This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa File: AS200019.roa (raw, json) Hash identifier: xPkQagRn73FWPZZksC6+AbJS8nq6VRnqTs4flKoNuY0= Subject key identifier: 44:85:25:AC:6E:14:83:CB:23:F0:D9:D2:68:92:D1:7C:CB:7E:0E:CE Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 78F65AF7C395EFD869130F924D775B86239BAFA6 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa Signing time: Sat 06 Dec 2025 00:55:14 +0000 ROA not before: Sat 06 Dec 2025 00:50:14 +0000 ROA not after: Sat 05 Dec 2026 00:55:14 +0000 asID: 200019 IP address blocks: 141.11.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f6:5a:f7:c3:95:ef:d8:69:13:0f:92:4d:77:5b:86:23:9b:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 6 00:50:14 2025 GMT Not After : Dec 5 00:55:14 2026 GMT Subject: CN=448525AC6E1483CB23F0D9D26892D17CCB7E0ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:74:d3:57:27:80:6a:0d:dc:48:78:e6:46: c3:d6:f1:54:9d:38:0a:cf:fc:28:07:ab:c3:78:c1: 78:92:cd:99:55:64:be:c2:ec:ee:a0:bf:b1:5b:ae: 77:7a:8f:c1:d5:c4:aa:fe:da:8b:d9:c9:41:3b:a3: 53:f7:32:77:6c:e2:bf:11:23:e7:b6:d5:1d:3f:b0: d1:f9:04:30:51:70:dd:aa:b5:60:a4:8b:3e:99:0a: 6a:76:cb:b6:63:f2:02:fc:3a:81:9b:10:6e:6c:ab: 60:b9:a6:b8:c9:f5:18:ed:6c:47:3a:46:26:52:aa: e6:d3:33:94:27:2d:ee:1c:0d:66:ec:8e:d7:1a:71: f4:fc:88:aa:1d:c5:b7:65:66:96:88:5f:c4:d9:b3: bf:20:00:cf:48:6b:16:c3:16:27:de:32:c9:0d:06: ba:e7:fe:a8:16:a2:b3:60:e2:4d:62:6b:97:f0:11: e4:82:78:bb:a7:cb:a0:bd:08:9a:9a:ab:6a:22:78: 39:c6:72:bb:14:d1:24:b8:8c:c7:88:1d:0e:9b:9b: 29:af:98:87:ee:0f:7f:b3:51:a0:eb:c1:8d:4c:5a: f2:f2:d9:40:da:e0:4c:c5:55:80:18:23:ca:2b:6d: 95:25:e1:2c:c6:f8:cd:fa:a9:5a:ff:26:76:2c:c2: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:25:AC:6E:14:83:CB:23:F0:D9:D2:68:92:D1:7C:CB:7E:0E:CE X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.178.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:66:bf:b7:40:c0:e4:a4:5b:53:f0:24:bf:8a:7b:93:e3:6e: b3:1a:fb:27:9a:2a:29:30:75:ef:98:a8:fa:fa:b7:97:24:b6: c8:c4:2c:26:79:4c:eb:34:8d:c2:33:a2:93:be:b6:c0:42:ae: ec:51:2b:70:21:75:1b:9c:77:56:e1:79:15:56:3a:cd:e1:1e: 1d:81:50:3e:64:37:f2:98:6e:60:1d:ff:c0:c0:d0:b0:36:a5: b5:80:47:c4:21:db:4b:2e:b1:b4:82:9e:76:86:ba:11:d2:11: 30:b9:f0:03:7f:82:e5:c9:b6:92:c6:61:e9:f3:32:1b:90:36: b1:3f:e8:aa:4d:04:a2:65:e2:10:52:b6:88:f7:b3:6d:0c:e5: 36:8e:da:0a:05:a9:5c:e1:b4:30:ac:1c:69:7c:6c:a9:a4:35: 61:d1:e0:5d:16:93:13:87:04:00:05:e6:53:2c:43:22:41:12: 98:cd:11:54:77:a5:83:c5:e5:4a:22:12:e0:41:59:06:ee:15: 6b:20:88:be:b8:a3:a6:9c:2d:8b:f4:04:cd:36:a0:20:3b:93: cc:d2:3e:7c:d9:62:71:a8:ac:4d:68:dd:d4:c2:d9:b8:8e:48: 87:94:e9:47:a4:31:5d:67:fd:55:c3:c7:97:55:69:78:dd:df: a7:9c:97:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUePZa98OV79hpEw+STXdbhiObr6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMDYwMDUwMTRaFw0yNjEyMDUwMDU1MTRaMDMxMTAvBgNV BAMTKDQ0ODUyNUFDNkUxNDgzQ0IyM0YwRDlEMjY4OTJEMTdDQ0I3RTBFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FXTTVyeAag3cSHjmRsPW8VSd OArP/CgHq8N4wXiSzZlVZL7C7O6gv7Fbrnd6j8HVxKr+2ovZyUE7o1P3Mnds4r8R I+e21R0/sNH5BDBRcN2qtWCkiz6ZCmp2y7Zj8gL8OoGbEG5sq2C5prjJ9RjtbEc6 RiZSqubTM5QnLe4cDWbsjtcacfT8iKodxbdlZpaIX8TZs78gAM9IaxbDFifeMskN Brrn/qgWorNg4k1ia5fwEeSCeLuny6C9CJqaq2oieDnGcrsU0SS4jMeIHQ6bmymv mIfuD3+zUaDrwY1MWvLy2UDa4EzFVYAYI8orbZUl4SzG+M36qVr/JnYswhCTAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQURIUlrG4Ug8sj8NnSaJLRfMt+Ds4wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAwMDE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuy MA0GCSqGSIb3DQEBCwUAA4IBAQBdZr+3QMDkpFtT8CS/inuT426zGvsnmiopMHXv mKj6+reXJLbIxCwmeUzrNI3CM6KTvrbAQq7sUStwIXUbnHdW4XkVVjrN4R4dgVA+ ZDfymG5gHf/AwNCwNqW1gEfEIdtLLrG0gp52hroR0hEwufADf4LlybaSxmHp8zIb kDaxP+iqTQSiZeIQUraI97NtDOU2jtoKBalc4bQwrBxpfGyppDVh0eBdFpMThwQA BeZTLEMiQRKYzRFUd6WDxeVKIhLgQVkG7hVrIIi+uKOmnC2L9ATNNqAgO5PM0j58 2WJxqKxNaN3Uwtm4jkiHlOlHpDFdZ/1Vw8eXVWl43d+nnJeS -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:05 2025 by rpki-client