This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57043.roa File: AS57043.roa (raw, json) Hash identifier: xItN0jvGfvFzdTvwqF37KTRZDI2HZmd/kUPpeVTvCcw= Subject key identifier: 5E:85:95:36:81:84:0C:29:22:B4:6B:4C:7D:87:5A:94:AB:04:2A:E3 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 16387F3B1639953331190FD7507F2CF297CE7B14 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57043.roa Signing time: Thu 08 Jan 2026 10:55:33 +0000 ROA not before: Thu 08 Jan 2026 10:50:33 +0000 ROA not after: Thu 07 Jan 2027 10:55:33 +0000 asID: 57043 IP address blocks: 141.11.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:38:7f:3b:16:39:95:33:31:19:0f:d7:50:7f:2c:f2:97:ce:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 8 10:50:33 2026 GMT Not After : Jan 7 10:55:33 2027 GMT Subject: CN=5E85953681840C2922B46B4C7D875A94AB042AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:94:25:ad:7d:a0:2a:08:1c:10:e3:d1:e2: 03:53:f2:3d:d1:a9:db:c5:e3:dd:e6:96:4e:4f:b4: fa:97:3b:97:0d:a6:2a:14:75:78:64:71:59:7d:df: 19:fc:7a:3a:14:dc:d0:6e:7f:09:15:88:cf:c6:03: cc:c8:bd:32:34:40:54:ba:ce:57:2b:e7:9a:43:b1: 6d:98:8a:45:eb:39:b5:0d:c1:a1:9c:5f:3f:ab:66: 5b:76:b3:5b:f7:5f:8d:7d:9d:08:59:66:26:24:a4: 15:85:3f:aa:66:05:ce:03:e1:2e:e7:11:35:10:c9: 4d:c6:df:73:e6:fb:59:fa:66:d5:25:0f:64:0a:16: 58:c9:9c:88:4b:29:d2:22:20:45:3a:50:06:a0:54: c6:cc:48:11:6d:2d:b1:2d:70:13:b1:31:62:99:74: 22:d3:ae:bb:95:82:1d:44:61:b5:1a:01:92:47:60: d2:c6:ae:31:68:85:f5:a0:9f:e4:2d:de:24:4e:66: 7c:f4:c9:f6:9c:a4:50:30:78:9d:3f:0c:eb:b3:b5: 5b:39:1b:0e:98:45:c5:23:fa:6c:07:b0:49:52:f3: 47:f6:4c:2e:11:03:8d:b9:7c:a7:2f:e5:f6:76:7b: 82:b4:7b:55:0b:67:8f:97:57:01:7b:f0:14:21:b5: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:95:36:81:84:0C:29:22:B4:6B:4C:7D:87:5A:94:AB:04:2A:E3 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.0.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e4:c6:0b:50:9d:25:52:55:4f:b6:29:0f:c5:4c:03:01:6d: 1d:9a:3d:b4:8c:1b:eb:99:bb:d2:fe:0d:6b:f1:8d:74:c1:2b: 9d:1e:03:1d:89:2f:81:3b:66:37:21:ee:7b:6c:ad:95:d6:6b: 07:d1:8f:aa:fc:0a:93:8e:85:e1:54:ea:f0:67:d5:fd:d4:dc: 2a:ab:59:43:72:51:ac:a2:3e:60:3a:4c:8b:a6:56:16:12:c6: bf:19:29:e6:87:2f:93:de:2c:f9:de:9b:47:fd:02:6f:81:de: 4b:eb:ce:70:a3:5c:57:dc:ff:02:1f:4e:d9:10:29:51:7e:bc: 51:1e:27:35:1a:a4:33:f4:85:ed:c8:38:ba:65:86:f0:69:e2: 0b:d0:d1:96:25:6c:75:1d:93:5e:e7:8e:06:8e:60:86:7a:2f: 34:1e:b8:83:d4:53:50:9c:02:9b:5e:8a:30:65:a3:34:da:93: c2:3f:a8:39:e5:26:94:27:a5:13:83:01:bc:77:cd:2c:3c:41: 52:f7:6c:a8:9e:ce:67:95:79:45:ae:49:bb:fa:09:3e:8b:32: 3f:36:ed:94:38:98:ce:e7:c5:b7:b2:f3:5a:39:2f:3a:e5:5d: 87:d5:0e:2c:e2:29:0c:9f:bb:1d:c9:6e:d7:aa:cb:a3:9e:05: 75:58:fc:67 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUFjh/OxY5lTMxGQ/XUH8s8pfOexQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMDgxMDUwMzNaFw0yNzAxMDcxMDU1MzNaMDMxMTAvBgNV BAMTKDVFODU5NTM2ODE4NDBDMjkyMkI0NkI0QzdEODc1QTk0QUIwNDJBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wJQlrX2gKggcEOPR4gNT8j3R qdvF493mlk5PtPqXO5cNpioUdXhkcVl93xn8ejoU3NBufwkViM/GA8zIvTI0QFS6 zlcr55pDsW2YikXrObUNwaGcXz+rZlt2s1v3X419nQhZZiYkpBWFP6pmBc4D4S7n ETUQyU3G33Pm+1n6ZtUlD2QKFljJnIhLKdIiIEU6UAagVMbMSBFtLbEtcBOxMWKZ dCLTrruVgh1EYbUaAZJHYNLGrjFohfWgn+Qt3iROZnz0yfacpFAweJ0/DOuztVs5 Gw6YRcUj+mwHsElS80f2TC4RA425fKcv5fZ2e4K0e1ULZ4+XVwF78BQhtZfLAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUXoWVNoGEDCkitGtMfYdalKsEKuMwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTcwNDMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCwAw DQYJKoZIhvcNAQELBQADggEBABDkxgtQnSVSVU+2KQ/FTAMBbR2aPbSMG+uZu9L+ DWvxjXTBK50eAx2JL4E7Zjch7ntsrZXWawfRj6r8CpOOheFU6vBn1f3U3CqrWUNy UayiPmA6TIumVhYSxr8ZKeaHL5PeLPnem0f9Am+B3kvrznCjXFfc/wIfTtkQKVF+ vFEeJzUapDP0he3IOLplhvBp4gvQ0ZYlbHUdk17njgaOYIZ6LzQeuIPUU1CcApte ijBlozTak8I/qDnlJpQnpRODAbx3zSw8QVL3bKiezmeVeUWuSbv6CT6LMj827ZQ4 mM7nxbey81o5LzrlXYfVDiziKQyfux3Jbteqy6OeBXVY/Gc= -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:41 2026 by rpki-client