This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213465.roa File: AS213465.roa (raw, json) Hash identifier: 0af4MDDEOnvPVfItnagS458ZLyHc1OUFFlnh88io034= Subject key identifier: 07:42:E8:F9:F9:21:4A:80:5D:79:A6:FC:01:C5:60:16:1C:A5:E9:62 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 37ECEF4774F6375E1363B4DC1D5FAE88931E9915 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213465.roa Signing time: Mon 24 Nov 2025 09:07:10 +0000 ROA not before: Mon 24 Nov 2025 09:02:10 +0000 ROA not after: Mon 23 Nov 2026 09:07:10 +0000 asID: 213465 IP address blocks: 143.20.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ec:ef:47:74:f6:37:5e:13:63:b4:dc:1d:5f:ae:88:93:1e:99:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 24 09:02:10 2025 GMT Not After : Nov 23 09:07:10 2026 GMT Subject: CN=0742E8F9F9214A805D79A6FC01C560161CA5E962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:ea:22:24:4d:f3:2a:02:64:40:a7:e3:42: b7:c6:e7:db:75:08:c5:dd:85:17:8a:eb:fc:ae:78: b6:db:ec:b7:47:84:82:d3:6c:29:0f:27:f9:62:c5: 1c:13:40:81:d7:6e:77:a2:fc:69:b9:14:ef:0d:37: 0b:a8:51:89:a4:b1:8d:9a:bc:96:d4:4c:c5:11:94: 81:50:f5:01:b3:d7:f8:b4:96:3d:e2:63:6b:a6:78: 37:73:97:14:43:bd:1b:19:0f:c4:56:3f:c1:1e:10: 2c:34:b9:74:67:a5:b2:ca:51:33:41:24:d5:9b:ef: 00:dc:26:1b:ab:4a:3b:e5:bc:8d:96:10:66:43:2a: a1:e6:40:5b:00:10:23:3e:a3:24:f1:8c:7f:7e:83: 06:12:32:19:72:e9:48:79:34:f3:1f:80:d6:46:39: fa:74:ec:25:19:06:21:ed:35:2b:bc:f2:e0:d9:85: 12:5e:a7:ce:e9:21:dd:d6:69:de:04:ff:a7:18:a3: 57:4b:13:8d:92:c5:00:65:b7:96:22:ac:4b:43:b2: 72:23:00:29:f2:21:72:d6:26:5a:1a:bd:59:2d:5e: 24:04:f3:37:ac:e5:fa:49:ea:cf:ed:f8:3d:21:84: 2e:3c:c8:ae:79:84:27:69:05:e2:0e:ad:c0:b3:e9: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:42:E8:F9:F9:21:4A:80:5D:79:A6:FC:01:C5:60:16:1C:A5:E9:62 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213465.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.77.0/24 Signature Algorithm: sha256WithRSAEncryption 08:8a:6d:d8:7a:a0:eb:2a:d9:c3:dc:8b:02:b7:89:cd:05:ba: 4a:13:a5:b6:89:7d:1f:99:93:ab:86:4d:9b:68:7e:d6:89:70: 52:08:d7:ae:5a:03:56:b5:92:f2:58:4b:31:5f:95:39:d5:88: 4f:df:b2:84:8f:05:74:9a:b9:48:a5:7c:48:a4:ee:1b:83:5e: f6:af:a1:da:2e:61:7e:11:55:5a:db:21:a4:5f:05:05:55:d5: 9f:d8:c8:d0:fd:0d:89:bf:1f:4a:53:77:c5:e0:68:35:f3:7c: 3e:a3:17:6f:59:63:b4:df:78:ed:4e:f3:fe:6d:00:b1:47:5a: 9a:f8:61:e5:3e:5f:d7:75:32:41:dd:ed:30:63:5c:05:ac:61: ab:e8:57:2d:3c:66:70:e4:b8:df:62:a6:cb:32:ef:28:ce:f4: 68:83:b9:86:0b:6c:75:cc:c5:4a:b5:50:15:2b:de:99:69:6d: 88:5a:ac:ed:c2:86:8c:c6:86:8d:db:20:98:b4:92:19:fe:c5: 5b:c1:27:eb:e4:0d:01:69:e7:ec:9f:b8:e0:78:88:57:9c:74: 7a:de:29:b3:e4:ad:c8:d4:b5:1b:fe:e2:54:7a:2c:0e:a8:e7: 91:1b:9b:4e:6d:de:2e:da:3c:3a:6a:33:e4:f4:fc:66:71:6f: 43:c4:66:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUN+zvR3T2N14TY7TcHV+uiJMemRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjQwOTAyMTBaFw0yNjExMjMwOTA3MTBaMDMxMTAvBgNV BAMTKDA3NDJFOEY5RjkyMTRBODA1RDc5QTZGQzAxQzU2MDE2MUNBNUU5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbceoiJE3zKgJkQKfjQrfG59t1 CMXdhReK6/yueLbb7LdHhILTbCkPJ/lixRwTQIHXbnei/Gm5FO8NNwuoUYmksY2a vJbUTMURlIFQ9QGz1/i0lj3iY2umeDdzlxRDvRsZD8RWP8EeECw0uXRnpbLKUTNB JNWb7wDcJhurSjvlvI2WEGZDKqHmQFsAECM+oyTxjH9+gwYSMhly6Uh5NPMfgNZG Ofp07CUZBiHtNSu88uDZhRJep87pId3Wad4E/6cYo1dLE42SxQBlt5YirEtDsnIj ACnyIXLWJloavVktXiQE8zes5fpJ6s/t+D0hhC48yK55hCdpBeIOrcCz6WgzAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUB0Lo+fkhSoBdeab8AcVgFhyl6WIwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjEzNDY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRN MA0GCSqGSIb3DQEBCwUAA4IBAQAIim3YeqDrKtnD3IsCt4nNBbpKE6W2iX0fmZOr hk2baH7WiXBSCNeuWgNWtZLyWEsxX5U51YhP37KEjwV0mrlIpXxIpO4bg172r6Ha LmF+EVVa2yGkXwUFVdWf2MjQ/Q2Jvx9KU3fF4Gg183w+oxdvWWO033jtTvP+bQCx R1qa+GHlPl/XdTJB3e0wY1wFrGGr6FctPGZw5LjfYqbLMu8ozvRog7mGC2x1zMVK tVAVK96ZaW2IWqztwoaMxoaN2yCYtJIZ/sVbwSfr5A0Baefsn7jgeIhXnHR63imz 5K3I1LUb/uJUeiwOqOeRG5tObd4u2jw6ajPk9PxmcW9DxGbL -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:01 2025 by rpki-client