This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139989.roa File: AS139989.roa (raw, json) Hash identifier: Qjedo0zN1V+5PoQhcAxyO82hu7Y1HZrkcoyOZsERRRc= Subject key identifier: 33:DD:AF:76:7A:D7:7C:08:21:73:A2:A3:E7:2A:4F:B8:5B:E9:A1:FB Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 3E993FCC745FA6F61D0D3850F482D047962ADB85 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139989.roa Signing time: Fri 05 Dec 2025 10:55:14 +0000 ROA not before: Fri 05 Dec 2025 10:50:14 +0000 ROA not after: Fri 04 Dec 2026 10:55:14 +0000 asID: 139989 IP address blocks: 141.11.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:99:3f:cc:74:5f:a6:f6:1d:0d:38:50:f4:82:d0:47:96:2a:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 5 10:50:14 2025 GMT Not After : Dec 4 10:55:14 2026 GMT Subject: CN=33DDAF767AD77C082173A2A3E72A4FB85BE9A1FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:96:7b:96:51:88:f3:46:2d:16:a6:b5:93:e7: 40:b8:de:6f:eb:b4:11:44:b6:d5:e8:e7:f6:5a:e3: d0:af:58:dc:d6:e4:07:12:2a:c9:1d:c9:f5:e9:1b: bb:d9:5f:ab:33:27:0f:54:5b:67:cc:d3:8f:07:7e: c3:f7:78:aa:c4:fd:e5:b2:30:7b:3f:d9:53:cb:47: b9:d3:2a:e3:c6:30:a0:e4:2f:44:84:b0:07:2c:d1: ef:1f:d9:d6:95:de:70:a6:2d:97:20:df:41:4a:ef: 42:a5:30:e7:97:5d:06:42:da:be:f3:4d:1a:f5:ef: de:5a:16:1d:48:62:38:b7:9f:07:66:39:c3:02:1b: 82:d5:b5:e5:f7:7a:91:f1:83:63:d3:82:d3:42:98: 2f:74:e0:af:8c:4d:06:e6:ca:de:71:3a:f5:00:ec: 91:03:55:2b:3b:ad:a8:6f:8f:5c:f7:da:d0:80:71: cb:43:d7:6a:48:45:0d:82:93:b3:07:ca:b5:09:61: 08:3b:3c:f1:38:d1:5a:c4:c4:19:b7:4b:70:3e:3c: 62:63:24:a2:d1:5b:86:9a:9c:1b:2b:f2:8b:34:b6: 92:31:03:22:9e:43:8f:d1:bb:1c:d2:cc:af:5c:9a: eb:a8:69:93:b9:cc:48:49:26:01:0a:d3:1e:10:84: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:AF:76:7A:D7:7C:08:21:73:A2:A3:E7:2A:4F:B8:5B:E9:A1:FB X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.241.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ef:62:7a:45:cc:7a:4f:a8:75:dd:94:f3:15:f2:c1:fc:21: ff:ce:1e:55:61:55:ba:06:51:77:0d:4f:3a:97:9c:97:eb:ed: 3a:e8:2a:45:65:5d:1e:56:9b:50:a0:e4:b1:40:5d:9e:04:b9: 56:55:63:f5:4a:60:61:5b:e3:4d:1f:04:fe:c2:2d:5a:30:24: 9b:78:e3:42:d0:c4:0c:44:85:ff:33:b2:ff:e3:1a:f2:41:d3: 21:89:6c:62:dc:cd:8d:ee:a1:b9:79:e4:aa:ac:6f:2c:92:e0: 4f:a3:5c:c9:9d:6a:56:7a:84:23:2b:1e:84:d8:cd:9b:b2:1c: 69:91:48:8e:93:ea:89:10:af:7d:f3:69:50:9d:1a:1e:2e:11: f9:cf:b1:3c:ec:05:73:ca:ba:7e:10:e1:96:42:ca:74:b4:7e: ef:53:06:5d:db:ab:3b:16:42:0e:26:24:d6:46:9e:98:b2:ce: 7d:cc:1b:e3:68:51:68:d1:96:32:7d:4a:da:89:e6:ab:5e:fa: 88:7b:47:11:d2:6a:fe:36:c3:9a:a6:03:37:60:f0:46:39:ef: 6a:5c:f9:62:c4:1b:ef:f1:d2:0a:66:61:99:27:0a:db:e4:32: 78:61:dc:6b:06:d2:ba:10:da:a7:1d:6a:61:66:02:2e:e7:df: da:82:11:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUPpk/zHRfpvYdDThQ9ILQR5Yq24UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMDUxMDUwMTRaFw0yNjEyMDQxMDU1MTRaMDMxMTAvBgNV BAMTKDMzRERBRjc2N0FENzdDMDgyMTczQTJBM0U3MkE0RkI4NUJFOUExRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSlnuWUYjzRi0WprWT50C43m/r tBFEttXo5/Za49CvWNzW5AcSKskdyfXpG7vZX6szJw9UW2fM048HfsP3eKrE/eWy MHs/2VPLR7nTKuPGMKDkL0SEsAcs0e8f2daV3nCmLZcg30FK70KlMOeXXQZC2r7z TRr1795aFh1IYji3nwdmOcMCG4LVteX3epHxg2PTgtNCmC904K+MTQbmyt5xOvUA 7JEDVSs7rahvj1z32tCAcctD12pIRQ2Ck7MHyrUJYQg7PPE40VrExBm3S3A+PGJj JKLRW4aanBsr8os0tpIxAyKeQ4/RuxzSzK9cmuuoaZO5zEhJJgEK0x4QhC2BAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUM92vdnrXfAghc6Kj5ypPuFvpofswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM5OTg5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvx MA0GCSqGSIb3DQEBCwUAA4IBAQBz72J6Rcx6T6h13ZTzFfLB/CH/zh5VYVW6BlF3 DU86l5yX6+066CpFZV0eVptQoOSxQF2eBLlWVWP1SmBhW+NNHwT+wi1aMCSbeONC 0MQMRIX/M7L/4xryQdMhiWxi3M2N7qG5eeSqrG8skuBPo1zJnWpWeoQjKx6E2M2b shxpkUiOk+qJEK9982lQnRoeLhH5z7E87AVzyrp+EOGWQsp0tH7vUwZd26s7FkIO JiTWRp6Yss59zBvjaFFo0ZYyfUraiearXvqIe0cR0mr+NsOapgM3YPBGOe9qXPli xBvv8dIKZmGZJwrb5DJ4YdxrBtK6ENqnHWphZgIu59/aghE8 -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:40 2025 by rpki-client