This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa File: AS42960.roa (raw, json) Hash identifier: HD3C5lHXrrazAXm3Sm89ue9MEEDGosum062aMfUCFdI= Subject key identifier: 25:72:2B:89:A3:09:29:97:B3:C7:55:C9:E6:36:E9:E6:D3:52:4B:B6 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5EE47F229ED4C7B99C202DBF57E993512BBDE985 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa Signing time: Mon 10 Nov 2025 12:31:45 +0000 ROA not before: Mon 10 Nov 2025 12:26:45 +0000 ROA not after: Mon 09 Nov 2026 12:31:45 +0000 asID: 42960 IP address blocks: 143.14.120.0/22 maxlen: 24 143.14.199.0/24 maxlen: 24 146.103.48.0/24 maxlen: 24 155.117.123.0/24 maxlen: 24 162.141.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e4:7f:22:9e:d4:c7:b9:9c:20:2d:bf:57:e9:93:51:2b:bd:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 10 12:26:45 2025 GMT Not After : Nov 9 12:31:45 2026 GMT Subject: CN=25722B89A3092997B3C755C9E636E9E6D3524BB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:09:b6:79:f7:60:7f:ae:74:6c:a7:11:72: 27:01:1d:47:e4:64:86:d5:06:b7:3d:8d:82:5d:47: 52:f6:05:14:5f:ee:58:09:f3:ca:d8:42:ab:87:54: cf:55:3d:b4:f9:87:aa:47:54:3c:3d:ae:f0:37:32: 84:6f:71:a4:e6:22:8a:76:fe:bd:cb:e7:a9:11:a7: 86:9b:af:57:9c:25:98:fb:9b:65:eb:85:39:a3:69: fa:66:a3:92:94:f9:1d:f2:21:55:46:44:7f:3d:2d: 19:2d:a5:94:cf:01:80:07:c6:43:f7:b4:01:11:1b: 22:c3:ba:35:26:2c:d9:36:69:89:85:f7:a2:1e:05: aa:2a:78:d0:43:9b:1a:58:d8:3f:76:e1:34:cc:cb: ff:8f:61:3f:54:45:92:73:fe:fd:d5:9d:a1:16:7f: 17:81:40:d7:86:4d:96:73:2d:36:44:44:51:8f:47: 36:bf:fc:24:90:b2:39:29:e7:94:09:b9:2a:d4:a9: a7:7d:47:f8:cb:11:61:2e:74:68:e6:0e:4c:37:37: 66:96:e7:26:1a:5a:62:f3:ce:b1:29:84:ef:f7:22: fa:ff:e3:a0:c4:e2:74:29:87:00:c5:aa:40:c7:f2: 32:90:be:25:81:31:80:02:e8:dd:05:fc:f1:c2:5e: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:2B:89:A3:09:29:97:B3:C7:55:C9:E6:36:E9:E6:D3:52:4B:B6 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.120.0/22 143.14.199.0/24 146.103.48.0/24 155.117.123.0/24 162.141.97.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:7d:13:71:0a:ba:3f:c0:5e:b9:8b:a8:b5:54:0a:a0:90:6c: 3a:da:f6:92:6d:41:6d:83:ae:04:53:d8:9f:43:6d:0a:31:19: e1:f5:9d:d7:d3:e0:94:fa:3c:f9:31:65:36:72:4d:15:66:fc: 43:05:f2:af:94:2a:60:df:e6:ea:7d:ed:9e:9e:3d:ea:bb:00: 38:cb:0c:5e:57:e9:fb:03:ad:b7:aa:26:1a:06:4f:33:6f:12: a9:b9:3a:92:0f:b1:8b:ec:50:f4:db:9a:b7:0f:d9:a2:0e:85: 56:15:df:fb:9b:db:56:6e:2b:69:da:69:42:ae:71:7a:2f:42: a0:8b:4c:8b:b4:19:f0:45:8a:6d:ef:80:f9:91:e1:5b:d4:88: 75:89:aa:64:41:cb:04:32:f7:4d:06:94:0e:71:43:2c:78:0c: d9:e3:1f:30:3a:2a:e5:93:38:08:43:6f:1a:15:8a:08:47:7a: 4c:a4:d3:21:9b:ba:97:e3:f3:95:f3:fd:7b:f8:2a:c8:13:fb: e2:50:53:33:07:70:89:93:50:ca:ae:5a:49:15:b3:ce:f5:e4: b4:71:95:7f:a5:38:38:23:6c:4d:d1:4f:46:6d:7f:7b:04:91: cf:c4:d7:70:f9:bb:ec:84:99:48:78:a6:b1:0f:a0:c9:b2:6b: 9b:4a:81:6a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUXuR/Ip7Ux7mcIC2/V+mTUSu96YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTAxMjI2NDVaFw0yNjExMDkxMjMxNDVaMDMxMTAvBgNV BAMTKDI1NzIyQjg5QTMwOTI5OTdCM0M3NTVDOUU2MzZFOUU2RDM1MjRCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9gm2efdgf650bKcRcicBHUfk ZIbVBrc9jYJdR1L2BRRf7lgJ88rYQquHVM9VPbT5h6pHVDw9rvA3MoRvcaTmIop2 /r3L56kRp4abr1ecJZj7m2XrhTmjafpmo5KU+R3yIVVGRH89LRktpZTPAYAHxkP3 tAERGyLDujUmLNk2aYmF96IeBaoqeNBDmxpY2D924TTMy/+PYT9URZJz/v3VnaEW fxeBQNeGTZZzLTZERFGPRza//CSQsjkp55QJuSrUqad9R/jLEWEudGjmDkw3N2aW 5yYaWmLzzrEphO/3Ivr/46DE4nQphwDFqkDH8jKQviWBMYAC6N0F/PHCXnMhAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUJXIriaMJKZezx1XJ5jbp5tNSS7YwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDI5NjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAKPDngD BACPDscDBACSZzADBACbdXsDBACijWEwDQYJKoZIhvcNAQELBQADggEBAJt9E3EK uj/AXrmLqLVUCqCQbDra9pJtQW2DrgRT2J9DbQoxGeH1ndfT4JT6PPkxZTZyTRVm /EMF8q+UKmDf5up97Z6ePeq7ADjLDF5X6fsDrbeqJhoGTzNvEqm5OpIPsYvsUPTb mrcP2aIOhVYV3/ub21ZuK2naaUKucXovQqCLTIu0GfBFim3vgPmR4VvUiHWJqmRB ywQy900GlA5xQyx4DNnjHzA6KuWTOAhDbxoVighHekyk0yGbupfj85Xz/Xv4KsgT ++JQUzMHcImTUMquWkkVs8715LRxlX+lODgjbE3RT0Ztf3sEkc/E13D5u+yEmUh4 prEPoMmya5tKgWo= -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:01 2025 by rpki-client