This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: 7h7b0OGqk+8ddmKI1Ox99+JlGtZEk4wxTJGI21ZLyyM= Subject key identifier: 9A:04:56:2E:C7:F8:2E:83:8B:10:95:10:53:7E:37:83:BC:2E:A1:46 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 27D2B38B4277E8C56B650FD37F04EC90E0279F6D Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205886.roa Signing time: Fri 14 Nov 2025 10:22:45 +0000 ROA not before: Fri 14 Nov 2025 10:17:45 +0000 ROA not after: Fri 13 Nov 2026 10:22:45 +0000 asID: 205886 IP address blocks: 141.11.48.0/24 maxlen: 24 141.11.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d2:b3:8b:42:77:e8:c5:6b:65:0f:d3:7f:04:ec:90:e0:27:9f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 14 10:17:45 2025 GMT Not After : Nov 13 10:22:45 2026 GMT Subject: CN=9A04562EC7F82E838B109510537E3783BC2EA146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:62:df:4f:1a:20:20:b7:46:5a:bb:f1:b5: 16:64:a7:65:83:bb:21:7f:e0:30:e7:b8:0f:c4:8a: c1:e8:44:0e:4c:08:dc:ca:49:77:df:62:45:8e:99: d0:89:a6:79:1b:5e:f7:c1:71:0c:91:c7:28:67:be: 0a:c0:0e:a6:2b:65:55:0a:97:ef:55:fb:67:8f:f8: df:64:47:2e:6a:4c:87:69:1c:3c:5b:5b:86:0b:c8: 8a:67:46:64:ba:df:8f:55:d0:5b:44:b4:98:59:da: ec:29:2f:11:64:ce:f3:17:93:2f:3b:38:26:93:b6: 8e:94:25:63:22:69:d3:e3:dc:8f:e2:c9:0e:01:f3: 89:af:75:6a:67:d1:c5:0f:98:03:66:b5:56:9f:c0: 06:ae:36:9d:39:16:e9:68:6f:5f:44:a1:ca:98:83: 26:6e:a4:73:07:70:d3:d9:6c:48:f0:f2:e1:ad:87: 3f:c4:0f:61:ae:2f:62:a5:95:ca:f8:97:05:c2:81: 6f:12:71:72:04:56:b1:9c:fe:77:e6:e6:12:91:f3: 63:80:f8:0f:aa:b2:a2:d9:17:5a:22:d0:9e:f9:b5: c8:4a:2b:23:b1:c3:c6:5b:4e:9f:19:76:7e:91:31: c6:fe:14:48:56:ae:40:cf:36:84:74:d1:c1:39:d3: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:56:2E:C7:F8:2E:83:8B:10:95:10:53:7E:37:83:BC:2E:A1:46 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.48.0/24 141.11.119.0/24 Signature Algorithm: sha256WithRSAEncryption 20:e4:3e:db:70:c4:a6:9a:f6:23:a4:b8:9f:61:4d:ab:40:bc: 03:55:f9:7c:31:ee:7e:90:ac:7a:8f:fd:2c:f3:dc:10:76:ce: 99:87:bb:a4:39:74:a4:5f:47:47:00:32:70:64:ed:c0:21:86: a7:44:d0:f2:9a:6f:08:df:cb:03:53:a1:e0:79:4c:32:24:68: ac:31:66:a4:8a:54:2f:40:84:15:6e:1c:85:7f:e7:6c:2f:a2: 7a:0b:b4:61:0f:0f:86:e3:c7:b9:31:47:ec:f6:b1:ae:6e:85: 4a:ce:bb:4e:a2:7a:40:2f:e7:0d:d1:b6:c8:97:04:ea:81:1e: 20:7a:a4:6a:5f:fa:93:e0:fa:70:30:ec:6e:77:49:15:4b:4e: 50:21:aa:d6:d7:74:be:70:50:84:23:a7:08:42:36:be:78:10: 95:f5:78:7c:ba:f9:86:96:f8:13:ff:53:fd:8e:4f:0c:f3:d3: 8b:45:30:fd:2e:9a:ba:79:c1:89:b5:63:48:5a:87:24:dd:64: 8f:82:ca:64:8d:1e:19:55:28:73:54:29:e3:8f:24:62:fb:2b: 26:54:7b:54:ad:e0:51:b3:8b:6e:e4:33:6b:49:3d:97:4a:12: 52:82:fa:99:e5:23:ec:50:5e:bf:58:06:a1:44:74:44:52:cd: 94:00:20:7f -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUJ9Kzi0J36MVrZQ/TfwTskOAnn20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMTQxMDE3NDVaFw0yNjExMTMxMDIyNDVaMDMxMTAvBgNV BAMTKDlBMDQ1NjJFQzdGODJFODM4QjEwOTUxMDUzN0UzNzgzQkMyRUExNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlmLfTxogILdGWrvxtRZkp2WD uyF/4DDnuA/EisHoRA5MCNzKSXffYkWOmdCJpnkbXvfBcQyRxyhnvgrADqYrZVUK l+9V+2eP+N9kRy5qTIdpHDxbW4YLyIpnRmS6349V0FtEtJhZ2uwpLxFkzvMXky87 OCaTto6UJWMiadPj3I/iyQ4B84mvdWpn0cUPmANmtVafwAauNp05Fulob19EocqY gyZupHMHcNPZbEjw8uGthz/ED2GuL2Kllcr4lwXCgW8ScXIEVrGc/nfm5hKR82OA +A+qsqLZF1oi0J75tchKKyOxw8ZbTp8Zdn6RMcb+FEhWrkDPNoR00cE50yYlAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUmgRWLsf4LoOLEJUQU343g7wuoUYwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQsw AwQAjQt3MA0GCSqGSIb3DQEBCwUAA4IBAQAg5D7bcMSmmvYjpLifYU2rQLwDVfl8 Me5+kKx6j/0s89wQds6Zh7ukOXSkX0dHADJwZO3AIYanRNDymm8I38sDU6HgeUwy JGisMWakilQvQIQVbhyFf+dsL6J6C7RhDw+G48e5MUfs9rGuboVKzrtOonpAL+cN 0bbIlwTqgR4geqRqX/qT4PpwMOxud0kVS05QIarW13S+cFCEI6cIQja+eBCV9Xh8 uvmGlvgT/1P9jk8M89OLRTD9Lpq6ecGJtWNIWock3WSPgspkjR4ZVShzVCnjjyRi +ysmVHtUreBRs4tu5DNrST2XShJSgvqZ5SPsUF6/WAahRHREUs2UACB/ -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:51 2025 by rpki-client