This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8075.roa File: AS8075.roa (raw, json) Hash identifier: O88I/OmrdZmfw105+g4HhMdC7L5J5Gi2ionh6iuqqA8= Subject key identifier: 5F:D3:45:76:1A:F9:1E:5C:22:C7:82:7D:2F:C9:0A:CC:77:25:F2:0E Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 25D360FA09D8A61D9D03A09B29610119321ED4E3 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8075.roa Signing time: Fri 05 Dec 2025 14:44:42 +0000 ROA not before: Fri 05 Dec 2025 14:39:42 +0000 ROA not after: Fri 04 Dec 2026 14:44:42 +0000 asID: 8075 IP address blocks: 141.11.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d3:60:fa:09:d8:a6:1d:9d:03:a0:9b:29:61:01:19:32:1e:d4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 5 14:39:42 2025 GMT Not After : Dec 4 14:44:42 2026 GMT Subject: CN=5FD345761AF91E5C22C7827D2FC90ACC7725F20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:8d:64:df:82:bb:a5:60:fc:65:86:16:c3: f2:a1:af:b3:89:68:b1:e3:9c:f0:8d:9c:ab:ae:d1: 34:99:d9:1a:5c:11:01:e8:aa:6e:a3:49:5e:25:b5: 65:a6:01:2d:fc:b7:17:e1:8c:c1:70:f3:80:87:5a: 6e:8c:04:76:75:4c:32:45:7a:a2:f2:1f:22:fa:4a: 82:ce:45:be:19:07:93:e3:0b:42:d1:cf:7e:3b:8b: b2:58:f8:9b:5a:fe:fe:62:96:b8:d9:c9:c5:26:42: 1a:8e:d7:68:5b:8a:1e:35:58:25:c4:ef:8e:76:46: d7:95:87:4f:4e:6b:a0:ce:8f:40:fb:9e:a0:5d:f4: 53:ce:05:dd:f1:64:20:f9:84:12:aa:55:af:30:e1: 6e:7a:46:5d:12:55:b8:f1:0e:16:9c:96:81:ce:92: 22:ca:b4:32:06:30:db:fe:f8:6f:e8:29:1a:9c:2b: 79:15:39:d8:cf:3d:17:56:ef:20:e6:f2:97:0d:af: bb:4b:6e:fe:db:a0:5f:bc:57:04:d1:a8:17:f4:fb: b7:05:78:69:42:34:e5:0f:53:e4:20:d3:c2:17:da: 2d:50:35:a5:37:fc:30:f9:83:2d:e3:3b:c2:d3:9f: 94:f3:60:36:05:31:bb:de:b9:2b:39:45:41:1b:f4: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:45:76:1A:F9:1E:5C:22:C7:82:7D:2F:C9:0A:CC:77:25:F2:0E X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.196.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:13:93:c5:83:8b:33:16:23:b6:b7:f3:5a:9b:ab:22:21:be: 6d:4e:29:2b:f3:76:e8:a2:b9:fa:e4:0f:1a:ec:0b:ad:8b:3a: 57:88:35:97:71:73:4e:97:38:7b:34:6d:0e:6a:f3:7e:c7:c0: 54:7b:4c:48:ec:35:64:d5:79:7e:b2:29:78:aa:cf:6b:3f:e1: d3:26:88:b7:42:4c:d2:75:ce:a5:66:f2:67:a1:e8:a4:62:fa: 0f:ce:81:c7:3e:06:2b:69:19:ad:08:e3:f7:28:d6:14:08:84: 71:bf:7f:d6:4b:d1:76:f8:2c:f3:e5:47:b1:40:bc:85:dc:ad: e1:be:66:93:46:ee:d1:d5:e6:20:ce:4d:63:e1:f1:b8:fe:45: 16:f8:a2:9f:44:bf:22:c9:79:8d:b8:82:18:41:2f:00:9e:3d: 6b:b6:cd:45:d9:8a:1a:7d:e9:12:bd:9f:06:f9:d8:91:b2:d0: 2b:64:77:09:9b:a2:2e:27:91:61:32:c4:80:20:13:7c:66:49: 4b:9d:65:d7:a9:ab:a3:ce:b6:b8:d7:73:82:23:c4:60:d4:e4: 99:90:77:5d:44:69:68:44:be:a3:b3:20:2f:4d:5a:a0:bc:48: 0e:ed:0e:53:24:4f:03:64:97:45:17:6a:bd:ef:02:73:54:d7: 69:78:56:16 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUJdNg+gnYph2dA6CbKWEBGTIe1OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMDUxNDM5NDJaFw0yNjEyMDQxNDQ0NDJaMDMxMTAvBgNV BAMTKDVGRDM0NTc2MUFGOTFFNUMyMkM3ODI3RDJGQzkwQUNDNzcyNUYyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7To1k34K7pWD8ZYYWw/Khr7OJ aLHjnPCNnKuu0TSZ2RpcEQHoqm6jSV4ltWWmAS38txfhjMFw84CHWm6MBHZ1TDJF eqLyHyL6SoLORb4ZB5PjC0LRz347i7JY+Jta/v5ilrjZycUmQhqO12hbih41WCXE 7452RteVh09Oa6DOj0D7nqBd9FPOBd3xZCD5hBKqVa8w4W56Rl0SVbjxDhacloHO kiLKtDIGMNv++G/oKRqcK3kVOdjPPRdW7yDm8pcNr7tLbv7boF+8VwTRqBf0+7cF eGlCNOUPU+Qg08IX2i1QNaU3/DD5gy3jO8LTn5TzYDYFMbveuSs5RUEb9GKtAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUX9NFdhr5Hlwix4J9L8kKzHcl8g4wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTODA3NS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LxDAN BgkqhkiG9w0BAQsFAAOCAQEAKxOTxYOLMxYjtrfzWpurIiG+bU4pK/N26KK5+uQP GuwLrYs6V4g1l3FzTpc4ezRtDmrzfsfAVHtMSOw1ZNV5frIpeKrPaz/h0yaIt0JM 0nXOpWbyZ6HopGL6D86Bxz4GK2kZrQjj9yjWFAiEcb9/1kvRdvgs8+VHsUC8hdyt 4b5mk0bu0dXmIM5NY+HxuP5FFviin0S/Isl5jbiCGEEvAJ49a7bNRdmKGn3pEr2f BvnYkbLQK2R3CZuiLieRYTLEgCATfGZJS51l16mro862uNdzgiPEYNTkmZB3XURp aES+o7MgL01aoLxIDu0OUyRPA2SXRRdqve8Cc1TXaXhWFg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:11 2025 by rpki-client