This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147293.roa File: AS147293.roa (raw, json) Hash identifier: Z7stAoVGP7ER0TKk1sSv7sVlavw4Si2QqdO4Sk4P7Ns= Subject key identifier: 2B:2D:C8:C3:59:03:39:A0:7F:78:15:77:11:7A:47:D3:76:D0:92:A4 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 09460F563CBB397DC30D8FA827594D9A583D1F33 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147293.roa Signing time: Sun 11 Jan 2026 19:55:33 +0000 ROA not before: Sun 11 Jan 2026 19:50:33 +0000 ROA not after: Sun 10 Jan 2027 19:55:33 +0000 asID: 147293 IP address blocks: 141.11.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:46:0f:56:3c:bb:39:7d:c3:0d:8f:a8:27:59:4d:9a:58:3d:1f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 11 19:50:33 2026 GMT Not After : Jan 10 19:55:33 2027 GMT Subject: CN=2B2DC8C3590339A07F781577117A47D376D092A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:06:71:f3:7e:5a:82:3e:2e:ee:3d:48:a7: 37:0c:23:42:e1:02:c5:4b:5d:ff:a8:61:c9:ec:e0: d1:f9:e2:94:49:7f:c2:cb:0a:d4:fc:84:96:f2:a8: 47:11:92:44:5d:60:77:ef:3c:f4:63:10:6d:6f:e4: ce:c7:00:59:05:67:49:12:c1:34:1f:46:ec:27:55: 47:31:f4:a0:97:99:34:14:2c:2e:24:b0:42:c4:3a: 50:a7:d1:16:f7:b6:4e:45:b0:62:b5:d2:67:42:e0: d0:5f:be:d4:08:a1:6a:11:a3:b9:1b:36:0b:c4:36: 3c:ab:2a:e9:6d:43:7e:30:ae:4d:4d:e9:eb:a0:9b: b7:b7:69:58:7e:3a:3e:b3:5a:ac:d6:05:a5:41:18: 2a:3b:fa:86:41:21:9f:57:b5:50:a7:a3:2e:03:a5: 9f:0a:6b:c3:39:e7:11:49:f3:47:52:32:87:96:4f: 13:28:28:e3:c0:be:eb:1f:14:b6:a0:5b:88:56:ef: 6a:24:57:ce:e3:0e:55:b0:40:e4:09:cb:fa:81:1e: cd:aa:5e:ea:8b:31:d1:1e:3c:d5:12:9e:05:6e:36: 28:68:ad:c9:da:ee:73:3f:e1:12:e0:ac:f2:b8:ec: a8:34:aa:c1:db:da:81:9b:92:ae:1f:ba:d8:2e:97: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2D:C8:C3:59:03:39:A0:7F:78:15:77:11:7A:47:D3:76:D0:92:A4 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147293.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.22.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:5e:10:1c:e0:ed:0e:76:95:1b:21:8b:60:ef:e2:ab:92:fa: 03:ca:5b:8b:a3:51:58:8d:fd:6e:c7:0e:51:f2:67:50:2d:15: 1e:bb:6e:d2:55:dc:21:2e:66:9b:8a:e4:79:51:d0:68:55:40: 92:92:e8:09:f7:a6:a6:10:79:57:6b:e0:e7:29:71:dd:b9:0b: d2:fe:cb:08:ed:40:64:b4:c2:5b:bb:07:38:3e:f7:03:0b:55: 74:20:c8:8c:43:16:87:73:e4:18:06:1b:25:66:38:17:85:73: f0:92:43:68:5d:74:58:50:76:b5:16:e2:ab:34:25:a4:eb:d9: 4e:9a:b6:25:56:cb:71:82:3f:0c:0e:6f:5f:a3:0a:42:86:de: 58:fb:ae:39:97:61:8a:dd:0d:e1:49:0c:20:0f:9a:a6:95:f0: a5:de:6e:ef:ff:e4:71:d4:86:ef:74:0d:bc:84:de:78:5e:bb: b9:82:4b:0e:41:6a:b1:1a:a1:6f:d5:c3:87:47:54:c9:c2:db: 8d:71:f5:fe:7e:14:47:cb:f9:ad:e1:49:0d:36:11:a8:66:05: 8f:60:20:00:e4:f9:58:43:58:91:b0:02:0a:e9:a5:fd:88:7a: 0b:e9:40:55:61:eb:d4:6c:b4:da:ed:00:61:ed:60:b8:cb:ba: ed:73:65:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCUYPVjy7OX3DDY+oJ1lNmlg9HzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMTExOTUwMzNaFw0yNzAxMTAxOTU1MzNaMDMxMTAvBgNV BAMTKDJCMkRDOEMzNTkwMzM5QTA3Rjc4MTU3NzExN0E0N0QzNzZEMDkyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAgZx835agj4u7j1IpzcMI0Lh AsVLXf+oYcns4NH54pRJf8LLCtT8hJbyqEcRkkRdYHfvPPRjEG1v5M7HAFkFZ0kS wTQfRuwnVUcx9KCXmTQULC4ksELEOlCn0Rb3tk5FsGK10mdC4NBfvtQIoWoRo7kb NgvENjyrKultQ34wrk1N6eugm7e3aVh+Oj6zWqzWBaVBGCo7+oZBIZ9XtVCnoy4D pZ8Ka8M55xFJ80dSMoeWTxMoKOPAvusfFLagW4hW72okV87jDlWwQOQJy/qBHs2q XuqLMdEePNUSngVuNihorcna7nM/4RLgrPK47Kg0qsHb2oGbkq4futgul5r1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUKy3Iw1kDOaB/eBV3EXpH03bQkqQwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTQ3MjkzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsW MA0GCSqGSIb3DQEBCwUAA4IBAQAsXhAc4O0OdpUbIYtg7+KrkvoDyluLo1FYjf1u xw5R8mdQLRUeu27SVdwhLmabiuR5UdBoVUCSkugJ96amEHlXa+DnKXHduQvS/ssI 7UBktMJbuwc4PvcDC1V0IMiMQxaHc+QYBhslZjgXhXPwkkNoXXRYUHa1FuKrNCWk 69lOmrYlVstxgj8MDm9fowpCht5Y+645l2GK3Q3hSQwgD5qmlfCl3m7v/+Rx1Ibv dA28hN54Xru5gksOQWqxGqFv1cOHR1TJwtuNcfX+fhRHy/mt4UkNNhGoZgWPYCAA 5PlYQ1iRsAIK6aX9iHoL6UBVYevUbLTa7QBh7WC4y7rtc2UG -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:29 2026 by rpki-client