This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa File: AS216145.roa (raw, json) Hash identifier: uM5xHi5lPUE+k0qQUOGYAMIxfbe60ky5LyZ3cxnNgSw= Subject key identifier: 25:0E:ED:FE:BA:10:D9:C2:43:00:39:01:2C:94:8A:47:CB:A8:0D:AF Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 21EADDA83FC2C93DBD2F311EBC9B4EAC7878F144 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa Signing time: Wed 05 Nov 2025 16:46:46 +0000 ROA not before: Wed 05 Nov 2025 16:41:46 +0000 ROA not after: Wed 04 Nov 2026 16:46:46 +0000 asID: 216145 IP address blocks: 141.11.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 00:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ea:dd:a8:3f:c2:c9:3d:bd:2f:31:1e:bc:9b:4e:ac:78:78:f1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 5 16:41:46 2025 GMT Not After : Nov 4 16:46:46 2026 GMT Subject: CN=250EEDFEBA10D9C2430039012C948A47CBA80DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:b5:85:ee:8c:8a:92:61:4a:8e:30:b2:5f: cb:1c:66:1c:4e:27:be:9d:55:a3:09:f9:b8:ad:11: 6e:7f:9e:da:21:85:06:f8:72:20:46:e2:9a:b3:92: 23:8f:71:05:32:cb:42:c3:ad:a3:c9:0c:3b:36:21: 7f:c9:2b:5a:27:77:21:95:14:71:fd:ac:42:08:4a: ed:1c:f3:4e:47:a6:49:ea:07:ae:cd:52:e3:02:41: e0:fb:66:aa:4f:99:e2:ea:26:74:84:50:4e:ec:ab: 44:22:0f:56:42:ff:6a:99:6d:a6:86:02:45:17:d0: bb:70:f2:30:50:52:3f:c7:41:de:89:ed:d5:c9:84: c8:6a:01:b3:eb:10:11:0f:78:10:f1:59:b7:d5:f5: a6:2c:1c:2b:4b:44:48:ae:fd:64:b5:13:3c:db:66: 0e:c0:ce:92:77:e9:ef:26:d5:48:54:48:ef:92:ec: 29:63:5d:6c:1a:db:23:5e:33:ec:19:ec:d9:a5:6c: 48:d7:54:84:72:2b:4e:29:25:1f:3c:23:3e:2b:93: 8e:0a:fc:83:c3:e2:9c:92:ca:6e:a3:42:75:78:70: 1f:98:ef:40:28:cf:0d:3d:6d:e5:25:0d:94:8d:af: 88:58:2a:ad:bd:85:67:07:b6:c1:ac:a8:6d:55:49: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0E:ED:FE:BA:10:D9:C2:43:00:39:01:2C:94:8A:47:CB:A8:0D:AF X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.181.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:63:0c:3e:bd:63:e9:17:db:0c:b4:09:62:33:e6:1c:2b:77: 69:31:da:2d:f2:6d:7e:ee:e9:64:3d:48:a8:57:01:09:a7:fc: 43:57:b4:6a:47:b2:40:41:38:4b:33:f1:4f:c6:e6:89:8b:db: 62:3b:bf:06:ad:2c:d4:26:7a:bf:a0:65:38:ea:ab:2f:2f:03: 9b:ff:6b:9c:93:40:fc:2b:e1:d5:a0:5b:07:bd:8e:69:c6:20: 39:79:b1:bd:21:8a:e8:3c:7b:6f:8d:2e:17:6f:d8:7b:76:ce: 8f:60:b5:5f:0c:82:52:cd:e6:9c:a0:63:f9:e9:1b:b3:16:70: a6:56:3d:1a:97:7e:7e:7f:f2:32:91:18:63:29:b8:81:06:7c: bd:5e:ff:04:b0:ff:73:5f:ab:7d:4a:75:ae:47:85:de:74:b4: b3:fa:c9:7f:34:08:76:37:4a:85:8d:ee:5c:f2:bd:43:79:10: 50:73:d5:73:f8:e0:6c:23:d8:ab:eb:07:63:ad:38:9e:f9:49: 1c:6e:05:dc:e5:95:68:66:08:c3:d1:ed:97:80:42:b0:ef:61: bb:12:36:fe:de:00:1f:a8:c8:22:a5:eb:36:7c:76:34:95:12: 7d:91:46:4d:db:5c:d3:47:24:88:bc:00:4e:9f:5b:14:05:16: 1e:ff:96:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUIerdqD/CyT29LzEevJtOrHh48UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMDUxNjQxNDZaFw0yNjExMDQxNjQ2NDZaMDMxMTAvBgNV BAMTKDI1MEVFREZFQkExMEQ5QzI0MzAwMzkwMTJDOTQ4QTQ3Q0JBODBEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCE7WF7oyKkmFKjjCyX8scZhxO J76dVaMJ+bitEW5/ntohhQb4ciBG4pqzkiOPcQUyy0LDraPJDDs2IX/JK1ondyGV FHH9rEIISu0c805HpknqB67NUuMCQeD7ZqpPmeLqJnSEUE7sq0QiD1ZC/2qZbaaG AkUX0Ltw8jBQUj/HQd6J7dXJhMhqAbPrEBEPeBDxWbfV9aYsHCtLREiu/WS1Ezzb Zg7AzpJ36e8m1UhUSO+S7CljXWwa2yNeM+wZ7NmlbEjXVIRyK04pJR88Iz4rk44K /IPD4pySym6jQnV4cB+Y70Aozw09beUlDZSNr4hYKq29hWcHtsGsqG1VSR4FAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUJQ7t/roQ2cJDADkBLJSKR8uoDa8wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE2MTQ1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQu1 MA0GCSqGSIb3DQEBCwUAA4IBAQA6Yww+vWPpF9sMtAliM+YcK3dpMdot8m1+7ulk PUioVwEJp/xDV7RqR7JAQThLM/FPxuaJi9tiO78GrSzUJnq/oGU46qsvLwOb/2uc k0D8K+HVoFsHvY5pxiA5ebG9IYroPHtvjS4Xb9h7ds6PYLVfDIJSzeacoGP56Ruz FnCmVj0al35+f/IykRhjKbiBBny9Xv8EsP9zX6t9SnWuR4XedLSz+sl/NAh2N0qF je5c8r1DeRBQc9Vz+OBsI9ir6wdjrTie+UkcbgXc5ZVoZgjD0e2XgEKw72G7Ejb+ 3gAfqMgipes2fHY0lRJ9kUZN21zTRySIvABOn1sUBRYe/5bg -----END CERTIFICATE-----Generated at Sun Dec 7 10:48:08 2025 by rpki-client