This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: lne+rL+4ptM8NqUtqcTQLDp0Vz3yABs7ntziFg8GrdE= Subject key identifier: 18:5A:0C:D1:02:9D:1E:D7:3C:C2:B4:2A:F8:CC:3B:60:61:D9:CE:DC Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 301BACF5C04F18F69893499FBD1D8458C333836B Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214025.roa Signing time: Wed 21 Jan 2026 02:58:15 +0000 ROA not before: Wed 21 Jan 2026 02:53:15 +0000 ROA not after: Wed 20 Jan 2027 02:58:15 +0000 asID: 214025 IP address blocks: 193.5.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1b:ac:f5:c0:4f:18:f6:98:93:49:9f:bd:1d:84:58:c3:33:83:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 21 02:53:15 2026 GMT Not After : Jan 20 02:58:15 2027 GMT Subject: CN=185A0CD1029D1ED73CC2B42AF8CC3B6061D9CEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:fe:72:f8:f2:7d:53:09:29:b1:fc:93:9b: 84:e2:76:9f:d0:9b:a7:29:21:7d:a2:09:d7:f1:45: 0c:63:cd:3c:d1:f3:5b:80:68:dd:cb:51:64:1c:e1: 47:17:34:28:ae:e0:69:37:79:0e:fe:8a:95:45:83: e5:16:81:e3:78:a2:ff:ca:e5:66:3f:81:6b:02:b7: fe:e3:78:b7:19:58:74:d3:01:9e:ea:3d:21:44:55: d6:28:0a:2d:3d:f6:b8:2e:3e:d6:15:47:55:a9:75: cb:44:8b:f3:04:ce:5f:b5:d3:e6:00:1e:a3:37:5f: eb:48:c9:a6:e0:d2:a7:09:24:70:b3:bf:c8:8b:e4: 60:9f:31:f1:97:4a:99:66:c2:de:0a:b7:cb:7e:e6: e7:d1:a4:59:b0:3e:8a:9b:6b:81:6c:ea:f6:13:56: 8e:be:f3:bd:94:9a:1b:f4:25:9a:0c:0c:06:f9:75: db:fb:95:80:f3:90:d2:ee:a0:7e:1b:bc:85:4b:82: 9c:b6:5a:63:11:8a:ce:d0:25:0f:f4:35:19:16:71: 30:0a:de:55:68:6d:2e:47:2d:6b:37:67:55:3d:de: 2a:de:12:e2:f0:91:50:ef:0f:05:fb:6c:bb:30:d6: 68:40:99:e6:79:c4:f3:c6:0b:58:66:92:f9:5d:78: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5A:0C:D1:02:9D:1E:D7:3C:C2:B4:2A:F8:CC:3B:60:61:D9:CE:DC X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.10.0/24 Signature Algorithm: sha256WithRSAEncryption 99:8d:b0:ac:39:de:b7:53:23:56:71:c9:6e:ed:44:86:6f:85: 54:06:00:f7:e0:04:58:5e:d5:b2:6b:14:d3:8d:8d:5e:50:1f: 92:7c:94:a1:12:e0:72:11:14:05:2f:5e:e2:3b:ae:d6:c1:65: c6:9c:dc:1b:64:29:1f:11:fd:4b:31:3e:23:8f:2f:c3:28:53: 54:b7:fb:43:1e:40:ff:ad:e6:27:80:1f:48:ea:2a:f5:d2:73: 73:2e:ba:44:55:33:3f:f4:8b:63:c2:90:0d:1b:bd:ab:47:a8: 97:77:a7:3a:64:bf:70:96:06:8e:b4:a6:bb:5d:00:39:6b:07: f2:cc:14:21:48:bb:9b:e4:68:d5:4a:c7:d0:30:75:80:3e:03: 83:19:1d:9a:db:f4:18:f4:d2:27:de:e6:fe:c3:53:ed:a4:3e: a6:c5:10:e0:6a:5b:a1:02:59:f4:f5:cf:b7:81:54:79:6a:b2: d7:27:5c:e6:56:38:87:dd:3a:82:72:ef:e5:6f:99:38:a3:37: 8e:62:d1:ba:67:0b:a1:8a:ef:8a:fe:1b:c3:6f:59:91:f7:69: af:49:59:b9:50:46:b0:07:64:d3:ca:aa:7b:97:cf:ae:a2:b9: 93:40:c7:0d:c8:fa:45:2b:30:67:4a:c6:48:a6:41:2c:30:db: f5:3a:0a:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMBus9cBPGPaYk0mfvR2EWMMzg2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMjEwMjUzMTVaFw0yNzAxMjAwMjU4MTVaMDMxMTAvBgNV BAMTKDE4NUEwQ0QxMDI5RDFFRDczQ0MyQjQyQUY4Q0MzQjYwNjFEOUNFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2P5y+PJ9UwkpsfyTm4Tidp/Q m6cpIX2iCdfxRQxjzTzR81uAaN3LUWQc4UcXNCiu4Gk3eQ7+ipVFg+UWgeN4ov/K 5WY/gWsCt/7jeLcZWHTTAZ7qPSFEVdYoCi099rguPtYVR1WpdctEi/MEzl+10+YA HqM3X+tIyabg0qcJJHCzv8iL5GCfMfGXSplmwt4Kt8t+5ufRpFmwPoqba4Fs6vYT Vo6+872Umhv0JZoMDAb5ddv7lYDzkNLuoH4bvIVLgpy2WmMRis7QJQ/0NRkWcTAK 3lVobS5HLWs3Z1U93ireEuLwkVDvDwX7bLsw1mhAmeZ5xPPGC1hmkvldeEI1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUGFoM0QKdHtc8wrQq+Mw7YGHZztwwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQUK MA0GCSqGSIb3DQEBCwUAA4IBAQCZjbCsOd63UyNWcclu7USGb4VUBgD34ARYXtWy axTTjY1eUB+SfJShEuByERQFL17iO67WwWXGnNwbZCkfEf1LMT4jjy/DKFNUt/tD HkD/reYngB9I6ir10nNzLrpEVTM/9ItjwpANG72rR6iXd6c6ZL9wlgaOtKa7XQA5 awfyzBQhSLub5GjVSsfQMHWAPgODGR2a2/QY9NIn3ub+w1PtpD6mxRDgaluhAln0 9c+3gVR5arLXJ1zmVjiH3TqCcu/lb5k4ozeOYtG6Zwuhiu+K/hvDb1mR92mvSVm5 UEawB2TTyqp7l8+uormTQMcNyPpFKzBnSsZIpkEsMNv1Ogow -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:04 2026 by rpki-client