This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS395374.roa File: AS395374.roa (raw, json) Hash identifier: rTjvAMNdP8Fa1/xDUqnKhJh/wKpio2eDMo0dn0REaa4= Subject key identifier: CA:CF:71:07:97:65:5B:F1:1E:78:20:DA:5D:69:AF:03:3B:4B:DF:D5 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 48531EB5DF3CED5AD1249062F31C8B38700EB201 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS395374.roa Signing time: Thu 27 Nov 2025 01:40:19 +0000 ROA not before: Thu 27 Nov 2025 01:35:19 +0000 ROA not after: Thu 26 Nov 2026 01:40:19 +0000 asID: 395374 IP address blocks: 143.20.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:53:1e:b5:df:3c:ed:5a:d1:24:90:62:f3:1c:8b:38:70:0e:b2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 27 01:35:19 2025 GMT Not After : Nov 26 01:40:19 2026 GMT Subject: CN=CACF710797655BF11E7820DA5D69AF033B4BDFD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:24:3d:d3:f8:65:56:c0:ad:b7:d0:0d:66: 68:00:5a:df:f0:98:2e:5e:36:06:0b:43:ce:2b:26: 23:90:2e:68:d4:b6:a3:60:f7:b6:a4:59:5d:d6:39: 7c:2a:83:4c:08:44:94:3e:0d:b1:6b:bd:ca:bd:bb: 45:3b:3d:70:40:fc:e8:ca:03:81:27:67:28:36:2c: d3:3c:f7:4f:92:55:df:e7:7f:0a:96:9b:27:ac:86: 75:3f:64:d4:12:5e:8b:ae:2a:23:bc:e5:39:aa:1a: 5f:3a:ff:16:3e:38:8b:59:f2:3c:60:de:5c:f0:0f: 2f:f0:77:da:61:d0:98:ce:26:d3:90:bb:a5:6d:c2: 25:03:e4:fc:f1:dc:71:ef:62:37:74:ef:3c:d8:f1: 33:12:93:56:fe:90:43:56:49:1f:1c:02:7c:31:95: 28:3b:2c:ff:10:5b:3d:62:7b:93:6e:1f:e5:70:ae: dd:32:b7:23:3c:64:7b:57:ae:92:77:a4:67:45:04: 94:93:37:97:cb:d9:b7:72:34:69:b8:c8:85:de:fb: 6c:e0:d0:53:e8:74:83:9d:2e:80:30:6e:9e:3a:e5: 96:16:31:00:4a:8d:0d:a3:15:03:49:3c:f5:21:41: 22:81:62:8b:e5:f7:70:91:ef:9f:00:4c:44:38:da: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CF:71:07:97:65:5B:F1:1E:78:20:DA:5D:69:AF:03:3B:4B:DF:D5 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS395374.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.90.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:9b:d4:09:de:24:d3:c9:22:7f:f9:49:2e:64:c2:8c:83:2e: 10:22:42:c1:ec:0a:af:c9:dd:4b:b0:8f:f8:29:b3:4b:0b:47: 97:61:bd:d6:27:d4:6b:0b:97:9d:9e:c6:71:8e:63:85:43:e7: a9:84:ba:c6:47:2e:0d:a6:b5:45:21:f0:3b:d7:24:7c:16:34: 95:ea:fa:50:b5:88:34:05:16:6c:2e:c3:46:c0:87:33:41:d4: 99:22:dc:7c:1f:6d:c1:4e:08:d7:87:74:b3:71:43:5b:97:1c: 75:d7:62:f0:bc:e6:8c:e7:be:08:ae:dc:20:f0:b1:be:2e:cb: 79:1a:75:e7:19:75:35:25:f6:ab:5f:2b:47:a8:2b:0a:37:e0: 42:25:50:37:54:af:1c:6a:9c:5c:8a:ca:d3:a2:cd:9b:bd:fa: 06:51:48:d6:3a:57:dc:50:23:6f:2e:c2:86:05:5e:9f:d1:fc: ab:35:50:51:cd:4d:87:5f:c8:13:b0:6a:ea:a1:fd:19:40:e9: f1:ba:2f:eb:d4:22:17:a4:88:0f:ac:f5:2b:23:41:a0:56:9a: a4:95:ee:e4:42:82:a1:a0:d1:8a:a0:b7:5d:ac:4a:ef:1d:6e: 97:7a:50:cf:a9:00:ed:08:94:8d:72:ac:68:f1:b9:00:62:67: 23:18:c7:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSFMetd887VrRJJBi8xyLOHAOsgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjcwMTM1MTlaFw0yNjExMjYwMTQwMTlaMDMxMTAvBgNV BAMTKENBQ0Y3MTA3OTc2NTVCRjExRTc4MjBEQTVENjlBRjAzM0I0QkRGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6yQ90/hlVsCtt9ANZmgAWt/w mC5eNgYLQ84rJiOQLmjUtqNg97akWV3WOXwqg0wIRJQ+DbFrvcq9u0U7PXBA/OjK A4EnZyg2LNM890+SVd/nfwqWmyeshnU/ZNQSXouuKiO85TmqGl86/xY+OItZ8jxg 3lzwDy/wd9ph0JjOJtOQu6VtwiUD5Pzx3HHvYjd07zzY8TMSk1b+kENWSR8cAnwx lSg7LP8QWz1ie5NuH+Vwrt0ytyM8ZHtXrpJ3pGdFBJSTN5fL2bdyNGm4yIXe+2zg 0FPodIOdLoAwbp465ZYWMQBKjQ2jFQNJPPUhQSKBYovl93CR758ATEQ42qKrAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUys9xB5dlW/EeeCDaXWmvAztL39UwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzk1Mzc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRa MA0GCSqGSIb3DQEBCwUAA4IBAQCKm9QJ3iTTySJ/+UkuZMKMgy4QIkLB7Aqvyd1L sI/4KbNLC0eXYb3WJ9RrC5ednsZxjmOFQ+ephLrGRy4NprVFIfA71yR8FjSV6vpQ tYg0BRZsLsNGwIczQdSZItx8H23BTgjXh3SzcUNblxx112LwvOaM574Irtwg8LG+ Lst5GnXnGXU1JfarXytHqCsKN+BCJVA3VK8capxcisrTos2bvfoGUUjWOlfcUCNv LsKGBV6f0fyrNVBRzU2HX8gTsGrqof0ZQOnxui/r1CIXpIgPrPUrI0GgVpqkle7k QoKhoNGKoLddrErvHW6XelDPqQDtCJSNcqxo8bkAYmcjGMdz -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:14 2025 by rpki-client