This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137235.roa File: AS137235.roa (raw, json) Hash identifier: PX4oI6lf82HAnNV2Qp8kiZjntyYEcN85wPUzzFITnz0= Subject key identifier: 29:69:DC:4F:66:22:E4:D2:6D:67:CA:EF:A2:76:46:3C:14:1D:C2:E3 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 6D7B26D334C38E7EFD41DD18F47D3CB9254AC90D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137235.roa Signing time: Tue 20 Jan 2026 13:28:13 +0000 ROA not before: Tue 20 Jan 2026 13:23:13 +0000 ROA not after: Tue 19 Jan 2027 13:28:13 +0000 asID: 137235 IP address blocks: 141.11.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7b:26:d3:34:c3:8e:7e:fd:41:dd:18:f4:7d:3c:b9:25:4a:c9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 20 13:23:13 2026 GMT Not After : Jan 19 13:28:13 2027 GMT Subject: CN=2969DC4F6622E4D26D67CAEFA276463C141DC2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:8d:2e:32:93:44:bd:bd:c6:20:64:5a:0b: 59:f2:0d:06:05:6a:2d:36:94:60:f2:30:f2:c7:bc: b4:93:d2:b9:82:64:4a:56:59:04:12:e9:d9:25:4b: 04:68:00:03:ff:9e:9d:0a:34:72:91:0e:03:49:94: 70:ed:5d:c4:27:0e:d5:ad:00:d5:c4:d6:fc:7d:b0: d5:81:6f:19:66:73:7e:91:4d:01:34:56:7b:0e:d9: fd:6b:61:5c:99:37:90:07:c7:17:bf:fa:e2:12:6b: 34:e3:e3:c8:14:e4:1b:22:ca:8c:83:a1:4a:c2:35: 93:68:ed:e0:58:53:ef:bd:b1:48:d2:5d:49:ae:56: 9b:3f:ec:cf:bb:83:5a:51:0e:b2:eb:e9:60:fe:94: 1c:71:d2:50:9b:b0:cf:bb:67:d5:d1:c4:1a:71:37: 88:fa:86:eb:60:83:49:ff:bf:07:9a:98:e5:38:c1: 8f:40:15:fd:75:7e:06:e5:9f:b4:a3:34:a5:d0:1e: 9e:c0:37:b7:10:fe:c6:d2:a4:95:78:05:61:37:1b: c8:46:bc:e9:55:b7:d6:57:b3:10:fa:08:88:a2:37: 95:a1:f9:12:5d:ef:94:82:b4:2a:99:2d:b2:05:9f: 5b:fb:2c:c1:b1:eb:ea:75:4b:eb:58:07:a0:4b:22: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:69:DC:4F:66:22:E4:D2:6D:67:CA:EF:A2:76:46:3C:14:1D:C2:E3 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.231.0/24 Signature Algorithm: sha256WithRSAEncryption 83:7c:fb:48:27:51:c8:2f:8d:29:63:37:1e:2e:e8:3c:ba:ed: 3e:1a:9f:fb:be:c1:b7:6c:d0:30:f8:1e:fa:07:23:a3:51:92: d3:ce:01:8b:42:f5:4f:aa:37:f9:4c:86:54:a6:ab:d1:d9:cc: 4f:ee:b1:eb:be:8c:83:77:57:d5:e0:80:10:48:7f:f6:e8:78: 0f:d9:8a:b8:3b:2f:f9:79:29:43:e7:5e:05:b7:31:81:95:6d: 91:ba:6f:bc:38:2b:84:fb:f5:ae:b7:5f:5a:19:31:f4:31:51: 8e:66:ec:46:82:a5:c1:6f:ed:d4:50:46:94:b4:54:cb:79:7e: 28:7c:e4:6e:85:b3:b2:23:fe:59:5c:dc:20:f4:f8:e9:a2:14: 0a:9f:39:b1:f5:0c:51:c7:2d:c7:27:3a:95:5f:19:d1:ad:bd: 1f:33:5c:ba:f7:32:a3:d6:d9:0e:1c:63:a0:b7:8a:43:57:23: 23:45:d2:56:ff:2b:cb:15:c7:40:d7:fb:40:a0:aa:07:5f:80: b7:72:aa:73:c6:75:b2:bc:02:7e:0c:83:24:ae:be:55:a5:ef: 2d:0a:b2:76:9c:10:ef:a3:15:b1:8f:d2:ac:88:04:82:6b:9d: 8d:b5:1f:eb:83:b9:67:05:e0:3d:a6:20:c4:77:cd:22:c6:bf: 24:fe:29:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbXsm0zTDjn79Qd0Y9H08uSVKyQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMjAxMzIzMTNaFw0yNzAxMTkxMzI4MTNaMDMxMTAvBgNV BAMTKDI5NjlEQzRGNjYyMkU0RDI2RDY3Q0FFRkEyNzY0NjNDMTQxREMyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmo0uMpNEvb3GIGRaC1nyDQYF ai02lGDyMPLHvLST0rmCZEpWWQQS6dklSwRoAAP/np0KNHKRDgNJlHDtXcQnDtWt ANXE1vx9sNWBbxlmc36RTQE0VnsO2f1rYVyZN5AHxxe/+uISazTj48gU5BsiyoyD oUrCNZNo7eBYU++9sUjSXUmuVps/7M+7g1pRDrLr6WD+lBxx0lCbsM+7Z9XRxBpx N4j6hutgg0n/vweamOU4wY9AFf11fgbln7SjNKXQHp7AN7cQ/sbSpJV4BWE3G8hG vOlVt9ZXsxD6CIiiN5Wh+RJd75SCtCqZLbIFn1v7LMGx6+p1S+tYB6BLIiNNAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUKWncT2Yi5NJtZ8rvonZGPBQdwuMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM3MjM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvn MA0GCSqGSIb3DQEBCwUAA4IBAQCDfPtIJ1HIL40pYzceLug8uu0+Gp/7vsG3bNAw +B76ByOjUZLTzgGLQvVPqjf5TIZUpqvR2cxP7rHrvoyDd1fV4IAQSH/26HgP2Yq4 Oy/5eSlD514FtzGBlW2Rum+8OCuE+/Wut19aGTH0MVGOZuxGgqXBb+3UUEaUtFTL eX4ofORuhbOyI/5ZXNwg9PjpohQKnzmx9QxRxy3HJzqVXxnRrb0fM1y69zKj1tkO HGOgt4pDVyMjRdJW/yvLFcdA1/tAoKoHX4C3cqpzxnWyvAJ+DIMkrr5Vpe8tCrJ2 nBDvoxWxj9KsiASCa52NtR/rg7lnBeA9piDEd80ixr8k/ikS -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:32 2026 by rpki-client