This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS150249.roa File: AS150249.roa (raw, json) Hash identifier: 1isTsPmJw9qhPowp2wdNmAAz7AWuxhiPCVAkvbMb30E= Subject key identifier: E8:C0:C7:BF:F0:68:25:46:41:EC:D5:87:F7:0C:0B:57:E3:18:B4:36 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 4A5F3C0CCE96E43D8FCD467E6E1BAD84D78925FD Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS150249.roa Signing time: Thu 27 Nov 2025 03:59:36 +0000 ROA not before: Thu 27 Nov 2025 03:54:36 +0000 ROA not after: Thu 26 Nov 2026 03:59:36 +0000 asID: 150249 IP address blocks: 143.20.27.0/24 maxlen: 24 143.20.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5f:3c:0c:ce:96:e4:3d:8f:cd:46:7e:6e:1b:ad:84:d7:89:25:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 27 03:54:36 2025 GMT Not After : Nov 26 03:59:36 2026 GMT Subject: CN=E8C0C7BFF068254641ECD587F70C0B57E318B436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:cc:e5:f4:c8:3b:ed:25:12:db:8b:b7:56: 3b:e1:3f:9e:cb:2b:e9:73:3c:c7:81:e9:a8:82:29: 06:e0:d8:1d:0e:20:d5:3d:c8:f8:68:1b:9e:10:82: 21:5d:c2:97:c7:46:89:cd:f9:9d:e0:6a:ea:a5:3a: 73:3f:fe:3e:06:1a:d0:00:11:11:c5:0e:cb:e2:b8: 49:37:f5:20:df:4f:ca:da:4e:0f:3b:aa:b3:22:ee: fb:9d:2d:da:5d:ab:97:9c:25:c9:a5:4e:99:23:37: 97:79:21:ca:18:45:60:f9:cd:8d:dd:dd:c4:b5:ab: a0:2d:c7:01:28:6b:01:de:c1:44:d0:b1:3a:da:ef: 6f:a4:c0:9f:3e:03:eb:7e:bb:e8:01:a3:1d:f7:f3: a8:40:7c:e7:a9:f5:78:7f:5b:98:60:7e:cd:ee:c4: e7:f1:e9:d3:ce:b3:10:80:a8:3a:30:28:95:36:2c: 92:a0:5e:f6:a1:ea:c1:89:4b:4a:30:b4:99:98:29: 33:21:89:85:27:5b:bd:e0:9b:07:28:a5:2a:c9:d2: e5:28:2a:ad:80:d6:35:c9:f0:64:ff:be:32:3e:c2: 3a:e1:b7:3d:f6:8e:c7:f1:86:e3:86:a2:f7:ba:19: 18:ea:64:8c:2c:36:b7:17:30:60:aa:80:24:48:1e: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C0:C7:BF:F0:68:25:46:41:EC:D5:87:F7:0C:0B:57:E3:18:B4:36 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS150249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.27.0/24 143.20.49.0/24 Signature Algorithm: sha256WithRSAEncryption a5:b2:f2:0b:90:43:53:ff:db:8f:8c:d4:58:e2:f4:fc:48:8e: 43:79:1d:64:96:d6:41:63:2b:21:e6:d7:92:d4:9f:17:f5:b8: 90:1c:f2:70:1d:78:f6:a6:25:30:a9:9f:17:2f:09:f9:9f:1e: 24:ef:db:de:10:24:90:cd:01:b5:1d:09:a5:bd:e5:6d:57:a1: 77:1b:28:72:ca:92:2c:ae:76:0e:1a:54:19:e4:8a:b6:5b:09: fd:54:a4:4c:9f:73:c4:6e:dd:d8:73:60:00:31:b2:18:55:54: 5b:ef:6c:88:70:98:2e:e2:71:bb:4f:e7:f6:15:19:9f:4e:d2: 4e:4a:4b:b6:ef:29:0e:b1:d0:90:13:fe:1a:c8:91:35:86:5e: 19:c0:58:61:e3:02:69:05:14:04:29:1e:da:c9:b5:9e:3d:dc: 9f:f7:4c:e0:7b:7b:73:ae:de:9a:3d:2c:49:99:e8:39:cc:f7: d0:54:7d:96:6b:9c:ff:b8:77:9d:5c:f0:b7:fe:0f:66:20:4d: 43:e7:ba:89:b1:9a:d2:4b:a8:da:3e:36:c4:8e:77:eb:74:3c: e5:c5:40:ce:3a:0c:e9:b4:ec:3c:12:3a:ae:ba:49:c0:f5:80: 7b:e9:8e:2d:e0:e1:30:3b:9f:84:fe:b4:44:92:26:76:c0:d1: f3:51:cb:fe -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUSl88DM6W5D2PzUZ+bhuthNeJJf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjcwMzU0MzZaFw0yNjExMjYwMzU5MzZaMDMxMTAvBgNV BAMTKEU4QzBDN0JGRjA2ODI1NDY0MUVDRDU4N0Y3MEMwQjU3RTMxOEI0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigczl9Mg77SUS24u3VjvhP57L K+lzPMeB6aiCKQbg2B0OINU9yPhoG54QgiFdwpfHRonN+Z3gauqlOnM//j4GGtAA ERHFDsviuEk39SDfT8raTg87qrMi7vudLdpdq5ecJcmlTpkjN5d5IcoYRWD5zY3d 3cS1q6AtxwEoawHewUTQsTra72+kwJ8+A+t+u+gBox3386hAfOep9Xh/W5hgfs3u xOfx6dPOsxCAqDowKJU2LJKgXvah6sGJS0owtJmYKTMhiYUnW73gmwcopSrJ0uUo Kq2A1jXJ8GT/vjI+wjrhtz32jsfxhuOGove6GRjqZIwsNrcXMGCqgCRIHiPlAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU6MDHv/BoJUZB7NWH9wwLV+MYtDYwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTUwMjQ5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxQb AwQAjxQxMA0GCSqGSIb3DQEBCwUAA4IBAQClsvILkENT/9uPjNRY4vT8SI5DeR1k ltZBYysh5teS1J8X9biQHPJwHXj2piUwqZ8XLwn5nx4k79veECSQzQG1HQmlveVt V6F3GyhyypIsrnYOGlQZ5Iq2Wwn9VKRMn3PEbt3Yc2AAMbIYVVRb72yIcJgu4nG7 T+f2FRmfTtJOSku27ykOsdCQE/4ayJE1hl4ZwFhh4wJpBRQEKR7aybWePdyf90zg e3tzrt6aPSxJmeg5zPfQVH2Wa5z/uHedXPC3/g9mIE1D57qJsZrSS6jaPjbEjnfr dDzlxUDOOgzptOw8EjquuknA9YB76Y4t4OEwO5+E/rREkiZ2wNHzUcv+ -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:45 2025 by rpki-client