This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214084.roa File: AS214084.roa (raw, json) Hash identifier: PYP4jnw93U4T+ZU994/qamZc3I9cdcupjSk7DuRRVMw= Subject key identifier: 80:E1:37:43:58:3F:71:28:09:50:42:06:0E:2A:D3:48:0F:47:CA:DC Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 312E9DEB614DB00F9BD69A2219BF51DFE721C8DC Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214084.roa Signing time: Tue 06 Jan 2026 01:00:50 +0000 ROA not before: Tue 06 Jan 2026 00:55:50 +0000 ROA not after: Tue 05 Jan 2027 01:00:50 +0000 asID: 214084 IP address blocks: 2a14:7580:f310::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2e:9d:eb:61:4d:b0:0f:9b:d6:9a:22:19:bf:51:df:e7:21:c8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:50 2026 GMT Not After : Jan 5 01:00:50 2027 GMT Subject: CN=80E13743583F7128095042060E2AD3480F47CADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:52:bb:2a:70:86:51:40:f7:bd:98:f6:e8: 88:dc:9b:ef:4b:9b:21:59:cc:77:8a:5e:35:8b:35: 5e:b9:01:06:78:93:5e:89:f8:a8:b6:da:39:67:8b: e5:84:99:c9:64:89:97:5c:ff:8c:dd:83:27:a3:68: 2a:78:b2:38:c0:af:e6:1c:90:a0:86:8e:98:07:aa: b7:97:ed:1f:ac:36:8f:eb:5f:dd:4b:15:e2:63:87: d7:bd:a4:92:43:ca:43:1f:72:2a:23:69:aa:ff:63: b0:c3:6a:fa:c6:52:78:58:c3:e2:f3:70:4a:ce:f5: 29:e7:5c:d1:6f:6d:e7:a2:1f:7a:5f:cb:6f:07:ca: 5d:48:ef:bb:0e:7a:13:fd:3a:31:fd:f7:87:83:f1: 41:66:aa:39:ff:33:6b:87:20:d2:ae:5b:89:f8:15: de:32:06:63:8e:bb:86:72:2c:b6:49:35:bc:d8:dc: 55:9a:f0:0d:70:c1:45:00:3a:7d:67:b7:37:de:5b: 50:44:56:9b:33:68:b1:30:23:da:1b:25:41:e9:da: 1d:2e:16:34:b7:09:24:57:f2:b5:b2:22:2c:df:2c: 2c:f7:4b:35:bb:14:84:18:e4:f5:7d:fe:e0:58:37: b3:0f:79:c1:84:57:2d:98:f4:af:76:12:6c:55:6e: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E1:37:43:58:3F:71:28:09:50:42:06:0E:2A:D3:48:0F:47:CA:DC X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214084.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f310::/44 Signature Algorithm: sha256WithRSAEncryption 97:87:ba:ef:ee:88:78:33:2d:95:7b:0d:fb:7d:c9:e3:60:42: 60:18:98:7d:46:65:f7:26:31:51:76:d3:18:d8:28:92:9c:f6: da:d3:29:ea:a2:d1:d6:5b:c2:bd:1d:f3:f3:83:9b:02:77:dc: 57:33:81:cd:56:0b:47:82:e3:93:74:7a:58:54:bf:65:14:15: b3:02:28:11:0a:6b:be:8f:a5:da:dc:b9:20:33:63:d0:d7:8f: c0:d2:d3:0b:e4:8d:c1:6c:a0:51:55:f4:dd:0e:5b:2e:d3:2d: 60:9c:f2:8c:60:95:70:1f:49:bf:18:93:93:b6:1d:23:a9:2d: 6c:5d:54:ac:19:95:ba:20:d1:cb:93:21:d0:89:a3:45:07:7c: ce:c1:b9:be:1f:60:0d:b1:76:37:ca:d2:46:7e:ef:8b:57:49: 81:fd:f8:d8:08:4a:87:97:3b:a0:58:b8:9b:29:13:ab:28:67: 32:75:6a:14:b0:cd:e7:48:07:42:b4:a1:70:49:2b:d9:78:dd: 5e:3d:f8:bf:99:1e:37:91:bb:eb:55:3d:94:c1:32:2f:1f:b5: f0:40:dc:e0:c9:84:1a:24:cc:8b:4b:00:b5:5b:a0:aa:5c:89: 34:f7:8a:bb:22:66:88:58:78:b7:81:cf:e7:06:ba:3a:44:dc: d8:8e:bf:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUMS6d62FNsA+b1poiGb9R3+chyNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NTBaFw0yNzAxMDUwMTAwNTBaMDMxMTAvBgNV BAMTKDgwRTEzNzQzNTgzRjcxMjgwOTUwNDIwNjBFMkFEMzQ4MEY0N0NBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LVK7KnCGUUD3vZj26Ijcm+9L myFZzHeKXjWLNV65AQZ4k16J+Ki22jlni+WEmclkiZdc/4zdgyejaCp4sjjAr+Yc kKCGjpgHqreX7R+sNo/rX91LFeJjh9e9pJJDykMfciojaar/Y7DDavrGUnhYw+Lz cErO9SnnXNFvbeeiH3pfy28Hyl1I77sOehP9OjH994eD8UFmqjn/M2uHINKuW4n4 Fd4yBmOOu4ZyLLZJNbzY3FWa8A1wwUUAOn1ntzfeW1BEVpszaLEwI9obJUHp2h0u FjS3CSRX8rWyIizfLCz3SzW7FIQY5PV9/uBYN7MPecGEVy2Y9K92EmxVbvZdAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUgOE3Q1g/cSgJUEIGDirTSA9HytwwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0MDg0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gPMQMA0GCSqGSIb3DQEBCwUAA4IBAQCXh7rv7oh4My2Vew37fcnjYEJgGJh9RmX3 JjFRdtMY2CiSnPba0ynqotHWW8K9HfPzg5sCd9xXM4HNVgtHguOTdHpYVL9lFBWz AigRCmu+j6Xa3LkgM2PQ14/A0tML5I3BbKBRVfTdDlsu0y1gnPKMYJVwH0m/GJOT th0jqS1sXVSsGZW6INHLkyHQiaNFB3zOwbm+H2ANsXY3ytJGfu+LV0mB/fjYCEqH lzugWLibKROrKGcydWoUsM3nSAdCtKFwSSvZeN1ePfi/mR43kbvrVT2UwTIvH7Xw QNzgyYQaJMyLSwC1W6CqXIk094q7ImaIWHi3gc/nBro6RNzYjr8r -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:53 2026 by rpki-client