This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215172.roa File: AS215172.roa (raw, json) Hash identifier: t8bwDUSf7q+Trr/Gc5ek8Zqtbyo+qra4z7aOrni6Ppg= Subject key identifier: C9:04:1A:40:53:D6:9B:A9:0C:7F:3B:CB:69:4E:62:36:B7:CB:7D:0B Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 5DA1B7FA1BFCF582EA5073C1C5B0E8E157ED2D0B Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215172.roa Signing time: Mon 05 Jan 2026 21:01:27 +0000 ROA not before: Mon 05 Jan 2026 20:56:27 +0000 ROA not after: Mon 04 Jan 2027 21:01:27 +0000 asID: 215172 IP address blocks: 141.11.76.0/24 maxlen: 24 141.11.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a1:b7:fa:1b:fc:f5:82:ea:50:73:c1:c5:b0:e8:e1:57:ed:2d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 5 20:56:27 2026 GMT Not After : Jan 4 21:01:27 2027 GMT Subject: CN=C9041A4053D69BA90C7F3BCB694E6236B7CB7D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:2b:67:5a:6b:2c:37:eb:1e:22:36:e9:63: 19:05:0f:84:4b:44:cd:84:ea:7e:44:4b:ca:75:5f: 97:7c:df:84:68:e8:e8:a5:9e:d6:64:bf:ac:b0:25: cf:98:3c:24:db:05:71:7c:4c:97:b9:5f:ae:5b:4d: a8:34:2d:68:3f:60:a5:3b:35:c6:69:16:76:7a:35: d1:c3:a1:ae:d0:78:92:6b:38:16:3a:ea:81:16:95: c0:04:96:e5:11:c5:fe:81:a2:9f:4b:94:08:97:1b: bc:ee:c5:7f:ee:db:2d:a6:6f:ab:a2:fb:c0:65:83: f5:d4:95:44:75:6d:77:a5:8a:73:7e:4c:1a:96:24: d6:de:1c:37:b2:85:ac:f8:81:40:c3:42:af:7a:76: 21:5a:0a:99:1f:15:ae:ed:fa:4e:33:68:81:18:f9: f9:41:89:a2:6a:a7:16:30:46:37:3a:94:87:b6:db: 1f:e3:e8:0f:b3:74:e2:47:b4:c1:a1:72:b2:c3:9b: bb:e7:93:1f:46:ee:05:0f:09:a4:4d:1f:af:04:6c: bf:ca:5a:3e:20:b3:f6:0d:18:5e:db:83:74:c8:93: 9b:df:01:17:14:41:c7:94:c9:f5:8b:78:62:c6:b8: c2:b3:7c:71:56:d4:db:11:db:3e:12:5e:2a:67:2f: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:04:1A:40:53:D6:9B:A9:0C:7F:3B:CB:69:4E:62:36:B7:CB:7D:0B X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.76.0/24 141.11.141.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:95:8d:c6:99:08:5c:df:06:c1:7d:6b:ee:1f:8d:a7:7b:fb: 45:40:47:de:8f:36:13:18:0f:bb:33:0a:58:bd:a8:00:31:d7: a9:8b:71:79:09:98:b3:36:d5:c6:69:fa:bb:9d:53:28:2b:7f: 75:fa:63:e7:58:a3:49:3f:aa:da:c5:dc:e4:a9:58:e2:5a:cd: 11:54:40:95:b7:b7:51:c8:15:56:cd:b0:6f:b3:b0:7a:24:b4: 04:9d:dd:d1:75:59:72:fe:a8:7d:06:94:54:c3:c9:dc:f2:3e: 6d:8c:e5:06:7a:2e:61:b3:b1:14:f2:c6:ef:c8:22:05:2e:30: 6b:6b:c7:70:55:5a:c9:0b:bd:ae:d0:f8:70:91:9f:47:23:0f: 75:c5:01:51:9c:b2:a6:24:5e:5f:71:25:38:78:91:ea:9e:d2: 94:de:f8:cf:62:fb:a6:e1:0c:17:12:53:89:5b:79:5c:e1:e1: ed:4e:00:4c:a3:02:6a:fa:d3:57:43:8d:3f:74:2b:27:03:d8: a2:85:37:cc:ed:2e:e0:6e:8f:dc:b1:f9:5d:28:c8:5d:7a:82: 98:c7:3c:89:ce:d3:28:35:c7:bd:cd:e5:e6:b8:dc:49:c7:57: 8b:c6:da:55:7e:62:b3:55:5c:6b:1e:0d:2b:25:a0:18:9e:9a: f5:f5:36:2d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUXaG3+hv89YLqUHPBxbDo4VftLQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMDUyMDU2MjdaFw0yNzAxMDQyMTAxMjdaMDMxMTAvBgNV BAMTKEM5MDQxQTQwNTNENjlCQTkwQzdGM0JDQjY5NEU2MjM2QjdDQjdEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLaitnWmssN+seIjbpYxkFD4RL RM2E6n5ES8p1X5d834Ro6OilntZkv6ywJc+YPCTbBXF8TJe5X65bTag0LWg/YKU7 NcZpFnZ6NdHDoa7QeJJrOBY66oEWlcAEluURxf6Bop9LlAiXG7zuxX/u2y2mb6ui +8Blg/XUlUR1bXelinN+TBqWJNbeHDeyhaz4gUDDQq96diFaCpkfFa7t+k4zaIEY +flBiaJqpxYwRjc6lIe22x/j6A+zdOJHtMGhcrLDm7vnkx9G7gUPCaRNH68EbL/K Wj4gs/YNGF7bg3TIk5vfARcUQceUyfWLeGLGuMKzfHFW1NsR2z4SXipnL9YtAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUyQQaQFPWm6kMfzvLaU5iNrfLfQswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE1MTcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQtM AwQAjQuNMA0GCSqGSIb3DQEBCwUAA4IBAQAPlY3GmQhc3wbBfWvuH42ne/tFQEfe jzYTGA+7MwpYvagAMdepi3F5CZizNtXGafq7nVMoK391+mPnWKNJP6raxdzkqVji Ws0RVECVt7dRyBVWzbBvs7B6JLQEnd3RdVly/qh9BpRUw8nc8j5tjOUGei5hs7EU 8sbvyCIFLjBra8dwVVrJC72u0PhwkZ9HIw91xQFRnLKmJF5fcSU4eJHqntKU3vjP Yvum4QwXElOJW3lc4eHtTgBMowJq+tNXQ40/dCsnA9iihTfM7S7gbo/csfldKMhd eoKYxzyJztMoNce9zeXmuNxJx1eLxtpVfmKzVVxrHg0rJaAYnpr19TYt -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:33 2026 by rpki-client