This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: ED2JsY+tPP3j51VZFiIyqi80gQ16+bmHBkJuZb41iok= Subject key identifier: B3:33:2D:95:0D:16:5A:6F:82:BB:62:04:10:88:15:61:87:E5:EF:A4 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 46962A5E4F56AD8F3FBABC9DDD361CC7483DCFA6 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa Signing time: Wed 03 Dec 2025 07:55:53 +0000 ROA not before: Wed 03 Dec 2025 07:50:53 +0000 ROA not after: Wed 02 Dec 2026 07:55:53 +0000 asID: 393942 IP address blocks: 143.20.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:96:2a:5e:4f:56:ad:8f:3f:ba:bc:9d:dd:36:1c:c7:48:3d:cf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 3 07:50:53 2025 GMT Not After : Dec 2 07:55:53 2026 GMT Subject: CN=B3332D950D165A6F82BB62041088156187E5EFA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:d7:a1:45:c4:13:5d:02:6b:a3:df:a9:a4: 6d:5d:a0:25:80:a4:79:aa:91:2c:f0:be:bb:c5:45: bd:04:35:32:54:2b:5f:27:ed:6f:74:28:aa:f5:a1: 52:f4:24:2b:d4:d8:43:f7:93:f4:69:cf:8c:80:da: b3:1a:5e:d3:6a:99:97:28:ba:30:a1:df:26:5c:13: 1c:3f:6d:54:ae:16:5f:fd:01:1d:5d:d7:33:c4:d4: 78:95:78:32:91:23:3d:02:30:49:52:03:c1:58:b0: 4c:25:10:57:bc:f8:08:ef:13:95:88:0e:64:eb:e1: 2f:39:00:af:e7:89:d5:97:a2:57:03:a7:9a:b4:30: ac:6e:1e:80:07:91:e3:fb:83:87:28:94:21:e4:4a: ce:20:3e:3a:b0:71:4c:b1:b6:7e:20:77:64:72:12: ac:8c:2c:fd:d0:e9:76:88:df:26:9c:d7:1b:75:40: bb:92:8a:6d:b7:f4:95:0e:8b:75:d7:4c:1a:fb:81: 6d:bb:ec:5a:eb:79:f9:33:5e:61:29:15:83:fe:49: 41:e5:e3:87:c1:b9:b0:a6:b3:7c:a3:07:2f:15:f3: c6:ce:74:21:05:ab:a3:8c:ea:9e:86:22:a4:2d:f9: 34:b9:13:de:d0:ca:4f:f7:9c:f4:ed:9f:72:5c:0e: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:2D:95:0D:16:5A:6F:82:BB:62:04:10:88:15:61:87:E5:EF:A4 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.91.0/24 Signature Algorithm: sha256WithRSAEncryption cb:76:98:cb:7f:35:53:72:b4:b7:d1:17:16:15:b0:7f:8d:f1: 56:20:1d:40:a7:4d:85:46:7d:0f:75:74:1b:21:f1:35:c9:b3: d2:89:5c:f9:b5:09:79:10:c6:5d:cc:37:16:13:e3:cc:35:f4: c3:61:61:d3:2d:1f:a3:e9:24:97:cd:e4:65:f8:71:9d:3a:b5: 9b:92:70:9d:23:48:39:d4:57:d7:a1:12:c0:d8:d6:68:22:73: 5e:52:61:6d:1e:f7:61:c7:30:e3:c3:6e:30:5f:d2:ed:09:6e: b7:30:9b:98:ce:1f:af:2e:0e:7f:7f:f3:3f:cc:81:73:31:09: 70:b1:ea:a0:20:ce:0e:70:71:af:99:0b:ed:97:ef:75:95:27: 9d:e9:a2:20:11:eb:f5:6c:c8:1e:d1:60:ae:9d:a7:05:e9:10: 5e:e5:85:f1:57:9c:6b:3d:8a:70:71:7f:8e:7e:08:d5:c3:19: 39:44:d7:d7:89:dd:d6:93:a3:89:df:f0:93:30:da:e4:93:b6: 5c:c2:9a:29:81:89:a9:da:9c:c1:bf:be:3f:4f:55:52:d0:5a: 67:b8:5a:fd:bc:a8:a2:89:61:d1:ec:b1:44:81:b4:41:af:89: b7:19:2d:7a:5b:ed:22:4f:e2:71:5e:3d:c7:d7:25:0c:80:1a: 20:dd:7c:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIURpYqXk9WrY8/uryd3TYcx0g9z6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMDMwNzUwNTNaFw0yNjEyMDIwNzU1NTNaMDMxMTAvBgNV BAMTKEIzMzMyRDk1MEQxNjVBNkY4MkJCNjIwNDEwODgxNTYxODdFNUVGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57dehRcQTXQJro9+ppG1doCWA pHmqkSzwvrvFRb0ENTJUK18n7W90KKr1oVL0JCvU2EP3k/Rpz4yA2rMaXtNqmZco ujCh3yZcExw/bVSuFl/9AR1d1zPE1HiVeDKRIz0CMElSA8FYsEwlEFe8+AjvE5WI DmTr4S85AK/nidWXolcDp5q0MKxuHoAHkeP7g4colCHkSs4gPjqwcUyxtn4gd2Ry EqyMLP3Q6XaI3yac1xt1QLuSim239JUOi3XXTBr7gW277FrrefkzXmEpFYP+SUHl 44fBubCms3yjBy8V88bOdCEFq6OM6p6GIqQt+TS5E97Qyk/3nPTtn3JcDi3tAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUszMtlQ0WWm+Cu2IEEIgVYYfl76QwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzkzOTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRb MA0GCSqGSIb3DQEBCwUAA4IBAQDLdpjLfzVTcrS30RcWFbB/jfFWIB1Ap02FRn0P dXQbIfE1ybPSiVz5tQl5EMZdzDcWE+PMNfTDYWHTLR+j6SSXzeRl+HGdOrWbknCd I0g51FfXoRLA2NZoInNeUmFtHvdhxzDjw24wX9LtCW63MJuYzh+vLg5/f/M/zIFz MQlwseqgIM4OcHGvmQvtl+91lSed6aIgEev1bMge0WCunacF6RBe5YXxV5xrPYpw cX+OfgjVwxk5RNfXid3Wk6OJ3/CTMNrkk7ZcwpopgYmp2pzBv74/T1VS0FpnuFr9 vKiiiWHR7LFEgbRBr4m3GS16W+0iT+JxXj3H1yUMgBog3XwG -----END CERTIFICATE-----Generated at Fri Dec 5 06:47:13 2025 by rpki-client