This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201351.roa File: AS201351.roa (raw, json) Hash identifier: Le+SBKlw63+1FMuxoXWmqz8BQ2UIrqcPD9MjUCC7XJ4= Subject key identifier: 96:03:9C:DF:D3:D5:B3:E8:0C:0D:5A:03:90:44:B2:55:EE:5C:DF:23 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 16A38AFF203F713D84A641F6B485F1AD763BBB98 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201351.roa Signing time: Tue 16 Dec 2025 06:55:32 +0000 ROA not before: Tue 16 Dec 2025 06:50:32 +0000 ROA not after: Tue 15 Dec 2026 06:55:32 +0000 asID: 201351 IP address blocks: 141.11.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:8a:ff:20:3f:71:3d:84:a6:41:f6:b4:85:f1:ad:76:3b:bb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 16 06:50:32 2025 GMT Not After : Dec 15 06:55:32 2026 GMT Subject: CN=96039CDFD3D5B3E80C0D5A039044B255EE5CDF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:bb:fa:72:07:ad:36:d4:87:c5:8c:fb:6a: 1d:8a:f4:90:09:19:bc:89:97:e2:aa:fc:ec:59:1d: 2a:13:e3:f2:28:8b:a3:3d:24:08:61:28:f7:f4:91: 17:c5:93:f6:c5:80:5c:b6:9b:d7:7f:3b:d9:b3:dd: 3d:69:d1:20:f9:1d:b3:63:86:ec:a4:62:d6:95:1b: ca:27:66:66:17:85:48:b9:77:0e:b9:e9:4b:b7:a7: 07:be:45:73:ef:68:36:76:1e:8b:b4:b6:3f:c1:68: 6f:41:d4:81:78:1d:32:66:c7:0c:d9:29:b8:e2:be: 1c:bb:69:60:86:4e:76:94:e0:b6:68:38:6a:b5:74: 91:0b:dd:ed:7c:16:15:20:4a:f7:e7:cb:6c:99:30: 15:cd:86:3b:48:da:63:e1:8d:8c:58:91:cf:01:9c: da:4a:fe:be:f3:97:c0:79:d8:4a:8a:61:30:32:e9: 71:5f:ad:e0:ee:81:1a:7c:ad:76:9e:0b:a6:23:50: 7b:a4:7c:af:93:cb:6f:e2:10:85:5b:0f:80:3b:55: c3:9b:c6:d9:3a:4a:c3:47:dc:7c:82:55:52:a7:10: 06:f7:a4:74:b8:7e:3c:3b:5f:78:7a:30:0a:d5:7a: 25:b7:17:0b:13:38:67:db:b6:ae:4d:c3:44:d4:3e: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:03:9C:DF:D3:D5:B3:E8:0C:0D:5A:03:90:44:B2:55:EE:5C:DF:23 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201351.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.146.0/23 Signature Algorithm: sha256WithRSAEncryption 25:ca:b9:a2:c9:fd:ab:a5:49:24:18:8e:a1:f4:f8:ac:da:11: 84:02:b7:89:d8:81:ff:c8:aa:4f:a1:d7:e5:ad:25:38:fe:d1: a4:24:06:a8:c7:6a:80:a1:0a:ec:a4:e2:07:50:c3:9a:45:e9: e2:b7:a2:f0:83:19:c3:65:0a:32:87:a6:2d:83:78:5e:08:90: 27:4b:1e:32:4d:65:c4:d4:d6:11:b1:33:90:d6:4e:3a:7a:7c: 6e:ec:26:d6:59:1b:bf:83:92:6f:3d:40:e6:73:19:49:43:3f: da:54:a3:f9:70:9c:df:30:da:fa:72:eb:19:f2:5a:6a:e9:42: 30:08:20:a8:12:b3:93:4e:cf:0d:18:55:3b:01:87:64:7f:3f: 6e:e2:1f:86:2f:4f:92:6a:3b:67:fd:24:fd:ad:57:c9:6a:4b: e6:bd:ec:ad:d0:1b:5d:8d:ef:01:e3:d2:18:74:d0:01:d7:42: 85:8f:9d:d1:ec:36:6f:85:be:bc:70:01:b3:03:4a:c2:29:a1: c9:a5:1a:0f:b4:88:6b:a6:eb:b9:f5:48:e6:be:cc:f5:7c:ef: 64:ed:24:54:aa:14:ce:51:0c:0d:cf:53:8d:a6:f6:1d:99:ce: 52:ce:b0:c2:4b:0e:41:6b:b4:60:bc:28:ed:a0:da:a4:c6:fc: 9b:92:52:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUFqOK/yA/cT2EpkH2tIXxrXY7u5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTYwNjUwMzJaFw0yNjEyMTUwNjU1MzJaMDMxMTAvBgNV BAMTKDk2MDM5Q0RGRDNENUIzRTgwQzBENUEwMzkwNDRCMjU1RUU1Q0RGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYbv6cgetNtSHxYz7ah2K9JAJ GbyJl+Kq/OxZHSoT4/Ioi6M9JAhhKPf0kRfFk/bFgFy2m9d/O9mz3T1p0SD5HbNj huykYtaVG8onZmYXhUi5dw656Uu3pwe+RXPvaDZ2Hou0tj/BaG9B1IF4HTJmxwzZ Kbjivhy7aWCGTnaU4LZoOGq1dJEL3e18FhUgSvfny2yZMBXNhjtI2mPhjYxYkc8B nNpK/r7zl8B52EqKYTAy6XFfreDugRp8rXaeC6YjUHukfK+Ty2/iEIVbD4A7VcOb xtk6SsNH3HyCVVKnEAb3pHS4fjw7X3h6MArVeiW3FwsTOGfbtq5Nw0TUPqS1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUlgOc39PVs+gMDVoDkESyVe5c3yMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAxMzUxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQuS MA0GCSqGSIb3DQEBCwUAA4IBAQAlyrmiyf2rpUkkGI6h9Pis2hGEAreJ2IH/yKpP odflrSU4/tGkJAaox2qAoQrspOIHUMOaRenit6LwgxnDZQoyh6Ytg3heCJAnSx4y TWXE1NYRsTOQ1k46enxu7CbWWRu/g5JvPUDmcxlJQz/aVKP5cJzfMNr6cusZ8lpq 6UIwCCCoErOTTs8NGFU7AYdkfz9u4h+GL0+Sajtn/ST9rVfJakvmveyt0Btdje8B 49IYdNAB10KFj53R7DZvhb68cAGzA0rCKaHJpRoPtIhrpuu59Ujmvsz1fO9k7SRU qhTOUQwNz1ONpvYdmc5SzrDCSw5Ba7RgvCjtoNqkxvybklLJ -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:09 2025 by rpki-client