This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa File: AS214677.roa (raw, json) Hash identifier: Yf55a7tC0VPaw+Fg2nlVyo7X0mtuCguYOxq+XgoCJN4= Subject key identifier: 0F:3B:F5:9C:B0:53:22:31:D3:E9:9C:9B:D0:CC:F3:8A:EB:E7:B0:3A Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 03266410CB95F715B1686FD21FF44CD251BADB Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa Signing time: Tue 06 Jan 2026 00:54:49 +0000 ROA not before: Tue 06 Jan 2026 00:49:49 +0000 ROA not after: Tue 05 Jan 2027 00:54:49 +0000 asID: 214677 IP address blocks: 2a14:7583:a400::/38 maxlen: 48 2a14:7584:e900::/44 maxlen: 44 2a14:7584:e910::/44 maxlen: 44 2a14:7584:e920::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:26:64:10:cb:95:f7:15:b1:68:6f:d2:1f:f4:4c:d2:51:ba:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:49:49 2026 GMT Not After : Jan 5 00:54:49 2027 GMT Subject: CN=0F3BF59CB0532231D3E99C9BD0CCF38AEBE7B03A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:38:f8:70:74:44:32:0b:30:42:89:b4:4b: c7:44:05:84:c3:67:97:dc:d9:ab:64:a3:f5:53:0c: 9a:4e:00:98:68:cb:5b:18:86:5f:2c:a8:04:7f:09: 2d:3b:2c:cd:35:4f:86:de:ef:f2:28:b5:83:8e:df: aa:05:e4:1f:26:d2:35:92:b4:fe:5c:c4:bc:83:6a: 9a:41:00:ed:d7:e7:a2:93:46:27:61:ac:d3:84:2b: 9f:96:4d:19:42:8e:55:6e:47:a7:42:39:b9:a7:2e: ba:b9:19:ad:76:18:bb:82:bc:be:60:d5:2d:e1:bd: dc:c0:76:8c:6a:78:04:1c:f2:86:a3:8d:ac:f7:68: 59:0f:57:30:e6:3c:11:b5:b4:ea:73:46:a5:da:49: 4c:73:05:cf:01:1e:4c:e7:fa:83:48:11:af:e7:fa: f3:c6:13:c6:aa:90:0f:c9:32:14:51:67:4f:3e:b2: fe:e0:7d:38:85:4b:08:3f:dd:ef:cf:f2:3f:d6:2f: 84:1e:5c:f6:cf:a2:78:65:24:78:4a:a7:50:2f:5e: 4f:70:3b:65:05:23:98:7c:16:9e:eb:32:0f:26:e4: 5e:c9:ea:bb:a9:73:ab:4d:6b:27:bb:f9:31:2f:45: 8a:65:58:27:af:76:9c:47:78:d2:57:ce:69:12:a6: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3B:F5:9C:B0:53:22:31:D3:E9:9C:9B:D0:CC:F3:8A:EB:E7:B0:3A X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214677.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:a400::/38 2a14:7584:e900::-2a14:7584:e92f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8f:49:47:cf:24:e8:f4:55:a5:86:f7:dd:35:1b:cc:79:d8:2d: 8c:e7:89:01:ff:2b:6e:c2:30:56:c0:58:96:be:90:50:1d:64: 78:c7:1f:f8:86:fa:27:41:a7:4f:60:c6:37:13:47:2b:ae:15: a6:90:12:5c:f3:34:d6:61:40:53:59:24:98:73:fd:93:2e:d6: 0e:fd:0e:05:8b:e5:9e:80:5c:5c:d8:9f:06:c2:b3:83:1e:8e: b1:d0:f4:ce:a2:18:a9:71:f5:d7:72:75:c9:9a:e1:bc:44:6b: 59:91:ba:ed:26:20:21:36:8e:78:c5:cb:ea:38:46:32:bd:bd: 8f:8d:96:a3:74:f0:14:3f:84:27:0f:b4:a7:2f:49:7d:1d:d0: 39:e6:aa:13:35:ee:7e:78:fa:0c:7a:82:30:4b:ae:3b:ef:46: a3:56:08:e3:d9:90:8a:70:2c:60:73:a4:22:4a:97:c0:79:89: 49:01:32:ff:fd:d4:87:22:8b:ea:45:3e:14:3b:ba:f8:2a:d5: ed:e1:04:80:9e:70:a9:96:a0:e4:47:37:14:05:ca:27:0d:c8: 18:4e:8c:9e:9c:58:78:ea:da:98:4e:1a:37:21:4c:9b:89:b1: 3d:f3:d4:9d:26:b7:75:19:73:5f:3b:1e:9a:56:28:19:6e:3e: b0:4c:47:fe -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgITAyZkEMuV9xWxaG/SH/RM0lG62zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhhODNkNDg2NTJmM2IyZGY3NGY2YmY5YmFhOGE5YzE3NGNj ZmQzNzcyMB4XDTI2MDEwNjAwNDk0OVoXDTI3MDEwNTAwNTQ0OVowMzExMC8GA1UE AxMoMEYzQkY1OUNCMDUzMjIzMUQzRTk5QzlCRDBDQ0YzOEFFQkU3QjAzQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI3qOPhwdEQyCzBCibRLx0QFhMNn l9zZq2Sj9VMMmk4AmGjLWxiGXyyoBH8JLTsszTVPht7v8ii1g47fqgXkHybSNZK0 /lzEvINqmkEA7dfnopNGJ2Gs04Qrn5ZNGUKOVW5Hp0I5uacuurkZrXYYu4K8vmDV LeG93MB2jGp4BBzyhqONrPdoWQ9XMOY8EbW06nNGpdpJTHMFzwEeTOf6g0gRr+f6 88YTxqqQD8kyFFFnTz6y/uB9OIVLCD/d78/yP9YvhB5c9s+ieGUkeEqnUC9eT3A7 ZQUjmHwWnusyDybkXsnqu6lzq01rJ7v5MS9FimVYJ692nEd40lfOaRKmsQkCAwEA AaOCAh8wggIbMB0GA1UdDgQWBBQPO/WcsFMiMdPpnJvQzPOK6+ewOjAfBgNVHSME GDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4 MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFBOEE5QzE3NENDRkQzNzcyLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpTODdMZmRQYV9tNnFLbkJkTXo5 TjNJLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00 Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvQVMyMTQ2Nzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgACMBsDBgIqFHWD pDARAwYAKhR1hOkDBwQqFHWE6SAwDQYJKoZIhvcNAQELBQADggEBAI9JR88k6PRV pYb33TUbzHnYLYzniQH/K27CMFbAWJa+kFAdZHjHH/iG+idBp09gxjcTRyuuFaaQ ElzzNNZhQFNZJJhz/ZMu1g79DgWL5Z6AXFzYnwbCs4MejrHQ9M6iGKlx9ddydcma 4bxEa1mRuu0mICE2jnjFy+o4RjK9vY+NlqN08BQ/hCcPtKcvSX0d0DnmqhM17n54 +gx6gjBLrjvvRqNWCOPZkIpwLGBzpCJKl8B5iUkBMv/91Icii+pFPhQ7uvgq1e3h BICecKmWoORHNxQFyicNyBhOjJ6cWHjq2phOGjchTJuJsT3z1J0mt3UZc187HppW KBluPrBMR/4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:50 2026 by rpki-client