This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214660.roa File: AS214660.roa (raw, json) Hash identifier: 2ux4TsTzBA0X0TZG2KVKpFyrpSMTtoKwDIPO/+c+H6A= Subject key identifier: 49:E1:9D:A5:D9:E6:19:D1:93:E0:D9:4F:8C:51:5F:6B:2C:4E:C6:F2 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 5CC8CEBEBE6C5C7E7AA279F96B47CC200664521E Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214660.roa Signing time: Tue 06 Jan 2026 01:00:49 +0000 ROA not before: Tue 06 Jan 2026 00:55:49 +0000 ROA not after: Tue 05 Jan 2027 01:00:49 +0000 asID: 214660 IP address blocks: 2a14:7580:d000::/36 maxlen: 48 2a14:7580:fe00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c8:ce:be:be:6c:5c:7e:7a:a2:79:f9:6b:47:cc:20:06:64:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:49 2026 GMT Not After : Jan 5 01:00:49 2027 GMT Subject: CN=49E19DA5D9E619D193E0D94F8C515F6B2C4EC6F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:3b:3d:90:14:54:15:d3:13:84:8e:43:80: e8:46:bd:3a:d5:e2:15:3b:b9:7f:8e:6c:a5:4d:4f: 2d:80:36:5b:79:23:c8:48:70:f4:c7:51:7e:2b:d3: 85:0e:6d:c3:76:15:dd:ff:af:10:3f:1a:4c:4f:58: 11:b9:89:20:07:44:5b:93:e7:65:b1:df:81:2c:0d: 66:f7:f2:df:1d:c6:7e:11:85:ed:ab:a6:33:07:ed: 84:37:d7:2e:ae:76:c3:c3:6a:9b:de:6c:11:97:a2: e0:35:9e:e6:b9:db:e0:c9:70:76:1d:8c:76:b3:7e: c3:00:09:89:85:c1:88:d0:1c:23:23:48:b1:96:bc: fe:05:71:40:f3:bf:f5:4a:36:ba:1f:34:1a:12:9c: 5a:bc:47:a8:06:46:70:41:7c:2a:bf:ff:2e:d2:c6: af:17:1b:45:c9:f2:7c:36:93:80:99:92:19:44:4d: b7:43:50:7e:9d:43:f2:95:ff:99:d8:cb:39:6a:84: db:eb:0a:cd:48:23:81:cf:33:42:f2:e5:c5:02:23: 4c:78:64:54:4a:8d:4d:0e:95:b4:82:17:04:d3:7f: 89:f2:de:05:f0:89:0a:22:bb:35:6f:8d:84:2f:e8: 36:75:8d:51:3a:7a:50:2e:fd:59:6a:4f:3d:6e:59: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:9D:A5:D9:E6:19:D1:93:E0:D9:4F:8C:51:5F:6B:2C:4E:C6:F2 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214660.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:d000::/36 2a14:7580:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 22:cf:b6:af:f5:53:3f:2b:f8:46:01:7d:d3:f5:18:8e:ee:c6: c9:a9:f4:2a:59:86:9d:51:86:0b:84:66:ba:ad:a9:0b:53:84: 61:c3:1e:5e:08:2f:a0:6a:f3:4e:bf:30:ca:b0:61:c2:f6:31: 4e:5f:b1:42:24:df:f9:5c:b5:d5:17:28:54:c3:1b:66:11:84: 2d:aa:96:04:6c:0e:82:0e:c2:89:2d:3b:aa:87:fe:32:f3:2e: 29:e4:5f:6b:83:87:bd:02:b7:0e:fe:12:5b:89:0a:91:6c:b7: 5c:7a:eb:aa:13:90:3f:57:d1:b6:84:39:c5:e8:a6:5d:8b:f8: ba:12:31:2f:66:5d:60:73:f5:b9:dc:e8:2f:84:d1:35:b0:8e: 0e:44:82:25:8c:3d:9a:e0:fb:0d:78:fe:29:bd:41:e3:5b:d0: e5:1d:16:18:8a:ba:5a:b0:50:76:fc:bf:36:3f:83:c5:40:6b: 6b:27:59:36:49:20:84:72:5c:21:cf:25:ed:1f:60:cf:2e:8d: 62:f1:57:62:f4:b7:31:20:77:0a:42:65:5e:8c:e8:23:92:8a: 30:f2:f2:12:8f:ce:b9:2e:3e:11:20:75:f6:01:c3:2f:5a:4a: 8a:c2:75:25:93:ad:df:65:c6:4e:e5:c2:13:37:55:4c:a7:af: 02:42:e7:53 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXMjOvr5sXH56onn5a0fMIAZkUh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDlaFw0yNzAxMDUwMTAwNDlaMDMxMTAvBgNV BAMTKDQ5RTE5REE1RDlFNjE5RDE5M0UwRDk0RjhDNTE1RjZCMkM0RUM2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuDs9kBRUFdMThI5DgOhGvTrV 4hU7uX+ObKVNTy2ANlt5I8hIcPTHUX4r04UObcN2Fd3/rxA/GkxPWBG5iSAHRFuT 52Wx34EsDWb38t8dxn4Rhe2rpjMH7YQ31y6udsPDapvebBGXouA1nua52+DJcHYd jHazfsMACYmFwYjQHCMjSLGWvP4FcUDzv/VKNrofNBoSnFq8R6gGRnBBfCq//y7S xq8XG0XJ8nw2k4CZkhlETbdDUH6dQ/KV/5nYyzlqhNvrCs1II4HPM0Ly5cUCI0x4 ZFRKjU0OlbSCFwTTf4ny3gXwiQoiuzVvjYQv6DZ1jVE6elAu/VlqTz1uWX/9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSeGdpdnmGdGT4NlPjFFfayxOxvIwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0NjYwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKhR1 gNADBgAqFHWA/jANBgkqhkiG9w0BAQsFAAOCAQEAIs+2r/VTPyv4RgF90/UYju7G yan0KlmGnVGGC4Rmuq2pC1OEYcMeXggvoGrzTr8wyrBhwvYxTl+xQiTf+Vy11Rco VMMbZhGELaqWBGwOgg7CiS07qof+MvMuKeRfa4OHvQK3Dv4SW4kKkWy3XHrrqhOQ P1fRtoQ5xeimXYv4uhIxL2ZdYHP1udzoL4TRNbCODkSCJYw9muD7DXj+Kb1B41vQ 5R0WGIq6WrBQdvy/Nj+DxUBraydZNkkghHJcIc8l7R9gzy6NYvFXYvS3MSB3CkJl XozoI5KKMPLyEo/OuS4+ESB19gHDL1pKisJ1JZOt32XGTuXCEzdVTKevAkLnUw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:02 2026 by rpki-client