This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: ue9Oq+Vbg6k2XVmKG21SaO/UTVObTgwNNX87lDhk9UE= Subject key identifier: 23:9D:B1:59:2D:2D:9B:F6:8C:B9:63:F8:78:2F:6F:5A:F6:67:9F:2C Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 31E3335C12CC7B2804C66373D87E0888B76A95D7 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209043.roa Signing time: Wed 21 Jan 2026 11:55:35 +0000 ROA not before: Wed 21 Jan 2026 11:50:35 +0000 ROA not after: Wed 20 Jan 2027 11:55:35 +0000 asID: 209043 IP address blocks: 141.11.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e3:33:5c:12:cc:7b:28:04:c6:63:73:d8:7e:08:88:b7:6a:95:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 21 11:50:35 2026 GMT Not After : Jan 20 11:55:35 2027 GMT Subject: CN=239DB1592D2D9BF68CB963F8782F6F5AF6679F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:83:e1:74:d6:c0:5b:60:ba:01:84:49:c5: 9f:4f:1a:aa:a6:00:9d:ca:db:61:73:d3:00:98:2c: ac:f8:7a:1f:98:ab:28:51:ef:66:d4:a8:da:fb:9b: 29:9c:9d:88:b7:b2:80:6b:99:58:16:8e:5f:ab:7e: fc:5e:c5:46:44:2f:d6:51:6c:32:23:fa:18:a9:a3: 2f:67:0c:ae:5f:9d:46:74:46:7c:fa:37:cb:d9:71: da:cb:8a:cb:ab:9a:5b:08:b7:11:e9:31:58:fb:0a: a6:c2:20:19:3f:5e:82:6c:ef:50:c0:d9:e5:ae:7c: 55:8e:96:a3:1e:e9:96:f0:cf:02:d1:84:69:dd:ba: 70:aa:0d:96:7a:c3:c3:66:9f:d6:71:2e:83:cf:be: cc:9b:83:4d:0c:b3:e6:c2:31:34:64:a1:16:90:2a: ec:3c:90:f1:77:5a:3b:3b:10:67:9b:0b:f8:60:0f: ab:91:8d:59:17:8b:ea:10:c1:72:17:70:25:22:fe: 56:0f:f2:b8:ec:68:2a:93:96:8d:7d:14:96:3d:e0: 9c:e6:07:0d:5a:8c:41:6a:ce:50:c5:b9:6d:4a:fd: cd:f3:da:c6:d7:32:07:06:23:fd:0b:73:22:3a:fd: 41:30:37:bd:b7:99:de:e6:af:0f:e2:84:96:ea:84: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:B1:59:2D:2D:9B:F6:8C:B9:63:F8:78:2F:6F:5A:F6:67:9F:2C X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.125.0/24 Signature Algorithm: sha256WithRSAEncryption a9:70:5c:01:0b:eb:0e:a2:a7:c8:c1:50:d9:18:bc:f2:f7:6d: 8d:38:71:c9:24:16:e2:02:1b:67:a1:60:26:a2:bf:cf:22:c9: 13:63:09:5b:bb:50:60:0c:15:66:cc:5a:84:d1:7a:ea:ed:d9: 94:5b:f5:24:8d:c4:5f:05:77:35:4e:87:01:64:b5:11:a0:bf: 79:3b:7b:c3:e7:be:d2:88:81:0f:7c:db:de:dd:4f:ed:96:67: fb:d5:1e:b6:11:72:b9:db:ed:3e:2a:d1:ff:8f:e6:af:3a:f0: 85:80:f4:0b:7c:86:d1:7a:ea:52:65:4c:c6:37:72:59:3c:65: 67:aa:2b:42:7e:3d:28:43:33:1f:7f:e9:82:5b:99:eb:a2:4c: c9:25:eb:bc:51:45:dc:8a:78:88:cc:ca:99:09:e1:79:da:eb: 5f:3d:31:cc:6c:01:1c:eb:86:71:85:a3:58:f1:99:8c:bf:84: 32:75:ee:5f:0d:e1:10:7c:42:62:ef:e0:97:0b:93:a5:70:14: 4a:2d:84:76:a8:14:91:46:89:b0:4b:5e:42:88:c2:5d:0b:e2: 40:1e:94:dd:0c:4f:bf:fe:cf:8b:66:13:99:7e:e3:50:99:b9: 42:e3:ab:0a:07:4f:f3:2a:ab:f4:0f:7a:a1:9c:16:87:b9:91: 1f:d2:36:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMeMzXBLMeygExmNz2H4IiLdqldcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMjExMTUwMzVaFw0yNzAxMjAxMTU1MzVaMDMxMTAvBgNV BAMTKDIzOURCMTU5MkQyRDlCRjY4Q0I5NjNGODc4MkY2RjVBRjY2NzlGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZoPhdNbAW2C6AYRJxZ9PGqqm AJ3K22Fz0wCYLKz4eh+YqyhR72bUqNr7mymcnYi3soBrmVgWjl+rfvxexUZEL9ZR bDIj+hipoy9nDK5fnUZ0Rnz6N8vZcdrLisurmlsItxHpMVj7CqbCIBk/XoJs71DA 2eWufFWOlqMe6ZbwzwLRhGndunCqDZZ6w8Nmn9ZxLoPPvsybg00Ms+bCMTRkoRaQ Kuw8kPF3Wjs7EGebC/hgD6uRjVkXi+oQwXIXcCUi/lYP8rjsaCqTlo19FJY94Jzm Bw1ajEFqzlDFuW1K/c3z2sbXMgcGI/0LcyI6/UEwN723md7mrw/ihJbqhNpvAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUI52xWS0tm/aMuWP4eC9vWvZnnywwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA5MDQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQt9 MA0GCSqGSIb3DQEBCwUAA4IBAQCpcFwBC+sOoqfIwVDZGLzy922NOHHJJBbiAhtn oWAmor/PIskTYwlbu1BgDBVmzFqE0Xrq7dmUW/UkjcRfBXc1TocBZLURoL95O3vD 577SiIEPfNve3U/tlmf71R62EXK52+0+KtH/j+avOvCFgPQLfIbReupSZUzGN3JZ PGVnqitCfj0oQzMff+mCW5nrokzJJeu8UUXciniIzMqZCeF52utfPTHMbAEc64Zx haNY8ZmMv4Qyde5fDeEQfEJi7+CXC5OlcBRKLYR2qBSRRomwS15CiMJdC+JAHpTd DE+//s+LZhOZfuNQmblC46sKB0/zKqv0D3qhnBaHuZEf0jYF -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:11 2026 by rpki-client