This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa File: AS153996.roa (raw, json) Hash identifier: b5gmE7i6RHBLkJDBG7KRxfNT9IGlYpMrL7Zt7Bs9CAU= Subject key identifier: 9B:2B:13:24:D6:BE:B5:2C:2B:B2:2F:1C:4C:89:60:C2:FC:01:D2:60 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 039B9EEB37A7F97FD9945DE5669954B6F84A1047 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa Signing time: Tue 11 Nov 2025 08:10:40 +0000 ROA not before: Tue 11 Nov 2025 08:05:40 +0000 ROA not after: Tue 10 Nov 2026 08:10:40 +0000 asID: 153996 IP address blocks: 143.14.9.0/24 maxlen: 24 143.14.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9b:9e:eb:37:a7:f9:7f:d9:94:5d:e5:66:99:54:b6:f8:4a:10:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 11 08:05:40 2025 GMT Not After : Nov 10 08:10:40 2026 GMT Subject: CN=9B2B1324D6BEB52C2BB22F1C4C8960C2FC01D260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:d8:cd:1f:1a:ab:14:fd:68:ed:ca:99:3b: 81:e5:f5:74:4b:de:07:94:7e:3b:04:f0:4a:48:8a: 04:a2:0e:35:b4:07:52:42:f0:13:8d:eb:2e:95:4f: 9d:a3:16:e9:9f:9a:54:f4:62:8a:9e:e5:48:58:3a: fa:e1:fb:a3:af:fb:2e:5f:64:d1:9d:f3:15:7c:d0: 24:20:f2:01:63:b4:4d:29:bf:f1:a8:64:59:98:71: 87:c5:57:f6:e9:2d:fd:ad:e6:1f:ef:6d:46:ff:6a: 2a:36:3a:af:32:8a:a5:1c:ac:a3:69:32:0f:28:9f: 4f:c5:c1:f0:26:60:35:a9:6c:14:10:51:35:c2:0b: 09:05:0a:49:8e:1f:80:b9:7a:f5:42:a0:43:6e:60: cc:e0:58:1a:70:be:17:5f:36:06:11:38:bd:11:54: 4e:83:78:7a:79:9d:ef:3d:ee:37:e4:b3:c1:a0:ae: 5b:3a:a7:04:44:45:b1:1f:60:73:50:aa:ef:f9:43: 20:e8:ad:18:b8:e7:d6:82:64:cd:3f:8b:5e:57:24: 46:ae:05:e7:4a:a5:95:d1:9a:04:1f:62:f5:1e:4f: 4f:04:ed:d9:d3:c0:a6:8d:1c:05:20:b2:a6:24:02: e0:04:ad:ea:44:62:df:54:66:44:b0:6d:54:04:97: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2B:13:24:D6:BE:B5:2C:2B:B2:2F:1C:4C:89:60:C2:FC:01:D2:60 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.9.0/24 143.14.200.0/24 Signature Algorithm: sha256WithRSAEncryption 53:17:e3:47:f1:8e:af:f4:1e:6b:26:cc:e1:55:f1:fd:d5:89: 30:9e:77:b2:75:c9:84:7e:ac:e0:2f:07:fa:0d:47:ab:89:6b: e8:7b:7e:2e:1f:ec:4b:32:ce:15:f1:c2:98:0f:dd:77:4b:7c: 72:06:26:84:78:97:ca:53:45:7e:99:93:23:84:18:fd:67:23: 7a:43:ee:65:75:93:64:6b:85:d5:dd:67:91:b0:a5:6d:4a:39: c4:dd:61:82:59:c6:e2:e3:b6:e9:af:9d:ac:88:ff:02:a7:04: 29:73:08:93:33:a1:5f:8e:c7:65:95:b7:a2:99:b6:a7:c5:45: d2:a7:06:ff:ce:ff:43:5a:86:62:3a:0c:c5:12:95:1e:f1:8f: 5b:ca:3f:35:3a:7a:9f:0a:cf:b1:b0:23:c2:23:4d:2b:34:42: 24:3b:74:89:e5:23:96:e3:a5:79:3c:81:40:84:b4:41:09:1c: 7c:04:82:82:3f:88:ef:14:e3:03:f1:ad:e7:9b:ff:a0:98:49: 69:24:21:37:f8:51:ca:9b:2a:fd:23:80:24:85:b8:f5:b9:cc: 59:ca:0b:d6:4e:14:a9:ec:af:ca:d1:75:91:56:0d:f0:07:b9: 18:b5:d4:60:db:02:f7:1f:b5:83:1c:df:66:03:bc:bf:20:4e: d4:bc:40:13 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUA5ue6zen+X/ZlF3lZplUtvhKEEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTEwODA1NDBaFw0yNjExMTAwODEwNDBaMDMxMTAvBgNV BAMTKDlCMkIxMzI0RDZCRUI1MkMyQkIyMkYxQzRDODk2MEMyRkMwMUQyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEl9jNHxqrFP1o7cqZO4Hl9XRL 3geUfjsE8EpIigSiDjW0B1JC8BON6y6VT52jFumfmlT0Yoqe5UhYOvrh+6Ov+y5f ZNGd8xV80CQg8gFjtE0pv/GoZFmYcYfFV/bpLf2t5h/vbUb/aio2Oq8yiqUcrKNp Mg8on0/FwfAmYDWpbBQQUTXCCwkFCkmOH4C5evVCoENuYMzgWBpwvhdfNgYROL0R VE6DeHp5ne897jfks8Ggrls6pwRERbEfYHNQqu/5QyDorRi459aCZM0/i15XJEau BedKpZXRmgQfYvUeT08E7dnTwKaNHAUgsqYkAuAErepEYt9UZkSwbVQEl/mNAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUmysTJNa+tSwrsi8cTIlgwvwB0mAwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUzOTk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw4J AwQAjw7IMA0GCSqGSIb3DQEBCwUAA4IBAQBTF+NH8Y6v9B5rJszhVfH91Ykwnney dcmEfqzgLwf6DUeriWvoe34uH+xLMs4V8cKYD913S3xyBiaEeJfKU0V+mZMjhBj9 ZyN6Q+5ldZNka4XV3WeRsKVtSjnE3WGCWcbi47bpr52siP8CpwQpcwiTM6Ffjsdl lbeimbanxUXSpwb/zv9DWoZiOgzFEpUe8Y9byj81OnqfCs+xsCPCI00rNEIkO3SJ 5SOW46V5PIFAhLRBCRx8BIKCP4jvFOMD8a3nm/+gmElpJCE3+FHKmyr9I4Akhbj1 ucxZygvWThSp7K/K0XWRVg3wB7kYtdRg2wL3H7WDHN9mA7y/IE7UvEAT -----END CERTIFICATE-----Generated at Sun Dec 7 13:37:29 2025 by rpki-client