This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207314.roa File: AS207314.roa (raw, json) Hash identifier: 6lUJgJ2P8aAeFMzxvAeECdtF2CCxlPKOVynYjikJ/SU= Subject key identifier: 66:39:81:3F:DD:B1:09:8B:DA:29:8F:4C:D5:98:7A:DF:8E:EE:74:FC Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 105B674BF418A98EB7BBBF102C56E8828E53FABD Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207314.roa Signing time: Tue 06 Jan 2026 01:00:45 +0000 ROA not before: Tue 06 Jan 2026 00:55:45 +0000 ROA not after: Tue 05 Jan 2027 01:00:45 +0000 asID: 207314 IP address blocks: 2a14:7581:9500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5b:67:4b:f4:18:a9:8e:b7:bb:bf:10:2c:56:e8:82:8e:53:fa:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:45 2026 GMT Not After : Jan 5 01:00:45 2027 GMT Subject: CN=6639813FDDB1098BDA298F4CD5987ADF8EEE74FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:3a:6a:f5:90:5c:3d:85:65:a7:40:35:9c: a4:a0:22:a3:0e:2a:9e:54:0c:36:43:77:87:6a:91: b0:21:67:6a:af:c9:ce:6e:f9:f4:7c:a4:80:44:05: cb:62:43:d3:ea:0d:5a:0a:dc:c8:17:90:e7:d8:90: e9:1f:f2:6b:ac:a9:59:a1:d8:e2:da:65:f7:f0:ec: b0:6f:b6:74:54:87:e0:49:38:b6:24:7f:81:7f:63: d4:5a:b4:3f:c9:3c:8d:ec:f8:83:0a:15:06:e5:f3: a2:7f:6d:3b:ac:d3:df:e1:5c:05:80:6b:86:f2:7c: 7b:a4:cc:c3:2d:e4:1b:4b:00:af:83:7b:6e:bc:1a: b6:c7:29:81:f0:ff:51:28:ad:64:05:f2:f6:34:0e: 3e:31:18:58:60:eb:d1:9b:de:ad:1c:70:1c:d5:47: 27:72:61:a9:92:56:59:52:b4:db:98:65:99:a6:ea: c9:34:d0:89:46:da:d3:63:c5:57:e3:87:b6:ad:17: 48:a5:c7:94:b0:07:12:e3:d2:cb:81:85:77:83:8e: 48:26:34:26:36:27:20:4b:0c:b5:dc:2b:82:d0:6d: 41:9e:13:65:d8:e7:3f:d9:76:23:23:0d:cc:13:23: d8:dd:0f:c2:dd:8e:1a:df:ab:b0:b3:be:87:15:0b: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:39:81:3F:DD:B1:09:8B:DA:29:8F:4C:D5:98:7A:DF:8E:EE:74:FC X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207314.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9500::/40 Signature Algorithm: sha256WithRSAEncryption 27:7d:a5:ca:94:41:62:e3:46:92:98:91:7a:f6:5c:94:ce:a3: 93:1a:8f:10:9f:fe:1f:76:26:bf:8a:6a:5d:3c:9b:c0:d7:92: bb:5e:4f:bd:8d:af:cb:3b:eb:23:0c:fe:b9:d8:b7:74:10:d0: 33:01:2a:ec:91:b6:23:4a:ba:74:26:71:76:f3:75:20:2c:11: 6c:50:d3:53:95:11:c2:a2:00:9d:03:87:7f:9a:ec:68:e6:f2: d1:95:d0:59:aa:05:d6:f3:43:cf:15:52:f5:1f:09:9d:3a:74: 2d:2f:9a:f2:83:a0:36:15:49:4e:b7:44:24:0b:2c:b6:1d:7c: 97:2f:54:f4:6d:ca:bd:f4:08:ce:2a:2a:9c:a1:49:de:4b:d2: 49:dc:df:75:4d:d6:d5:0d:47:2c:cf:ed:0c:5e:22:08:29:21: 53:60:25:f3:d5:d0:0a:58:a1:e8:dd:d4:15:f2:cf:6f:3f:84: 82:ac:ae:64:bd:e6:88:d5:5c:e2:aa:8d:32:43:5c:c6:14:7a: 0d:70:08:b2:f4:7c:41:50:31:0c:33:55:ba:c9:a4:2b:bd:a6: e6:0b:7d:8c:b6:a7:ea:9e:54:f8:f3:24:e4:1c:f7:8d:f9:9b: 69:fd:83:5b:35:d0:bc:34:2e:20:03:57:f6:2a:de:d8:4b:59: 69:9a:2b:f6 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUEFtnS/QYqY63u78QLFbogo5T+r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDVaFw0yNzAxMDUwMTAwNDVaMDMxMTAvBgNV BAMTKDY2Mzk4MTNGRERCMTA5OEJEQTI5OEY0Q0Q1OTg3QURGOEVFRTc0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNDpq9ZBcPYVlp0A1nKSgIqMO Kp5UDDZDd4dqkbAhZ2qvyc5u+fR8pIBEBctiQ9PqDVoK3MgXkOfYkOkf8musqVmh 2OLaZffw7LBvtnRUh+BJOLYkf4F/Y9RatD/JPI3s+IMKFQbl86J/bTus09/hXAWA a4byfHukzMMt5BtLAK+De268GrbHKYHw/1EorWQF8vY0Dj4xGFhg69Gb3q0ccBzV RydyYamSVllStNuYZZmm6sk00IlG2tNjxVfjh7atF0ilx5SwBxLj0suBhXeDjkgm NCY2JyBLDLXcK4LQbUGeE2XY5z/ZdiMjDcwTI9jdD8Ldjhrfq7CzvocVCz1jAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUZjmBP92xCYvaKY9M1Zh6347udPwwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA3MzE0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gZUwDQYJKoZIhvcNAQELBQADggEBACd9pcqUQWLjRpKYkXr2XJTOo5MajxCf/h92 Jr+Kal08m8DXkrteT72Nr8s76yMM/rnYt3QQ0DMBKuyRtiNKunQmcXbzdSAsEWxQ 01OVEcKiAJ0Dh3+a7Gjm8tGV0FmqBdbzQ88VUvUfCZ06dC0vmvKDoDYVSU63RCQL LLYdfJcvVPRtyr30CM4qKpyhSd5L0knc33VN1tUNRyzP7QxeIggpIVNgJfPV0ApY oejd1BXyz28/hIKsrmS95ojVXOKqjTJDXMYUeg1wCLL0fEFQMQwzVbrJpCu9puYL fYy2p+qeVPjzJOQc9435m2n9g1s10Lw0LiADV/Yq3thLWWmaK/Y= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:56 2026 by rpki-client