This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: Gox874wuOtfDDyTRARFD5pPs72UQn/FNpiFLWUQZZ44= Subject key identifier: C3:FD:5F:8D:E3:6E:C4:4C:09:A9:28:7D:7D:5A:0A:E4:A9:9F:8C:9B Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 33D5C4BED4A31F5836E2465D4DA99550F89BCAD1 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa Signing time: Sun 30 Nov 2025 15:14:55 +0000 ROA not before: Sun 30 Nov 2025 15:09:55 +0000 ROA not after: Sun 29 Nov 2026 15:14:55 +0000 asID: 42831 IP address blocks: 143.20.15.0/24 maxlen: 24 143.20.42.0/24 maxlen: 24 143.20.46.0/24 maxlen: 24 143.20.67.0/24 maxlen: 24 143.20.118.0/24 maxlen: 24 143.20.119.0/24 maxlen: 24 143.20.123.0/24 maxlen: 24 143.20.181.0/24 maxlen: 24 143.20.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 23:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d5:c4:be:d4:a3:1f:58:36:e2:46:5d:4d:a9:95:50:f8:9b:ca:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 30 15:09:55 2025 GMT Not After : Nov 29 15:14:55 2026 GMT Subject: CN=C3FD5F8DE36EC44C09A9287D7D5A0AE4A99F8C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:43:e9:4f:a7:4e:84:14:cf:60:f2:b4:95: 9e:d7:4c:25:1f:52:24:06:93:f3:d5:bf:6e:96:d1: 61:ac:3c:e1:87:d1:4d:8d:ba:69:ab:65:4e:b1:ae: c2:f1:d6:a9:01:0f:c6:38:bb:4a:81:df:4b:cb:51: 23:a8:ee:51:12:2a:d3:f2:a8:c1:13:48:d9:69:84: 06:f7:11:de:f7:ee:6a:28:f1:f3:df:17:8e:0a:be: 23:88:af:7c:3a:1d:8a:42:32:3c:57:1f:29:7e:3f: 46:a7:7c:de:d4:d7:98:21:47:6f:4b:fd:d5:3f:a4: d6:82:88:6b:a6:7d:5d:bb:6d:37:7f:1b:84:21:3d: a9:a1:6c:6f:88:cd:91:78:5d:95:91:37:f5:9e:9a: b1:2c:e6:7c:36:3d:34:a9:25:79:93:a8:5e:ab:78: a8:7f:dc:bf:b5:46:49:02:12:82:60:76:02:1f:72: b3:e6:93:0e:2f:bb:b7:7c:d9:ef:57:29:2c:2a:89: 30:34:b1:fe:dc:b7:c8:4b:5a:d5:38:f5:de:9f:46: 08:32:0a:a9:bd:f8:2f:90:e1:ad:d7:3f:16:ef:14: 8d:01:7c:6d:9a:c4:78:8a:5d:28:ac:1f:ab:4a:e4: f7:8c:de:5f:3c:03:e4:b2:bd:0b:23:1d:ac:27:6c: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FD:5F:8D:E3:6E:C4:4C:09:A9:28:7D:7D:5A:0A:E4:A9:9F:8C:9B X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.15.0/24 143.20.42.0/24 143.20.46.0/24 143.20.67.0/24 143.20.118.0/23 143.20.123.0/24 143.20.181.0/24 143.20.193.0/24 Signature Algorithm: sha256WithRSAEncryption 75:c8:86:51:c9:8b:42:4c:14:b7:9e:e3:48:a0:c4:da:5a:f0: d3:70:95:28:c1:cb:cd:3b:57:69:97:8b:c4:0d:42:bc:87:a0: 62:19:9e:80:c7:bc:fa:9e:19:c8:32:3b:44:be:e7:2f:d8:90: bd:ef:cb:fe:2f:e6:c4:f5:be:9d:08:5b:06:63:be:59:1c:f4: c7:4d:a9:3d:d8:67:61:a1:33:ca:df:d0:a4:08:df:3e:27:21: 41:3d:fe:d9:b6:07:d1:a9:e0:ea:fa:89:de:41:df:2a:7d:48: 05:f2:a5:d4:dd:9a:b2:ff:5d:5c:83:58:f7:f5:e3:a8:ce:db: 33:1c:10:bb:f9:16:ac:d6:d3:88:2e:3d:37:88:6c:57:c6:a8: a9:8b:47:f8:db:17:9b:b3:4d:5c:77:8a:37:dd:6b:d6:cd:5f: c6:18:f1:9f:31:4c:e6:87:75:7c:86:37:7c:86:21:98:f8:79: a5:29:30:62:a1:db:c9:4c:09:91:a8:99:a8:fe:0e:c4:c8:19: 62:51:1c:60:ef:70:b5:8e:57:48:50:3b:22:57:37:46:fe:2b: 82:a3:b4:a4:0b:46:14:2a:5a:7e:b2:fa:6f:3c:88:50:97:4d: 52:04:96:fc:51:9a:7d:58:59:69:5a:a0:36:25:9e:48:07:fd: 74:7b:c9:d8 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUM9XEvtSjH1g24kZdTamVUPibytEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMzAxNTA5NTVaFw0yNjExMjkxNTE0NTVaMDMxMTAvBgNV BAMTKEMzRkQ1RjhERTM2RUM0NEMwOUE5Mjg3RDdENUEwQUU0QTk5RjhDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6UPpT6dOhBTPYPK0lZ7XTCUf UiQGk/PVv26W0WGsPOGH0U2NummrZU6xrsLx1qkBD8Y4u0qB30vLUSOo7lESKtPy qMETSNlphAb3Ed737moo8fPfF44KviOIr3w6HYpCMjxXHyl+P0anfN7U15ghR29L /dU/pNaCiGumfV27bTd/G4QhPamhbG+IzZF4XZWRN/WemrEs5nw2PTSpJXmTqF6r eKh/3L+1RkkCEoJgdgIfcrPmkw4vu7d82e9XKSwqiTA0sf7ct8hLWtU49d6fRggy Cqm9+C+Q4a3XPxbvFI0BfG2axHiKXSisH6tK5PeM3l88A+SyvQsjHawnbBHbAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUw/1fjeNuxEwJqSh9fVoK5KmfjJswHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBACPFA8D BACPFCoDBACPFC4DBACPFEMDBAGPFHYDBACPFHsDBACPFLUDBACPFMEwDQYJKoZI hvcNAQELBQADggEBAHXIhlHJi0JMFLee40igxNpa8NNwlSjBy807V2mXi8QNQryH oGIZnoDHvPqeGcgyO0S+5y/YkL3vy/4v5sT1vp0IWwZjvlkc9MdNqT3YZ2GhM8rf 0KQI3z4nIUE9/tm2B9Gp4Or6id5B3yp9SAXypdTdmrL/XVyDWPf146jO2zMcELv5 FqzW04guPTeIbFfGqKmLR/jbF5uzTVx3ijfda9bNX8YY8Z8xTOaHdXyGN3yGIZj4 eaUpMGKh28lMCZGomaj+DsTIGWJRHGDvcLWOV0hQOyJXN0b+K4KjtKQLRhQqWn6y +m88iFCXTVIElvxRmn1YWWlaoDYlnkgH/XR7ydg= -----END CERTIFICATE-----Generated at Fri Dec 5 16:20:32 2025 by rpki-client