This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215523.roa File: AS215523.roa (raw, json) Hash identifier: grWAPQXk+qlMRaaswLTorVxUuHCOd7rQS2UHI2WP00g= Subject key identifier: 14:8B:72:BE:1D:0A:9D:0F:F5:48:CD:2C:75:98:34:95:F1:41:63:F8 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 0261639B0E6B021B776ECF5AF17959D9ED90861A Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215523.roa Signing time: Thu 13 Nov 2025 13:55:11 +0000 ROA not before: Thu 13 Nov 2025 13:50:11 +0000 ROA not after: Thu 12 Nov 2026 13:55:11 +0000 asID: 215523 IP address blocks: 141.11.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:61:63:9b:0e:6b:02:1b:77:6e:cf:5a:f1:79:59:d9:ed:90:86:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 13 13:50:11 2025 GMT Not After : Nov 12 13:55:11 2026 GMT Subject: CN=148B72BE1D0A9D0FF548CD2C75983495F14163F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:9a:c5:7e:4f:f8:7d:5a:99:bc:94:ed:ef: 89:af:20:5e:ca:d7:c5:82:0a:fd:a0:ed:95:62:89: 40:e7:0f:5c:71:04:c9:d0:b3:48:6e:26:70:2c:31: f0:07:f5:28:73:a7:5a:c0:a0:54:8f:3a:25:21:cc: eb:b8:30:ba:cd:fa:31:29:01:c0:e5:57:cc:e5:01: b8:86:36:e2:a2:2f:8f:c0:a6:2e:08:62:30:e0:af: 13:10:04:35:9d:e5:34:46:77:55:8d:41:7e:4a:05: 16:f8:72:c6:d9:9e:7d:fc:90:8e:97:18:8c:39:a0: 51:3e:4a:da:4c:fc:f4:26:77:bd:a9:d5:e6:a5:d4: 44:d9:3e:f0:68:79:ad:e0:57:ce:49:ca:a9:4c:bb: 0e:0d:6e:0e:70:bd:23:02:8f:71:ee:fb:93:f1:fd: 49:63:26:6c:8d:eb:71:24:25:d4:f6:8c:cd:a9:b6: 8e:0c:1d:f8:4c:78:52:66:c2:ab:3b:1c:a4:c1:3e: 8e:d4:4e:61:7c:c7:bd:ff:d9:d2:3a:c1:49:cd:c6: 5b:95:64:91:d9:cf:c6:87:64:90:cf:0f:d7:2a:6c: c1:4e:e7:f7:ff:f1:36:5d:fe:90:bb:4e:14:b8:6d: b4:38:1b:14:84:d2:2a:a6:91:10:05:28:27:58:ee: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:72:BE:1D:0A:9D:0F:F5:48:CD:2C:75:98:34:95:F1:41:63:F8 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215523.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.200.0/23 Signature Algorithm: sha256WithRSAEncryption 13:71:05:6f:1b:cf:bf:03:8f:08:7a:e6:55:48:3f:c7:9e:16: 80:d5:dc:b9:0e:e9:92:4b:3d:54:4e:0b:81:fe:cc:af:aa:15: 5b:15:c3:7c:fa:21:b1:49:f6:db:5b:f6:bf:fe:67:28:96:d9: 11:02:97:2b:8b:9c:cf:71:ca:7b:aa:b4:c5:ed:97:10:2f:48: 17:36:9b:35:4b:b2:cf:78:14:a1:31:3d:90:60:a6:19:ad:5a: 55:91:61:5a:96:3e:f4:72:2f:e0:26:cb:42:0f:58:78:90:6b: f3:67:5f:23:7d:69:4f:4d:06:27:fc:3d:be:4a:d5:e8:e7:de: 11:03:6b:27:85:85:ba:87:55:ed:5b:2a:72:74:46:ca:46:ec: f3:bc:b7:60:3f:2a:a6:7d:ab:41:28:49:26:d4:61:53:40:d4: 65:99:50:3f:54:21:64:2b:10:98:a2:28:91:54:f2:fe:0b:dc: b4:1d:19:73:1a:57:39:02:2d:43:dd:0f:e8:09:27:b3:27:6f: 71:8c:78:69:11:ec:ca:6a:52:03:3f:47:a1:bf:09:da:bd:9c: 74:5f:d2:37:0f:2e:bd:90:3b:1d:13:d5:c3:ed:7e:55:e9:39: 5d:8a:7a:3f:3c:fa:75:6c:01:21:05:3f:3d:37:32:c7:b3:73: 0e:43:53:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAmFjmw5rAht3bs9a8XlZ2e2QhhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMTMxMzUwMTFaFw0yNjExMTIxMzU1MTFaMDMxMTAvBgNV BAMTKDE0OEI3MkJFMUQwQTlEMEZGNTQ4Q0QyQzc1OTgzNDk1RjE0MTYzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoK5rFfk/4fVqZvJTt74mvIF7K 18WCCv2g7ZViiUDnD1xxBMnQs0huJnAsMfAH9Shzp1rAoFSPOiUhzOu4MLrN+jEp AcDlV8zlAbiGNuKiL4/Api4IYjDgrxMQBDWd5TRGd1WNQX5KBRb4csbZnn38kI6X GIw5oFE+StpM/PQmd72p1eal1ETZPvBoea3gV85JyqlMuw4Nbg5wvSMCj3Hu+5Px /UljJmyN63EkJdT2jM2pto4MHfhMeFJmwqs7HKTBPo7UTmF8x73/2dI6wUnNxluV ZJHZz8aHZJDPD9cqbMFO5/f/8TZd/pC7ThS4bbQ4GxSE0iqmkRAFKCdY7ng1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUFItyvh0KnQ/1SM0sdZg0lfFBY/gwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE1NTIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQvI MA0GCSqGSIb3DQEBCwUAA4IBAQATcQVvG8+/A48IeuZVSD/HnhaA1dy5DumSSz1U TguB/syvqhVbFcN8+iGxSfbbW/a//mcoltkRApcri5zPccp7qrTF7ZcQL0gXNps1 S7LPeBShMT2QYKYZrVpVkWFalj70ci/gJstCD1h4kGvzZ18jfWlPTQYn/D2+StXo 594RA2snhYW6h1XtWypydEbKRuzzvLdgPyqmfatBKEkm1GFTQNRlmVA/VCFkKxCY oiiRVPL+C9y0HRlzGlc5Ai1D3Q/oCSezJ29xjHhpEezKalIDP0ehvwnavZx0X9I3 Dy69kDsdE9XD7X5V6Tldino/PPp1bAEhBT89NzLHs3MOQ1OF -----END CERTIFICATE-----Generated at Sat Dec 6 14:36:53 2025 by rpki-client