This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: v2NxNn7+16be2NFzzvKU32LFo2gY3NaSvMuskKQABuM= Subject key identifier: D8:ED:08:8C:A0:70:24:AB:B3:C1:49:BF:FA:BF:8F:BE:85:E9:64:04 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 176D61224B7461102E2881CBE79A82E3B0A465AA Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa Signing time: Sun 23 Nov 2025 12:55:12 +0000 ROA not before: Sun 23 Nov 2025 12:50:12 +0000 ROA not after: Sun 22 Nov 2026 12:55:12 +0000 asID: 397423 IP address blocks: 141.11.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6d:61:22:4b:74:61:10:2e:28:81:cb:e7:9a:82:e3:b0:a4:65:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 23 12:50:12 2025 GMT Not After : Nov 22 12:55:12 2026 GMT Subject: CN=D8ED088CA07024ABB3C149BFFABF8FBE85E96404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:2b:92:5c:68:42:fa:39:f5:49:09:84:e5: 21:94:e4:12:1f:a9:a2:e6:0a:23:27:04:bc:71:96: 29:60:0b:67:98:15:9c:9a:a5:3f:b6:8d:0e:fe:f1: d9:cc:60:70:b0:ce:32:78:27:83:82:24:ca:8f:33: f9:af:18:49:20:a4:85:d0:1f:6d:df:e1:27:c9:03: 7d:a5:37:db:20:47:25:78:d0:53:b5:d9:a6:84:10: 55:ad:a4:26:5d:3e:0d:bd:3b:84:22:26:ed:c5:d8: 04:dd:fa:2f:6b:75:fa:31:bf:ab:6d:df:98:b9:4b: f2:a2:2e:ce:d4:88:04:8d:a7:24:a8:30:5b:e8:6c: 35:3f:c1:23:ca:d0:2d:1f:15:f8:b2:b1:30:30:84: 66:4d:bc:f2:15:10:6b:21:34:9c:e9:2c:c5:ba:0c: 34:97:91:6e:c9:51:95:90:15:dc:12:18:e4:67:3e: 7f:16:70:2a:d4:f0:0b:b9:61:f3:45:49:63:12:6b: 6e:df:34:c4:46:f6:ea:72:68:c6:11:34:a7:4f:38: 1c:19:c7:e6:22:d1:31:40:3f:fe:99:73:23:ad:1a: 38:a4:50:d1:20:de:8e:5b:dd:82:53:cf:17:c8:95: 74:95:90:27:54:2b:62:7d:75:d0:9b:3c:50:21:22: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:08:8C:A0:70:24:AB:B3:C1:49:BF:FA:BF:8F:BE:85:E9:64:04 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.247.0/24 Signature Algorithm: sha256WithRSAEncryption a0:dc:43:92:8a:32:a9:fa:44:8e:dc:f3:e9:89:c2:88:6f:5c: 83:e8:58:d0:92:b3:e7:d2:61:fc:4a:d2:92:ce:0b:a3:37:32: 14:cb:2d:57:1d:2c:0d:f9:5b:4b:a5:b3:56:fc:cf:ff:c3:21: 7f:2e:26:1c:df:32:44:b5:6c:c1:8f:f7:79:57:e8:46:69:54: 01:9d:9d:e3:b3:f0:8c:42:90:e0:24:42:41:58:71:6d:88:5b: 87:b3:e2:5e:72:ca:78:ab:a8:a6:6a:be:3e:2c:57:a9:c3:d8: 4e:37:5f:4e:a3:75:99:ae:a6:4b:56:5a:ce:b0:bc:c9:29:1e: 8f:e7:62:a0:f5:96:2f:82:f5:5a:42:e8:3a:ff:ba:d0:ee:8f: ab:6e:2a:be:17:ea:c2:b4:02:3c:60:88:8e:bb:82:70:0d:39: 78:8b:ef:dd:52:48:47:79:c3:98:41:5f:82:fb:34:25:aa:a7: e2:a1:18:14:16:7f:12:56:46:ee:dc:35:3d:c0:47:c8:22:a6: d9:12:3f:88:76:5d:94:a2:07:ea:be:23:1a:ae:4c:34:98:19: 25:d4:73:f6:54:8e:33:f3:d0:e8:02:80:3b:ea:6a:c2:f8:50: cb:13:d1:9b:84:95:99:17:cf:02:cf:08:4e:aa:6f:c7:96:97: 1c:fd:82:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUF21hIkt0YRAuKIHL55qC47CkZaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMjMxMjUwMTJaFw0yNjExMjIxMjU1MTJaMDMxMTAvBgNV BAMTKEQ4RUQwODhDQTA3MDI0QUJCM0MxNDlCRkZBQkY4RkJFODVFOTY0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kSuSXGhC+jn1SQmE5SGU5BIf qaLmCiMnBLxxlilgC2eYFZyapT+2jQ7+8dnMYHCwzjJ4J4OCJMqPM/mvGEkgpIXQ H23f4SfJA32lN9sgRyV40FO12aaEEFWtpCZdPg29O4QiJu3F2ATd+i9rdfoxv6tt 35i5S/KiLs7UiASNpySoMFvobDU/wSPK0C0fFfiysTAwhGZNvPIVEGshNJzpLMW6 DDSXkW7JUZWQFdwSGORnPn8WcCrU8Au5YfNFSWMSa27fNMRG9upyaMYRNKdPOBwZ x+Yi0TFAP/6ZcyOtGjikUNEg3o5b3YJTzxfIlXSVkCdUK2J9ddCbPFAhIvWLAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU2O0IjKBwJKuzwUm/+r+PvoXpZAQwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzk3NDIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQv3 MA0GCSqGSIb3DQEBCwUAA4IBAQCg3EOSijKp+kSO3PPpicKIb1yD6FjQkrPn0mH8 StKSzgujNzIUyy1XHSwN+VtLpbNW/M//wyF/LiYc3zJEtWzBj/d5V+hGaVQBnZ3j s/CMQpDgJEJBWHFtiFuHs+Jecsp4q6imar4+LFepw9hON19Oo3WZrqZLVlrOsLzJ KR6P52Kg9ZYvgvVaQug6/7rQ7o+rbiq+F+rCtAI8YIiOu4JwDTl4i+/dUkhHecOY QV+C+zQlqqfioRgUFn8SVkbu3DU9wEfIIqbZEj+Idl2UogfqviMarkw0mBkl1HP2 VI4z89DoAoA76mrC+FDLE9GbhJWZF88CzwhOqm/Hlpcc/YIl -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:16 2025 by rpki-client