This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49581.roa File: AS49581.roa (raw, json) Hash identifier: bTvHnG5VYTQoADzEM9wh0FRMSWfmTirVK/FY+5mnxEY= Subject key identifier: D0:C2:1B:95:F2:E1:B2:87:80:AA:75:DF:D2:C7:D3:43:A0:6A:BC:AB Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 360555223F3ABB8A8EC21C6650DE61F453321ABC Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49581.roa Signing time: Sun 14 Dec 2025 14:34:26 +0000 ROA not before: Sun 14 Dec 2025 14:29:26 +0000 ROA not after: Sun 13 Dec 2026 14:34:26 +0000 asID: 49581 IP address blocks: 141.11.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:05:55:22:3f:3a:bb:8a:8e:c2:1c:66:50:de:61:f4:53:32:1a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 14 14:29:26 2025 GMT Not After : Dec 13 14:34:26 2026 GMT Subject: CN=D0C21B95F2E1B28780AA75DFD2C7D343A06ABCAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:d3:56:99:4d:a6:62:3d:b6:bb:fc:81:5a: 05:b2:d2:36:ef:80:8c:4c:9f:d0:3e:b4:2c:ce:c6: 8b:18:a1:35:a2:bf:3d:ee:0c:a6:ee:a5:66:eb:b4: 10:55:b5:b0:08:16:d0:9f:96:d2:30:11:a2:45:5b: 9a:fd:01:3f:f7:a4:48:31:f5:30:99:32:d8:8b:e5: 74:47:8e:8c:92:13:ba:3d:1d:ce:b8:1e:0d:c7:42: 18:66:ed:e2:e6:a7:57:2f:dd:6a:3d:28:6d:e8:98: 21:17:f9:05:17:78:da:98:e4:22:1c:eb:a6:f3:1e: 7a:c1:d2:16:66:c3:73:97:7a:05:08:ad:6c:de:87: 6c:04:20:4f:d6:83:24:0c:c9:dc:5b:e6:55:1c:47: e0:19:84:78:e9:27:f1:ae:73:8b:2c:f7:1e:47:9a: e8:d4:8b:8f:11:9d:23:4a:d1:25:26:5a:33:6f:bf: f6:4c:34:52:4f:6c:50:d1:3d:46:1e:68:18:21:4a: 03:df:43:f7:6e:06:88:91:af:3b:cd:4f:d8:86:f5: ce:e3:92:31:16:eb:44:5c:f0:85:db:d6:1d:9c:3a: 5d:5e:1a:53:a3:db:ff:32:ab:7f:f8:29:1c:f0:e4: 64:45:af:75:6a:a7:12:3f:6a:d9:64:65:30:98:92: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:1B:95:F2:E1:B2:87:80:AA:75:DF:D2:C7:D3:43:A0:6A:BC:AB X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49581.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.243.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:65:59:e0:2d:a0:8e:21:e6:ac:06:32:c2:77:68:d8:d3:fb: 5a:a4:0d:5e:79:0c:ad:20:a3:bc:6c:cd:aa:c6:fb:e7:5c:74: 50:06:ba:a0:cb:bd:01:2e:27:64:cc:be:a4:c5:f1:13:c7:26: 87:14:28:ee:27:0b:f4:52:55:86:6a:5d:0d:f7:f7:8e:08:97: 44:fb:42:6a:3a:13:14:d3:fa:5e:50:66:9f:a2:e9:98:2e:f9: a9:a9:96:f6:d1:2d:51:b6:0d:95:50:72:b5:0f:74:ac:95:ef: 87:68:50:88:16:12:fd:53:6d:2c:30:03:6d:fa:db:2c:a4:68: 0c:55:b5:56:5d:0e:f8:3d:7d:83:5b:ac:98:a8:b4:ff:e0:2d: fb:c1:e6:8a:e6:2e:46:78:db:63:05:b2:4c:ab:fa:4a:07:7d: 71:58:f8:09:90:30:87:bb:48:7a:07:31:53:73:01:5b:a4:69: 3c:00:1b:c0:0b:2e:60:b8:49:b3:28:18:fb:cb:94:04:69:82: 03:e6:81:b7:f2:8a:8d:33:3b:0a:fa:d7:0d:0f:ed:34:29:3d: 68:ff:e9:dd:b2:23:fd:e8:a1:9f:d7:2d:0c:28:0e:c8:8b:db: d4:e5:83:a5:f2:79:a2:ce:42:92:6c:85:6c:a9:8e:a8:cf:a6: 57:8b:d0:79 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUNgVVIj86u4qOwhxmUN5h9FMyGrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTQxNDI5MjZaFw0yNjEyMTMxNDM0MjZaMDMxMTAvBgNV BAMTKEQwQzIxQjk1RjJFMUIyODc4MEFBNzVERkQyQzdEMzQzQTA2QUJDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZtNWmU2mYj22u/yBWgWy0jbv gIxMn9A+tCzOxosYoTWivz3uDKbupWbrtBBVtbAIFtCfltIwEaJFW5r9AT/3pEgx 9TCZMtiL5XRHjoySE7o9Hc64Hg3HQhhm7eLmp1cv3Wo9KG3omCEX+QUXeNqY5CIc 66bzHnrB0hZmw3OXegUIrWzeh2wEIE/WgyQMydxb5lUcR+AZhHjpJ/Guc4ss9x5H mujUi48RnSNK0SUmWjNvv/ZMNFJPbFDRPUYeaBghSgPfQ/duBoiRrzvNT9iG9c7j kjEW60Rc8IXb1h2cOl1eGlOj2/8yq3/4KRzw5GRFr3VqpxI/atlkZTCYkgRHAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU0MIblfLhsoeAqnXf0sfTQ6BqvKswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDk1ODEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC/Mw DQYJKoZIhvcNAQELBQADggEBAA1lWeAtoI4h5qwGMsJ3aNjT+1qkDV55DK0go7xs zarG++dcdFAGuqDLvQEuJ2TMvqTF8RPHJocUKO4nC/RSVYZqXQ33944Il0T7Qmo6 ExTT+l5QZp+i6Zgu+amplvbRLVG2DZVQcrUPdKyV74doUIgWEv1TbSwwA2362yyk aAxVtVZdDvg9fYNbrJiotP/gLfvB5ormLkZ422MFskyr+koHfXFY+AmQMIe7SHoH MVNzAVukaTwAG8ALLmC4SbMoGPvLlARpggPmgbfyio0zOwr61w0P7TQpPWj/6d2y I/3ooZ/XLQwoDsiL29Tlg6XyeaLOQpJshWypjqjPpleL0Hk= -----END CERTIFICATE-----Generated at Wed Dec 17 01:30:35 2025 by rpki-client