This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: DMNxfuB9q62QCstiP8F0BdzXSAIONP6Dv1H9whBVj58= Subject key identifier: 36:17:B1:08:5F:28:BA:5A:28:D7:6F:C7:BF:3B:D9:DE:C0:99:B2:55 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 6F6A803081BA6F52DFF2D05E48520CFF51DA7D97 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS397423.roa Signing time: Fri 28 Nov 2025 00:03:32 +0000 ROA not before: Thu 27 Nov 2025 23:58:32 +0000 ROA not after: Fri 27 Nov 2026 00:03:32 +0000 asID: 397423 IP address blocks: 143.20.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6a:80:30:81:ba:6f:52:df:f2:d0:5e:48:52:0c:ff:51:da:7d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 27 23:58:32 2025 GMT Not After : Nov 27 00:03:32 2026 GMT Subject: CN=3617B1085F28BA5A28D76FC7BF3BD9DEC099B255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:b6:9a:46:74:a7:23:25:6f:ad:73:c7:8b: 3f:2d:c6:32:ae:7d:85:8e:d2:ec:04:cc:57:4e:48: 16:6d:1d:17:7d:8b:ec:6d:99:ca:39:17:ed:87:82: 2c:40:87:7d:1f:9a:5d:42:2b:7e:05:9f:84:54:ec: b3:05:ab:02:04:a2:2f:80:48:e3:9a:ee:4c:7d:b7: d8:b1:43:2c:f7:72:76:ed:6e:46:6e:50:81:a8:17: 3a:11:c4:3f:83:0d:90:42:62:69:54:b5:3f:fb:13: b7:4c:38:63:ed:91:f2:a4:29:ae:a8:a6:9a:31:62: 77:84:8d:18:84:79:14:54:b5:0b:eb:ef:8a:58:10: 81:93:e1:74:7d:b8:12:97:06:1c:cd:58:19:c3:ba: 38:93:84:67:4d:e4:ca:8b:c2:6a:18:a3:6a:63:29: d5:50:07:5f:c0:24:4c:27:33:c7:91:20:41:22:62: 10:c6:37:1c:cf:03:1a:0c:14:c4:41:a9:a3:bc:06: 72:6e:79:39:b3:ef:a5:08:c2:54:ac:71:c6:72:1c: 3d:d0:44:18:ad:7d:c7:82:36:16:7c:4c:9c:d9:0f: bf:ab:73:2c:f3:2a:12:4b:1c:d2:78:77:4b:2b:e5: 9e:7b:b1:6a:62:cc:f2:8b:3d:45:35:9f:75:4f:dc: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:17:B1:08:5F:28:BA:5A:28:D7:6F:C7:BF:3B:D9:DE:C0:99:B2:55 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.188.0/22 Signature Algorithm: sha256WithRSAEncryption 59:2b:53:47:50:31:22:33:25:34:2c:ca:19:10:3f:62:7e:92: f7:f6:fd:02:68:47:e1:c5:01:15:7a:5d:62:c4:d1:92:67:87: 81:62:70:68:f1:43:9b:a2:23:e8:7d:1c:7c:84:ac:4e:d2:42: 6e:31:c8:a5:1c:e1:bb:90:7e:06:a6:f6:83:06:d3:3c:de:10: 0c:fd:92:80:f2:58:c6:39:dd:28:b5:fc:2c:d8:d1:fa:58:cc: f1:5b:f0:c1:ef:ce:15:d9:fe:a3:25:26:b2:87:2d:e4:06:f3: ba:70:06:d5:2b:40:a2:86:fe:73:d3:dc:85:95:88:ad:29:2f: 57:3c:64:19:11:3a:a5:ed:4f:14:ff:0e:fc:08:c0:12:55:a8: 4d:38:b0:4e:73:20:53:cb:94:ce:2e:3b:48:03:ea:bf:3d:1a: 65:9a:8b:98:a7:5b:48:52:dc:f7:42:52:97:bc:87:00:14:4f: b5:99:34:d4:37:a2:6f:df:5a:b1:ed:4f:8c:f6:ef:a5:a3:53: db:f4:78:f3:7f:f7:a2:97:a6:e7:47:cb:aa:d1:3b:e4:3f:78: c9:ca:90:24:5c:05:d8:ce:bc:4f:23:e6:fb:fb:96:45:93:bd: e4:14:7d:da:a3:76:04:6d:da:58:ff:82:72:14:b5:e7:99:37: da:b3:b6:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUb2qAMIG6b1Lf8tBeSFIM/1HafZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjcyMzU4MzJaFw0yNjExMjcwMDAzMzJaMDMxMTAvBgNV BAMTKDM2MTdCMTA4NUYyOEJBNUEyOEQ3NkZDN0JGM0JEOURFQzA5OUIyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgg7aaRnSnIyVvrXPHiz8txjKu fYWO0uwEzFdOSBZtHRd9i+xtmco5F+2HgixAh30fml1CK34Fn4RU7LMFqwIEoi+A SOOa7kx9t9ixQyz3cnbtbkZuUIGoFzoRxD+DDZBCYmlUtT/7E7dMOGPtkfKkKa6o ppoxYneEjRiEeRRUtQvr74pYEIGT4XR9uBKXBhzNWBnDujiThGdN5MqLwmoYo2pj KdVQB1/AJEwnM8eRIEEiYhDGNxzPAxoMFMRBqaO8BnJueTmz76UIwlSsccZyHD3Q RBitfceCNhZ8TJzZD7+rcyzzKhJLHNJ4d0sr5Z57sWpizPKLPUU1n3VP3MPzAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUNhexCF8ouloo12/HvzvZ3sCZslUwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzk3NDIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjxS8 MA0GCSqGSIb3DQEBCwUAA4IBAQBZK1NHUDEiMyU0LMoZED9ifpL39v0CaEfhxQEV el1ixNGSZ4eBYnBo8UOboiPofRx8hKxO0kJuMcilHOG7kH4GpvaDBtM83hAM/ZKA 8ljGOd0otfws2NH6WMzxW/DB784V2f6jJSayhy3kBvO6cAbVK0Cihv5z09yFlYit KS9XPGQZETql7U8U/w78CMASVahNOLBOcyBTy5TOLjtIA+q/PRplmouYp1tIUtz3 QlKXvIcAFE+1mTTUN6Jv31qx7U+M9u+lo1Pb9Hjzf/eil6bnR8uq0TvkP3jJypAk XAXYzrxPI+b7+5ZFk73kFH3ao3YEbdpY/4JyFLXnmTfas7a5 -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:56 2025 by rpki-client