This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa File: AS138195.roa (raw, json) Hash identifier: 7+0Whgd2Y1iBTGmE5O6VLQwKsSNASfBKtnw8IqJbxbY= Subject key identifier: 35:F8:15:3D:19:CF:D2:B5:DC:F7:F6:85:3C:AA:21:5D:A6:F8:83:C4 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 24DDDA8773AF02FCE5A50A4D4ABA523376945950 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa Signing time: Sun 23 Nov 2025 01:25:27 +0000 ROA not before: Sun 23 Nov 2025 01:20:27 +0000 ROA not after: Sun 22 Nov 2026 01:25:27 +0000 asID: 138195 IP address blocks: 143.14.82.0/23 maxlen: 23 143.14.143.0/24 maxlen: 24 143.14.248.0/23 maxlen: 23 162.141.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:dd:da:87:73:af:02:fc:e5:a5:0a:4d:4a:ba:52:33:76:94:59:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 23 01:20:27 2025 GMT Not After : Nov 22 01:25:27 2026 GMT Subject: CN=35F8153D19CFD2B5DCF7F6853CAA215DA6F883C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ff:fc:04:0d:69:3b:77:d7:92:61:3c:01:c4: 7a:23:29:dd:94:2e:0c:04:a7:c8:0e:91:d9:30:bc: 24:9f:13:ef:da:22:23:18:82:57:5b:c8:8f:eb:f1: bc:de:fa:68:57:f6:41:2e:c9:3c:91:07:13:47:d0: c5:f5:3e:05:03:2c:f7:50:6a:2b:25:ff:d8:ad:39: 76:df:ad:cd:cc:2e:6c:6d:61:40:ec:fb:be:15:72: cd:f8:ce:1c:43:7d:9f:95:f9:9c:da:dc:5f:a9:7d: e8:7c:29:35:f9:17:1b:1b:68:34:61:6a:8d:ed:f3: 8f:03:dd:ed:64:fe:e8:6f:98:c5:24:88:47:e2:0b: 27:fd:10:e0:ca:04:df:21:bb:b5:0e:a7:0a:52:92: 2d:7a:db:d4:ee:d9:c4:1c:a7:ad:4a:53:32:56:b3: 2d:9a:2c:94:92:fd:5b:6e:77:5a:00:f4:97:81:00: fc:00:6f:fa:37:d8:83:fb:77:75:1a:5d:eb:09:a1: f0:fe:70:a6:80:59:97:46:0f:fe:de:67:09:84:2c: 10:19:83:f7:ce:6d:ff:35:53:10:af:8d:a5:10:22: f6:6e:7e:9b:ab:46:2b:31:0a:d5:a8:1f:0d:54:55: 05:21:35:9d:86:6f:f3:1c:0d:59:80:0c:eb:0f:51: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:15:3D:19:CF:D2:B5:DC:F7:F6:85:3C:AA:21:5D:A6:F8:83:C4 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.82.0/23 143.14.143.0/24 143.14.248.0/23 162.141.84.0/22 Signature Algorithm: sha256WithRSAEncryption 73:1e:be:54:ad:e2:5d:7b:c9:51:90:2b:d7:6a:1a:03:ba:95: e5:d1:30:b9:e8:59:f3:a2:65:27:7c:a6:bc:cd:6d:00:ac:5f: 82:07:8c:ac:6a:67:6c:c7:7d:75:03:7b:04:99:42:17:54:20: a4:1f:74:d2:3d:ad:47:36:7f:bc:9e:45:57:f7:27:2f:e0:e6: 6d:11:41:2c:51:b7:02:05:f4:5d:be:dd:cf:a2:a6:4d:13:4a: 73:42:c0:4c:1f:db:2a:d2:c8:da:e1:27:99:2a:a5:d5:91:70: 32:78:29:51:b4:d0:52:74:37:19:a2:f4:8c:1f:9f:35:e1:1d: 22:a1:f0:26:d7:78:db:ad:08:05:a9:e0:1b:f9:b0:a9:f3:d1: e7:44:7c:12:47:ab:b9:62:42:38:0e:24:dd:8d:d2:9d:29:a2: 97:e8:79:12:74:82:cd:ea:f5:2c:a8:89:29:50:69:59:50:de: 44:52:38:c2:53:82:88:f3:71:f0:cd:6b:b2:ea:53:e4:33:56: 90:28:f4:88:77:e7:b0:5a:2e:d1:84:70:8d:65:43:60:4d:10: 5d:5a:86:13:e1:38:e1:25:62:01:4b:d4:61:0c:73:58:57:c9: a1:a7:8c:ec:0c:f2:b7:dd:a2:f2:09:6c:9e:59:42:ef:0e:df: ac:7b:c6:ad -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUJN3ah3OvAvzlpQpNSrpSM3aUWVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjMwMTIwMjdaFw0yNjExMjIwMTI1MjdaMDMxMTAvBgNV BAMTKDM1RjgxNTNEMTlDRkQyQjVEQ0Y3RjY4NTNDQUEyMTVEQTZGODgzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl//wEDWk7d9eSYTwBxHojKd2U LgwEp8gOkdkwvCSfE+/aIiMYgldbyI/r8bze+mhX9kEuyTyRBxNH0MX1PgUDLPdQ aisl/9itOXbfrc3MLmxtYUDs+74Vcs34zhxDfZ+V+Zza3F+pfeh8KTX5FxsbaDRh ao3t848D3e1k/uhvmMUkiEfiCyf9EODKBN8hu7UOpwpSki1629Tu2cQcp61KUzJW sy2aLJSS/Vtud1oA9JeBAPwAb/o32IP7d3UaXesJofD+cKaAWZdGD/7eZwmELBAZ g/fObf81UxCvjaUQIvZufpurRisxCtWoHw1UVQUhNZ2Gb/McDVmADOsPURTlAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUNfgVPRnP0rXc9/aFPKohXab4g8QwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM4MTk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBjw5S AwQAjw6PAwQBjw74AwQCoo1UMA0GCSqGSIb3DQEBCwUAA4IBAQBzHr5UreJde8lR kCvXahoDupXl0TC56FnzomUnfKa8zW0ArF+CB4ysamdsx311A3sEmUIXVCCkH3TS Pa1HNn+8nkVX9ycv4OZtEUEsUbcCBfRdvt3PoqZNE0pzQsBMH9sq0sja4SeZKqXV kXAyeClRtNBSdDcZovSMH5814R0iofAm13jbrQgFqeAb+bCp89HnRHwSR6u5YkI4 DiTdjdKdKaKX6HkSdILN6vUsqIkpUGlZUN5EUjjCU4KI83HwzWuy6lPkM1aQKPSI d+ewWi7RhHCNZUNgTRBdWoYT4TjhJWIBS9RhDHNYV8mhp4zsDPK33aLyCWyeWULv Dt+se8at -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:02 2025 by rpki-client