This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214575.roa File: AS214575.roa (raw, json) Hash identifier: zqEdnPjzs8PvfANXbXpQjLGoWDqhViEuAx8e5HTFFwo= Subject key identifier: 67:81:05:F2:E6:3D:C5:86:DA:C5:FB:6E:56:6E:26:5D:3F:8C:FF:9B Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 75D2C7914C1331AECCBD28235FF841BC461E1310 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214575.roa Signing time: Tue 06 Jan 2026 01:00:45 +0000 ROA not before: Tue 06 Jan 2026 00:55:45 +0000 ROA not after: Tue 05 Jan 2027 01:00:45 +0000 asID: 214575 IP address blocks: 2a14:7581:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d2:c7:91:4c:13:31:ae:cc:bd:28:23:5f:f8:41:bc:46:1e:13:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:45 2026 GMT Not After : Jan 5 01:00:45 2027 GMT Subject: CN=678105F2E63DC586DAC5FB6E566E265D3F8CFF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:ef:80:0c:46:02:42:00:73:56:58:96:24: 9b:23:85:d4:19:eb:50:2a:76:32:6c:a6:c1:fc:50: 38:4e:ed:2b:94:5b:a1:f3:41:96:4f:ee:a3:8f:39: 5c:bd:4b:88:38:b3:3e:9a:c2:77:d5:1f:2f:78:84: 45:a6:bb:7a:0b:b1:c3:32:8a:1c:b1:b1:9f:df:f1: 8e:62:9a:44:a7:8b:13:2b:64:d4:dc:bd:77:6d:b6: 5a:19:07:49:f2:ec:fc:9d:18:05:c0:1d:71:2c:d7: 64:07:d4:83:dd:38:2e:a9:2e:69:07:0c:57:e5:22: a3:77:50:da:81:25:5e:d6:ef:5f:45:5b:77:71:64: e0:a7:86:28:13:2e:36:c1:9e:4b:b5:1d:56:fb:2f: 4a:cc:b5:4d:8a:d0:1a:db:c5:1f:73:0a:93:a8:18: 04:b3:98:65:aa:67:6d:da:75:1d:12:8e:57:05:82: 16:2d:1f:cd:31:0c:ab:94:5a:b8:42:24:27:56:1f: 83:5e:d2:4e:9c:1e:99:43:9b:88:51:56:31:77:4b: 42:cb:c9:31:ec:db:22:bd:b2:de:15:06:ef:c5:47: c3:8d:08:70:0d:1b:40:d7:90:23:ec:46:a9:92:97: 54:68:7f:14:6d:fb:64:d6:75:c1:c6:09:88:bd:28: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:81:05:F2:E6:3D:C5:86:DA:C5:FB:6E:56:6E:26:5D:3F:8C:FF:9B X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:b00::/40 Signature Algorithm: sha256WithRSAEncryption 4d:27:42:39:b3:09:ea:4a:94:00:41:1d:82:6b:36:ac:fd:e8: cc:9e:72:49:ed:4e:d5:39:29:81:95:90:44:9d:43:d0:b5:22: 3c:4f:2a:16:0f:ac:cf:57:6e:49:2d:52:64:a9:48:af:14:27: 34:a0:e9:c3:fb:9f:be:3e:04:0a:2d:ee:52:a7:cf:17:aa:43: 6f:eb:b0:8d:ac:a4:bf:37:6c:5a:35:9d:81:ec:35:b3:9e:20: 11:e6:45:19:70:4a:a0:a0:86:2e:07:4d:f8:14:6c:e5:b4:c2: 87:d2:b5:f1:db:23:18:03:3b:a3:84:5d:16:db:8b:63:6d:92: 11:3f:8f:a8:e6:97:78:fd:d5:9f:a3:d9:8d:2b:29:a1:24:d5: cc:d9:66:16:ff:81:d7:75:77:49:d5:ed:42:76:c9:4f:8a:27: a7:34:a3:d1:1a:06:e2:11:ea:08:08:fc:df:6b:a0:a2:a0:17: 95:3e:6d:11:c8:99:f4:0e:19:1b:71:f6:78:e4:3e:6d:72:37: bb:c4:9e:d6:24:04:79:68:a4:76:62:a3:9b:c4:23:81:1f:fa: 5e:ab:a0:f5:46:7c:a3:2c:53:48:62:fa:8c:7c:a5:eb:40:19: 2d:c4:6b:58:83:c0:15:00:56:80:9b:b2:13:61:b8:9b:35:ff: 30:5d:90:09 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUddLHkUwTMa7MvSgjX/hBvEYeExAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDVaFw0yNzAxMDUwMTAwNDVaMDMxMTAvBgNV BAMTKDY3ODEwNUYyRTYzREM1ODZEQUM1RkI2RTU2NkUyNjVEM0Y4Q0ZGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSe+ADEYCQgBzVliWJJsjhdQZ 61AqdjJspsH8UDhO7SuUW6HzQZZP7qOPOVy9S4g4sz6awnfVHy94hEWmu3oLscMy ihyxsZ/f8Y5imkSnixMrZNTcvXdttloZB0ny7PydGAXAHXEs12QH1IPdOC6pLmkH DFflIqN3UNqBJV7W719FW3dxZOCnhigTLjbBnku1HVb7L0rMtU2K0BrbxR9zCpOo GASzmGWqZ23adR0SjlcFghYtH80xDKuUWrhCJCdWH4Ne0k6cHplDm4hRVjF3S0LL yTHs2yK9st4VBu/FR8ONCHANG0DXkCPsRqmSl1RofxRt+2TWdcHGCYi9KMhFAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUZ4EF8uY9xYbaxftuVm4mXT+M/5swHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0NTc1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gQswDQYJKoZIhvcNAQELBQADggEBAE0nQjmzCepKlABBHYJrNqz96MyeckntTtU5 KYGVkESdQ9C1IjxPKhYPrM9XbkktUmSpSK8UJzSg6cP7n74+BAot7lKnzxeqQ2/r sI2spL83bFo1nYHsNbOeIBHmRRlwSqCghi4HTfgUbOW0wofStfHbIxgDO6OEXRbb i2NtkhE/j6jml3j91Z+j2Y0rKaEk1czZZhb/gdd1d0nV7UJ2yU+KJ6c0o9EaBuIR 6ggI/N9roKKgF5U+bRHImfQOGRtx9njkPm1yN7vEntYkBHlopHZio5vEI4Ef+l6r oPVGfKMsU0hi+ox8petAGS3Ea1iDwBUAVoCbshNhuJs1/zBdkAk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:06 2026 by rpki-client