This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142354.roa File: AS142354.roa (raw, json) Hash identifier: MO38tkW21jXNuhbUGZMLrlGnjUB5ovxE3MyZfv4j4Yw= Subject key identifier: 7B:8A:75:BA:CA:9C:70:92:D2:3A:36:BB:C3:FA:35:63:71:58:E4:E7 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 1811865B9EF6EF9BB7A3E3D3FB23B49585CF78F8 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142354.roa Signing time: Fri 05 Dec 2025 15:47:07 +0000 ROA not before: Fri 05 Dec 2025 15:42:07 +0000 ROA not after: Fri 04 Dec 2026 15:47:07 +0000 asID: 142354 IP address blocks: 45.157.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:11:86:5b:9e:f6:ef:9b:b7:a3:e3:d3:fb:23:b4:95:85:cf:78:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 5 15:42:07 2025 GMT Not After : Dec 4 15:47:07 2026 GMT Subject: CN=7B8A75BACA9C7092D23A36BBC3FA35637158E4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:ec:a0:b7:66:d8:3b:cc:53:07:a2:b0:7e: b2:c7:df:02:ee:fb:eb:37:76:a0:12:57:f7:66:db: 34:6c:1c:51:26:e7:e1:a5:ad:13:a8:bf:df:d2:a5: 9c:71:f0:81:c5:15:d4:6a:c3:5b:f1:2d:7a:bc:09: 7e:0e:f2:c2:06:cb:a3:dc:d5:9c:3a:af:74:a9:6a: bb:0e:c3:23:d1:df:99:ec:ce:a3:ad:10:2f:28:ec: e6:91:60:33:bb:0e:1c:67:55:53:6f:2c:72:23:d1: d7:70:fb:4b:0c:91:d1:b7:c3:86:e7:84:4f:70:f2: 5e:b7:47:8d:6c:cf:1e:f7:86:94:37:5d:aa:cf:c5: 0b:84:13:3d:f7:a0:ed:6e:a6:5a:5b:dd:ea:50:fb: 87:4b:27:fb:2c:23:f0:21:4f:1c:d8:24:cc:0c:fc: e1:da:94:cf:a3:5d:e5:98:01:da:8b:21:c9:f3:f5: bd:ad:3e:42:09:f6:3f:68:ac:fd:1d:7e:af:4f:5d: eb:83:d8:48:d6:be:74:cc:d6:06:60:fb:b2:6e:bc: 7b:c6:70:14:18:d3:06:7e:e0:51:e3:74:50:19:eb: 4c:e0:75:b2:9c:46:5b:e9:35:c3:74:d1:86:a2:a0: bd:1c:27:e4:11:6f:eb:62:5a:c8:36:36:46:4b:5b: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8A:75:BA:CA:9C:70:92:D2:3A:36:BB:C3:FA:35:63:71:58:E4:E7 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142354.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.16.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b7:9e:49:82:b5:1a:72:7c:d9:92:2e:3c:eb:88:00:76:f0: 65:8b:b7:28:0f:d1:3f:57:a4:a3:77:1a:fd:c8:fd:73:78:0a: c8:fd:ef:a9:c9:8b:74:40:b3:9b:a4:36:9c:eb:60:a5:2b:6d: 3d:52:64:b8:c5:99:fa:0d:e7:b3:02:e9:b2:e8:61:2a:14:de: 60:a9:99:39:36:4c:2e:9e:5e:a9:70:98:1e:fe:37:de:c5:bf: 73:e1:2d:d8:ae:dd:13:a0:8a:8a:54:40:94:b1:a4:90:d7:de: ee:0f:04:aa:ea:c5:e9:d3:84:01:e2:d6:ca:81:2c:35:46:d5: 71:c5:89:5b:af:09:ab:09:72:e4:c5:05:d1:bd:8a:f3:98:d3: 0b:1e:93:bc:9d:ff:81:4e:a5:88:09:54:29:1c:20:03:ee:f9: e9:39:7b:a5:b5:9a:dd:e9:fc:68:54:cd:23:80:71:29:f0:af: 72:fc:2e:8b:c5:f0:86:66:73:c1:ce:16:c9:cb:a3:6b:a0:40: 39:0b:1a:ce:45:5f:03:72:7a:49:b9:91:2e:c3:08:50:37:64: a7:09:f2:bd:33:04:c0:c4:c4:6b:fe:ca:6d:35:5d:86:f3:99: a3:66:e4:ed:db:57:fc:56:78:d6:30:45:3e:de:07:39:d7:ab: d6:d4:b7:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGBGGW57275u3o+PT+yO0lYXPePgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMDUxNTQyMDdaFw0yNjEyMDQxNTQ3MDdaMDMxMTAvBgNV BAMTKDdCOEE3NUJBQ0E5QzcwOTJEMjNBMzZCQkMzRkEzNTYzNzE1OEU0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y+ygt2bYO8xTB6KwfrLH3wLu ++s3dqASV/dm2zRsHFEm5+GlrROov9/SpZxx8IHFFdRqw1vxLXq8CX4O8sIGy6Pc 1Zw6r3SparsOwyPR35nszqOtEC8o7OaRYDO7DhxnVVNvLHIj0ddw+0sMkdG3w4bn hE9w8l63R41szx73hpQ3XarPxQuEEz33oO1uplpb3epQ+4dLJ/ssI/AhTxzYJMwM /OHalM+jXeWYAdqLIcnz9b2tPkIJ9j9orP0dfq9PXeuD2EjWvnTM1gZg+7JuvHvG cBQY0wZ+4FHjdFAZ60zgdbKcRlvpNcN00YaioL0cJ+QRb+tiWsg2NkZLW159AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUe4p1usqccJLSOja7w/o1Y3FY5OcwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTQyMzU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0Q MA0GCSqGSIb3DQEBCwUAA4IBAQAYt55JgrUacnzZki4864gAdvBli7coD9E/V6Sj dxr9yP1zeArI/e+pyYt0QLObpDac62ClK209UmS4xZn6DeezAumy6GEqFN5gqZk5 Nkwunl6pcJge/jfexb9z4S3Yrt0ToIqKVECUsaSQ197uDwSq6sXp04QB4tbKgSw1 RtVxxYlbrwmrCXLkxQXRvYrzmNMLHpO8nf+BTqWICVQpHCAD7vnpOXultZrd6fxo VM0jgHEp8K9y/C6LxfCGZnPBzhbJy6NroEA5CxrORV8DcnpJuZEuwwhQN2SnCfK9 MwTAxMRr/sptNV2G85mjZuTt21f8VnjWMEU+3gc516vW1LcO -----END CERTIFICATE-----Generated at Sat Dec 6 17:10:02 2025 by rpki-client