This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS59432.roa File: AS59432.roa (raw, json) Hash identifier: YBGKQJy6MOr9inTuwVOQhuhtZ4dqr/+PdKlw0HXaXME= Subject key identifier: 78:5F:48:74:72:B7:39:F1:57:43:76:32:35:65:97:4E:CD:2C:0B:06 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 20CACC20BDA039CF3FF449E5EBF1523A34B3F772 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS59432.roa Signing time: Thu 22 Jan 2026 10:35:57 +0000 ROA not before: Thu 22 Jan 2026 10:30:57 +0000 ROA not after: Thu 21 Jan 2027 10:35:57 +0000 asID: 59432 IP address blocks: 141.11.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ca:cc:20:bd:a0:39:cf:3f:f4:49:e5:eb:f1:52:3a:34:b3:f7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Jan 22 10:30:57 2026 GMT Not After : Jan 21 10:35:57 2027 GMT Subject: CN=785F487472B739F1574376323565974ECD2C0B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:df:db:ad:13:29:9e:da:f5:69:4a:e2:5d: c6:5b:fd:a9:b4:7b:0c:c6:00:31:bc:2f:a2:48:13: 5e:e4:04:be:ac:a2:5c:42:b4:a8:72:c4:a9:0c:a2: 67:32:7a:58:9c:d4:0e:67:9e:41:28:ab:b5:01:87: 4b:17:68:7c:d7:ed:ce:c4:6e:3c:e6:10:8f:ca:4a: f7:d6:b4:cd:eb:28:8a:9d:ba:d3:a0:ab:90:34:bc: 61:2c:9e:50:d4:98:b3:67:89:81:b8:9b:8f:c1:1c: 06:2a:55:7b:42:e1:dc:4b:3b:76:44:f4:9d:08:c3: 4a:cb:3b:92:94:90:6d:bc:03:30:60:52:e0:3f:88: d6:9c:91:61:f2:72:93:65:b5:ef:43:65:13:e5:24: 4c:a1:ef:42:54:c1:b1:39:15:3a:b4:ed:e9:44:4f: db:5b:6f:64:ba:f2:a1:ea:c9:e8:bc:2b:24:03:df: 82:78:c5:0e:1e:5c:c1:13:de:91:4a:f5:e2:b6:7d: 4c:f5:20:24:16:b3:2a:15:79:ba:c8:3a:32:92:a4: 2f:e2:2b:2b:15:64:63:97:53:ea:e1:74:6f:34:ee: 53:4d:d0:ac:b7:df:03:4f:f1:08:1a:2d:78:2f:89: 6d:31:85:6b:77:8c:7b:ba:5b:b2:71:20:c6:ff:44: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:48:74:72:B7:39:F1:57:43:76:32:35:65:97:4E:CD:2C:0B:06 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS59432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.161.0/24 Signature Algorithm: sha256WithRSAEncryption a0:45:f1:67:52:b7:d3:38:ef:d2:03:63:3f:6e:ab:0f:d4:82: 92:93:10:33:b5:f6:00:f4:1d:b8:49:03:3e:f9:65:a3:b1:dd: 2e:6c:1e:9e:4b:4a:1e:79:20:b1:0f:91:b4:a7:c8:b8:f6:b0: 7c:12:53:08:56:a9:ea:f1:44:db:c8:d4:74:68:e5:64:27:68: 36:17:dd:d3:53:80:0d:4f:e3:21:5f:6f:ad:b3:3c:d3:a3:1a: 31:d2:c3:ec:c5:63:93:91:82:fb:13:9d:ef:a3:4a:52:b3:0d: e0:d7:af:ab:be:4b:31:9e:2c:e5:f6:5a:53:ce:17:92:f8:2f: bc:14:52:12:57:6d:3c:c5:17:67:ef:a1:d1:77:e4:da:40:ba: f4:85:76:10:fb:fa:8f:66:d2:f6:db:4d:5a:9c:5b:df:c9:a1: 82:fe:79:79:c6:98:13:31:d4:5f:46:99:1d:93:c9:b4:d7:3d: 40:da:dd:d8:b9:71:0d:d7:e2:cb:87:d4:3c:94:9c:02:09:ca: 62:3d:39:64:ed:ea:f3:3f:d1:0d:55:5a:84:5b:23:f1:a4:c2: 01:53:da:ab:02:c3:b3:3d:22:d1:ef:4b:d2:63:4b:7b:36:91: e0:78:86:ac:4d:da:0c:ed:d2:05:4a:a0:29:da:d1:2a:d5:0b: c9:ee:d0:69 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUIMrMIL2gOc8/9Enl6/FSOjSz93IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNjAxMjIxMDMwNTdaFw0yNzAxMjExMDM1NTdaMDMxMTAvBgNV BAMTKDc4NUY0ODc0NzJCNzM5RjE1NzQzNzYzMjM1NjU5NzRFQ0QyQzBCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRNd/brRMpntr1aUriXcZb/am0 ewzGADG8L6JIE17kBL6solxCtKhyxKkMomcyelic1A5nnkEoq7UBh0sXaHzX7c7E bjzmEI/KSvfWtM3rKIqdutOgq5A0vGEsnlDUmLNniYG4m4/BHAYqVXtC4dxLO3ZE 9J0Iw0rLO5KUkG28AzBgUuA/iNackWHycpNlte9DZRPlJEyh70JUwbE5FTq07elE T9tbb2S68qHqyei8KyQD34J4xQ4eXMET3pFK9eK2fUz1ICQWsyoVebrIOjKSpC/i KysVZGOXU+rhdG807lNN0Ky33wNP8QgaLXgviW0xhWt3jHu6W7JxIMb/RLi/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUeF9IdHK3OfFXQ3YyNWWXTs0sCwYwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTk0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC6Ew DQYJKoZIhvcNAQELBQADggEBAKBF8WdSt9M479IDYz9uqw/UgpKTEDO19gD0HbhJ Az75ZaOx3S5sHp5LSh55ILEPkbSnyLj2sHwSUwhWqerxRNvI1HRo5WQnaDYX3dNT gA1P4yFfb62zPNOjGjHSw+zFY5ORgvsTne+jSlKzDeDXr6u+SzGeLOX2WlPOF5L4 L7wUUhJXbTzFF2fvodF35NpAuvSFdhD7+o9m0vbbTVqcW9/JoYL+eXnGmBMx1F9G mR2TybTXPUDa3di5cQ3X4suH1DyUnAIJymI9OWTt6vM/0Q1VWoRbI/GkwgFT2qsC w7M9ItHvS9JjS3s2keB4hqxN2gzt0gVKoCna0SrVC8nu0Gk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:32 2026 by rpki-client