This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: YfTIov4+zmUbZcAEOluYo6oXKW2sYNHVjcNrKjpgSAU= Subject key identifier: 02:1E:18:96:CC:6B:A0:46:87:5B:9B:1F:ED:72:B3:1B:5F:21:BE:53 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 093AD44D89872565E922BFF4CFEB85000EF6C48E Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa Signing time: Sun 04 Jan 2026 09:32:19 +0000 ROA not before: Sun 04 Jan 2026 09:27:19 +0000 ROA not after: Sun 03 Jan 2027 09:32:19 +0000 asID: 42831 IP address blocks: 143.20.15.0/24 maxlen: 24 143.20.42.0/24 maxlen: 24 143.20.46.0/24 maxlen: 24 143.20.60.0/24 maxlen: 24 143.20.67.0/24 maxlen: 24 143.20.118.0/24 maxlen: 24 143.20.119.0/24 maxlen: 24 143.20.123.0/24 maxlen: 24 143.20.146.0/24 maxlen: 24 143.20.154.0/24 maxlen: 24 143.20.181.0/24 maxlen: 24 143.20.183.0/24 maxlen: 24 143.20.193.0/24 maxlen: 24 143.20.194.0/24 maxlen: 24 143.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3a:d4:4d:89:87:25:65:e9:22:bf:f4:cf:eb:85:00:0e:f6:c4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Jan 4 09:27:19 2026 GMT Not After : Jan 3 09:32:19 2027 GMT Subject: CN=021E1896CC6BA046875B9B1FED72B31B5F21BE53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8b:63:63:b1:b8:61:45:af:4b:fc:7a:2c:2a: 81:8b:8e:51:e4:ac:c2:ca:3b:a1:14:d1:80:c2:b9: 84:da:a4:35:8a:4e:e5:f4:31:6d:14:4f:42:93:7f: cf:87:bf:bb:11:86:db:77:7d:e4:13:47:ca:3e:a8: 76:16:ab:b6:b1:72:47:14:1c:78:04:02:b3:6b:6c: 06:5c:c0:fe:e4:2b:00:f2:ad:fe:9f:d6:36:97:00: af:92:a3:c3:bd:98:a9:3d:15:4d:4b:0d:4f:f5:6f: 4e:a1:63:1e:80:61:27:b1:1e:21:3b:98:01:20:04: 59:7e:76:25:39:ad:36:8f:9a:0f:a6:e3:8a:3d:f5: 3d:ee:7d:aa:f0:93:10:d9:4a:2a:3b:9d:a9:87:49: 96:ff:50:17:ea:47:9f:3a:e6:bf:61:f5:e4:db:ba: c9:ae:70:f3:9b:57:7e:a7:af:ec:d9:36:e8:b7:32: 40:cb:2a:73:17:cb:a0:83:2c:08:c1:43:42:b4:af: 97:46:19:21:82:f5:94:d7:e9:21:1c:bf:c6:d1:93: c2:93:96:e6:a4:6f:64:70:5a:08:31:47:f7:8c:82: cc:0c:31:50:40:39:42:a0:01:75:38:34:c4:c7:7f: f1:ee:e4:85:44:9c:c1:bc:39:90:db:87:b6:1b:0f: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1E:18:96:CC:6B:A0:46:87:5B:9B:1F:ED:72:B3:1B:5F:21:BE:53 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.15.0/24 143.20.42.0/24 143.20.46.0/24 143.20.60.0/24 143.20.67.0/24 143.20.118.0/23 143.20.123.0/24 143.20.146.0/24 143.20.154.0/24 143.20.181.0/24 143.20.183.0/24 143.20.193.0-143.20.194.255 143.20.197.0/24 Signature Algorithm: sha256WithRSAEncryption 35:74:f5:56:94:41:71:f4:20:2f:07:c9:ac:aa:18:04:90:a9: a6:92:8f:61:ca:ce:34:e0:6c:0b:bf:46:3a:e0:4e:79:10:1e: f9:05:54:28:c6:09:a9:22:e4:42:84:b9:fb:b7:ac:4c:19:e5: 24:3c:6e:6b:9c:b4:96:2f:79:6b:e5:5a:5b:d7:8a:5b:b9:04: 91:6f:f7:d8:a5:8c:2b:6d:13:69:4f:0e:bb:6a:ec:aa:18:59: b2:09:8a:31:32:80:d7:ce:4a:b4:15:2e:33:8f:89:12:98:5f: 5e:3e:d4:9a:5c:da:90:51:26:6c:7e:5d:33:e8:12:7f:01:f0: e4:5a:bc:94:c5:b1:1d:26:ce:bf:b1:77:1d:83:cc:b3:f3:33: 2f:3d:b4:3d:aa:cc:d7:29:5a:7d:7e:79:ff:9c:c5:7e:41:b5: 17:24:e4:ec:6d:de:bb:c1:b6:67:7c:20:87:d5:dc:e6:a3:bd: 4c:13:50:1a:38:e4:09:38:a1:28:60:8a:22:4b:2e:bc:2e:78: a0:75:8c:8a:24:b5:df:68:fd:6e:6b:84:27:97:35:97:b1:d5: 1e:58:fa:11:4e:fa:71:a7:38:ec:6d:be:f1:6f:a6:f7:88:51: 28:e8:90:a8:fe:83:9b:32:05:9a:cb:74:cc:fb:95:10:2b:41: 6a:38:00:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCTrUTYmHJWXpIr/0z+uFAA72xI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNjAxMDQwOTI3MTlaFw0yNzAxMDMwOTMyMTlaMDMxMTAvBgNV BAMTKDAyMUUxODk2Q0M2QkEwNDY4NzVCOUIxRkVENzJCMzFCNUYyMUJFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCai2NjsbhhRa9L/HosKoGLjlHk rMLKO6EU0YDCuYTapDWKTuX0MW0UT0KTf8+Hv7sRhtt3feQTR8o+qHYWq7axckcU HHgEArNrbAZcwP7kKwDyrf6f1jaXAK+So8O9mKk9FU1LDU/1b06hYx6AYSexHiE7 mAEgBFl+diU5rTaPmg+m44o99T3ufarwkxDZSio7namHSZb/UBfqR5865r9h9eTb usmucPObV36nr+zZNui3MkDLKnMXy6CDLAjBQ0K0r5dGGSGC9ZTX6SEcv8bRk8KT luakb2RwWggxR/eMgswMMVBAOUKgAXU4NMTHf/Hu5IVEnMG8OZDbh7YbD70FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAh4YlsxroEaHW5sf7XKzG18hvlMwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwbwYIKwYBBQUHAQcBAf8EYDBeMFwEAgABMFYDBACPFA8D BACPFCoDBACPFC4DBACPFDwDBACPFEMDBAGPFHYDBACPFHsDBACPFJIDBACPFJoD BACPFLUDBACPFLcwDAMEAI8UwQMEAI8UwgMEAI8UxTANBgkqhkiG9w0BAQsFAAOC AQEANXT1VpRBcfQgLwfJrKoYBJCpppKPYcrONOBsC79GOuBOeRAe+QVUKMYJqSLk QoS5+7esTBnlJDxua5y0li95a+VaW9eKW7kEkW/32KWMK20TaU8Ou2rsqhhZsgmK MTKA185KtBUuM4+JEphfXj7UmlzakFEmbH5dM+gSfwHw5Fq8lMWxHSbOv7F3HYPM s/MzLz20ParM1ylafX55/5zFfkG1FyTk7G3eu8G2Z3wgh9Xc5qO9TBNQGjjkCTih KGCKIksuvC54oHWMiiS132j9bmuEJ5c1l7HVHlj6EU76cac47G2+8W+m94hRKOiQ qP6DmzIFmst0zPuVECtBajgALA== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:43 2026 by rpki-client