This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198831.roa File: AS198831.roa (raw, json) Hash identifier: 7vwsYtgJr82UCIlfn+HFcKp77OaktRcL8g6DiDwYmi8= Subject key identifier: 93:44:48:D8:08:F9:A0:FF:DD:5A:02:68:1C:5E:3D:3A:47:59:4C:A8 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 500F016354CA3FDE5F8E7B1DC21FCEC1DC0CBC8D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198831.roa Signing time: Tue 18 Nov 2025 21:32:32 +0000 ROA not before: Tue 18 Nov 2025 21:27:32 +0000 ROA not after: Tue 17 Nov 2026 21:32:32 +0000 asID: 198831 IP address blocks: 141.11.113.0/24 maxlen: 24 141.11.120.0/24 maxlen: 24 141.11.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0f:01:63:54:ca:3f:de:5f:8e:7b:1d:c2:1f:ce:c1:dc:0c:bc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 18 21:27:32 2025 GMT Not After : Nov 17 21:32:32 2026 GMT Subject: CN=934448D808F9A0FFDD5A02681C5E3D3A47594CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:a3:e8:a2:51:8d:db:40:c8:51:4a:cb:49: 93:c4:31:d2:8e:5b:a7:f0:ac:73:12:40:3b:0b:65: cc:a1:e3:23:12:db:cd:0c:dd:97:49:6e:d5:3a:a3: 41:33:62:f5:f9:cd:dc:6f:fa:69:b9:39:76:34:88: b6:7b:eb:ed:e5:ca:f5:d9:3b:e3:24:c6:0c:47:50: 05:d3:c1:27:36:d0:b0:ce:9e:5e:a4:a3:cb:9b:06: a6:2c:48:bc:92:35:c1:b2:42:bc:fc:e6:05:7e:e4: 55:ae:13:ea:29:c7:57:98:13:a6:af:ab:44:ad:5a: 8c:09:22:87:60:61:0a:bf:35:96:86:0d:0b:94:a5: 21:30:cc:1a:22:ed:54:00:90:77:e4:b7:02:8b:a2: 50:60:40:d0:25:ec:47:2d:a5:1f:93:42:dc:bf:cc: a2:55:24:ba:d2:2a:d9:a3:53:11:a8:bc:ef:31:1b: ca:ed:56:12:ce:65:45:e1:30:1f:38:69:4c:ab:ea: 45:99:24:48:8c:eb:08:34:19:99:1d:7a:31:f0:87: 72:fe:3f:4c:34:9a:ff:26:89:f5:64:6f:c7:55:35: 4e:12:0d:8b:9c:ab:08:df:97:ee:16:b6:c6:9a:e1: d8:10:f2:88:f2:69:ff:fc:dd:5b:4b:e0:3c:e8:56: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:44:48:D8:08:F9:A0:FF:DD:5A:02:68:1C:5E:3D:3A:47:59:4C:A8 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.113.0/24 141.11.120.0/24 141.11.180.0/24 Signature Algorithm: sha256WithRSAEncryption 16:30:9f:07:2c:b6:a4:7a:62:37:fc:44:a8:9b:8b:73:6a:75: ec:b8:d2:46:7e:5e:73:3b:a8:60:f9:4b:f3:30:d1:97:1e:f2: d3:3b:bc:b6:48:4e:73:1e:1c:d3:40:cc:3a:85:4d:df:c1:12: 45:a5:4d:4d:c0:2f:fd:63:23:4b:83:4b:e4:7b:59:39:6a:a0: 2b:06:b6:f6:de:d8:ab:37:87:a2:49:80:f4:70:b3:ab:89:d7: 10:c6:f4:30:7e:5b:e9:c3:f0:63:9c:4b:b3:5a:b1:71:1e:ac: 35:d3:3a:f7:5a:dc:54:a1:f9:8c:b5:fd:ee:f1:46:6a:88:ac: 3c:d4:c9:9a:a7:5e:62:f5:a8:32:32:53:5e:64:70:a8:4a:81: dd:69:b1:7f:2d:db:ce:f8:80:1c:12:4e:ac:ba:cf:17:5d:1f: 9c:af:d4:c0:6d:d5:a8:87:59:e8:15:d0:42:66:cc:cd:27:83: 19:5c:bb:45:1c:70:d7:f3:54:16:9a:cc:cc:9f:08:0c:fb:39: f2:31:c1:b3:73:74:b0:01:25:63:d1:4e:78:42:08:41:e8:3e: b9:33:ad:d6:8d:fe:3a:5c:fb:52:e2:cc:d7:5c:1a:01:1e:50: ec:60:ca:a7:93:69:9a:e6:16:7e:63:e7:9f:68:1c:5c:f0:a3: 19:9f:66:24 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUUA8BY1TKP95fjnsdwh/OwdwMvI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMTgyMTI3MzJaFw0yNjExMTcyMTMyMzJaMDMxMTAvBgNV BAMTKDkzNDQ0OEQ4MDhGOUEwRkZERDVBMDI2ODFDNUUzRDNBNDc1OTRDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vKPoolGN20DIUUrLSZPEMdKO W6fwrHMSQDsLZcyh4yMS280M3ZdJbtU6o0EzYvX5zdxv+mm5OXY0iLZ76+3lyvXZ O+MkxgxHUAXTwSc20LDOnl6ko8ubBqYsSLySNcGyQrz85gV+5FWuE+opx1eYE6av q0StWowJIodgYQq/NZaGDQuUpSEwzBoi7VQAkHfktwKLolBgQNAl7EctpR+TQty/ zKJVJLrSKtmjUxGovO8xG8rtVhLOZUXhMB84aUyr6kWZJEiM6wg0GZkdejHwh3L+ P0w0mv8mifVkb8dVNU4SDYucqwjfl+4Wtsaa4dgQ8ojyaf/83VtL4DzoVgNrAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUk0RI2Aj5oP/dWgJoHF49OkdZTKgwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTk4ODMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjQtx AwQAjQt4AwQAjQu0MA0GCSqGSIb3DQEBCwUAA4IBAQAWMJ8HLLakemI3/ESom4tz anXsuNJGfl5zO6hg+UvzMNGXHvLTO7y2SE5zHhzTQMw6hU3fwRJFpU1NwC/9YyNL g0vke1k5aqArBrb23tirN4eiSYD0cLOridcQxvQwflvpw/BjnEuzWrFxHqw10zr3 WtxUofmMtf3u8UZqiKw81Mmap15i9agyMlNeZHCoSoHdabF/LdvO+IAcEk6sus8X XR+cr9TAbdWoh1noFdBCZszNJ4MZXLtFHHDX81QWmszMnwgM+znyMcGzc3SwASVj 0U54QghB6D65M63Wjf46XPtS4szXXBoBHlDsYMqnk2ma5hZ+Y+efaBxc8KMZn2Yk -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:58 2025 by rpki-client