This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa File: AS214016.roa (raw, json) Hash identifier: 2NxOuru7tecLTv3R4xiBDA4uI5lk1GApGTlGDOmNt9U= Subject key identifier: 91:AA:E9:AD:DC:4E:B6:58:C0:19:CB:A4:68:62:DF:58:AC:BF:FB:73 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 15FB05A5E5F8566F348B3BAC6E0046C12A41E310 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa Signing time: Wed 12 Nov 2025 03:08:02 +0000 ROA not before: Wed 12 Nov 2025 03:03:02 +0000 ROA not after: Wed 11 Nov 2026 03:08:02 +0000 asID: 214016 IP address blocks: 2a0f:85c1:8be::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fb:05:a5:e5:f8:56:6f:34:8b:3b:ac:6e:00:46:c1:2a:41:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 12 03:03:02 2025 GMT Not After : Nov 11 03:08:02 2026 GMT Subject: CN=91AAE9ADDC4EB658C019CBA46862DF58ACBFFB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:31:66:c4:f3:bf:ba:f7:dc:4b:e3:b4:32: 21:be:33:6f:9e:e3:20:05:f6:66:a6:2d:f5:5b:cd: 74:c8:14:ac:86:b8:a5:90:df:73:60:2e:dd:db:93: f3:ad:ab:5b:34:5e:48:cb:5c:71:73:c0:d4:a4:20: ef:38:27:e1:fc:2c:94:9d:8d:23:a6:14:f4:b6:be: f0:39:5e:57:57:80:72:ad:b9:f9:eb:06:92:ca:5a: 80:5d:e0:0f:24:d1:62:ec:10:90:c9:80:77:0c:32: 2c:a3:41:7f:1e:82:74:c1:8a:1a:f6:62:24:29:1c: 24:c1:82:3e:0c:89:83:68:91:9a:d2:b8:5a:f9:ae: bc:83:2d:77:f3:6e:c0:9a:5a:56:a3:cb:a2:74:0c: 8e:a0:6d:82:83:95:89:60:46:b7:6d:2c:31:93:e7: ac:63:3c:da:2d:23:80:fa:bf:18:0b:2f:17:15:7d: 71:a0:04:d8:a7:d7:fe:d1:64:54:f2:91:20:12:06: de:37:dd:f8:b3:42:d4:a1:bf:30:bf:2c:ec:00:f4: 69:7e:45:39:e7:68:a9:7b:92:76:b1:45:f6:4b:c2: f9:db:9f:ad:ac:38:9b:84:1c:22:a0:7a:6b:c8:5a: df:c4:dd:fb:8e:2b:23:50:14:56:7f:7f:5e:3b:40: e6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:E9:AD:DC:4E:B6:58:C0:19:CB:A4:68:62:DF:58:AC:BF:FB:73 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:8be::/48 Signature Algorithm: sha256WithRSAEncryption 5c:39:70:18:4a:92:3e:f4:45:58:a8:66:7b:b4:24:14:d1:1a: df:78:53:46:ec:6b:9e:68:8c:1d:82:77:43:89:85:19:62:10: 97:76:9b:9d:1b:05:1d:cf:51:f9:22:59:4f:5f:dd:15:91:cf: 45:b1:af:6d:a8:8c:10:6b:08:e9:00:63:14:f6:88:bf:ad:01: ec:c7:2f:f3:0e:a9:16:86:4b:56:9e:b2:b1:ce:e8:7a:6d:cc: 2b:a3:82:2f:24:4f:f0:08:11:68:d0:e2:a9:cc:d0:59:50:26: 81:2e:50:42:0d:04:8d:27:45:59:25:39:87:51:0d:d6:76:39: 74:8c:7d:34:d7:81:e0:ba:7b:07:f0:23:c0:8c:4b:62:c3:8c: be:26:01:82:43:71:ee:df:83:d5:30:b9:3f:71:2c:90:d0:89: fa:5a:80:98:9e:67:4c:8d:9c:fb:4e:8f:b5:a5:27:f6:33:68: d9:12:c7:29:1a:4e:27:94:7d:f3:21:08:98:19:57:4c:00:b2: 00:a9:53:f3:c3:59:d3:63:1d:46:f1:d0:52:24:17:05:1e:ef: 91:8d:4c:b6:91:d2:10:4a:21:51:4c:70:55:8e:49:0f:d2:ac: 53:c2:6c:92:01:7e:05:24:66:cb:72:b1:b6:07:8d:22:09:c7: e8:0f:44:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUFfsFpeX4Vm80izusbgBGwSpB4xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMTIwMzAzMDJaFw0yNjExMTEwMzA4MDJaMDMxMTAvBgNV BAMTKDkxQUFFOUFEREM0RUI2NThDMDE5Q0JBNDY4NjJERjU4QUNCRkZCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWjFmxPO/uvfcS+O0MiG+M2+e 4yAF9mamLfVbzXTIFKyGuKWQ33NgLt3bk/Otq1s0XkjLXHFzwNSkIO84J+H8LJSd jSOmFPS2vvA5XldXgHKtufnrBpLKWoBd4A8k0WLsEJDJgHcMMiyjQX8egnTBihr2 YiQpHCTBgj4MiYNokZrSuFr5rryDLXfzbsCaWlajy6J0DI6gbYKDlYlgRrdtLDGT 56xjPNotI4D6vxgLLxcVfXGgBNin1/7RZFTykSASBt433fizQtShvzC/LOwA9Gl+ RTnnaKl7knaxRfZLwvnbn62sOJuEHCKgemvIWt/E3fuOKyNQFFZ/f147QOY/AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUkarprdxOtljAGcukaGLfWKy/+3MwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0MDE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQi+MA0GCSqGSIb3DQEBCwUAA4IBAQBcOXAYSpI+9EVYqGZ7tCQU0RrfeFNG7Gue aIwdgndDiYUZYhCXdpudGwUdz1H5IllPX90Vkc9Fsa9tqIwQawjpAGMU9oi/rQHs xy/zDqkWhktWnrKxzuh6bcwro4IvJE/wCBFo0OKpzNBZUCaBLlBCDQSNJ0VZJTmH UQ3Wdjl0jH0014HgunsH8CPAjEtiw4y+JgGCQ3Hu34PVMLk/cSyQ0In6WoCYnmdM jZz7To+1pSf2M2jZEscpGk4nlH3zIQiYGVdMALIAqVPzw1nTYx1G8dBSJBcFHu+R jUy2kdIQSiFRTHBVjkkP0qxTwmySAX4FJGbLcrG2B40iCcfoD0Tf -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:50 2025 by rpki-client