after: Wed 02 Dec 2026 09:51:48 +0000 asID: 36530 IP address blocks: 143.20.146.0/24 maxlen: 24 143.20.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:10:f5:3b:a8:af:89:d9:1c:04:b1:18:c0:74:a6:bf:66:01:f0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 3 09:46:48 2025 GMT Not After : Dec 2 09:51:48 2026 GMT Subject: CN=D00C636F1CAA217770DB091A0CC085F3870CC16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:82:db:98:9a:0a:7e:16:13:7b:9f:d5:b2: 95:0d:ca:04:a2:ef:1b:e3:14:a1:7e:48:90:00:37: b2:f8:7d:e1:ce:12:88:ff:ae:e1:c1:00:e1:8d:df: 14:35:c2:ad:d1:53:5b:00:04:fb:e5:53:f6:b9:eb: 14:6e:6e:1e:ff:0d:e3:71:59:e4:74:7d:2c:db:c4: 08:92:da:fb:d5:f0:2f:78:5d:6d:46:44:3a:cc:56: d3:f0:b4:69:65:0b:b3:1d:8a:74:05:83:3d:41:b0: 77:27:d0:b2:e5:84:c4:1f:27:ff:e2:ca:b1:e2:c4: 8a:0e:b7:bf:78:a2:c3:c3:34:9e:d2:2b:97:e9:79: a3:0f:85:a6:07:77:63:b3:f8:de:96:d5:bf:f2:03: 2a:d4:81:d7:d5:48:48:df:87:9d:83:bf:68:92:3e: 2b:4e:f7:b8:04:cb:1e:d4:8b:f3:bf:9f:ea:e6:34: 08:98:a0:51:bc:81:8a:d5:1f:c5:5a:55:19:0e:ef: 6b:8b:fd:4e:43:51:ca:fe:9b:83:51:2b:55:de:f0: c3:32:0e:fc:33:36:c0:33:16:87:2c:0b:9d:6d:ee: bf:58:f0:68:04:5a:52:12:f8:77:6f:19:82:a4:88: ac:91:49:99:55:8a:c4:07:d1:b6:63:e1:ab:7e:53: 65:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0C:63:6F:1C:AA:21:77:70:DB:09:1A:0C:C0:85:F3:87:0C:C1:6C X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS36530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.146.0/24 143.20.148.0/24 Signature Algorithm: sha256WithRSAEncryption 88:20:82:80:1f:e5:49:e1:ac:34:a7:f3:39:cf:9d:ab:09:ac: d8:f9:aa:3c:95:83:de:d7:fe:00:99:9a:7e:ad:63:c3:d3:e4: a8:07:a5:67:5f:37:18:ff:9b:0a:36:88:ec:e8:17:88:a9:1b: ee:f9:c2:ef:a2:10:d1:46:de:5b:22:78:77:f7:7f:92:42:85: 7a:b0:5b:e6:79:4c:0c:ca:bd:d6:98:96:b3:d8:8d:cc:72:32: c7:74:81:6a:8e:80:a8:5f:d0:7b:20:36:21:25:ba:63:ea:3a: ea:9b:04:df:e7:a0:b5:a5:47:36:51:5b:a6:b3:d4:8f:8f:3a: c8:b3:22:95:be:bb:80:20:63:08:cb:e0:e5:10:00:ce:58:86: 7f:df:eb:49:d9:81:6c:0a:78:47:21:68:1c:b4:b2:2b:9b:d7: c1:9d:66:de:36:85:73:2a:2e:ed:2a:7c:f1:fd:27:43:a2:2b: 4b:f9:68:24:db:08:40:c3:3a:92:1b:25:dd:de:d6:73:cd:0c: ff:b9:cb:22:67:6e:62:a5:96:61:e6:08:f3:92:9b:75:f3:32: f8:57:5b:42:75:2b:b4:a9:71:a3:f1:4b:b6:b3:af:5b:8b:6a: 2c:ff:3d:9f:61:4c:42:89:c9:b3:91:29:87:38:01:54:6b:3c: 21:7c:5e:4d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUGhD1O6ividkcBLEYwHSmv2YB8NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMDMwOTQ2NDhaFw0yNjEyMDIwOTUxNDhaMDMxMTAvBgNV BAMTKEQwMEM2MzZGMUNBQTIxNzc3MERCMDkxQTBDQzA4NUYzODcwQ0MxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2ILbmJoKfhYTe5/VspUNygSi 7xvjFKF+SJAAN7L4feHOEoj/ruHBAOGN3xQ1wq3RU1sABPvlU/a56xRubh7/DeNx WeR0fSzbxAiS2vvV8C94XW1GRDrMVtPwtGllC7MdinQFgz1BsHcn0LLlhMQfJ//i yrHixIoOt794osPDNJ7SK5fpeaMPhaYHd2Oz+N6W1b/yAyrUgdfVSEjfh52Dv2iS PitO97gEyx7Ui/O/n+rmNAiYoFG8gYrVH8VaVRkO72uL/U5DUcr+m4NRK1Xe8MMy DvwzNsAzFocsC51t7r9Y8GgEWlIS+HdvGYKkiKyRSZlVisQH0bZj4at+U2VFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU0AxjbxyqIXdw2wkaDMCF84cMwWwwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACPFJID BACPFJQwDQYJKoZIhvcNAQELBQADggEBAIgggoAf5UnhrDSn8znPnasJrNj5qjyV g97X/gCZmn6tY8PT5KgHpWdfNxj/mwo2iOzoF4ipG+75wu+iENFG3lsieHf3f5JC hXqwW+Z5TAzKvdaYlrPYjcxyMsd0gWqOgKhf0HsgNiElumPqOuqbBN/noLWlRzZR W6az1I+POsizIpW+u4AgYwjL4OUQAM5Yhn/f60nZgWwKeEchaBy0siub18GdZt42 hXMqLu0qfPH9J0OiK0v5aCTbCEDDOpIbJd3e1nPNDP+5yyJnbmKllmHmCPOSm3Xz MvhXW0J1K7SpcaPxS7azr1uLaiz/PZ9hTEKJybORKYc4AVRrPCF8Xk0= -----END CERTIFICATE-----Generated at Fri Dec 5 17:06:44 2025 by rpki-client