This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214841.roa File: AS214841.roa (raw, json) Hash identifier: o10Eq7IPn9AourqPjYgPR4iPxeJdxHjz3r3E19dHOho= Subject key identifier: 33:C8:8B:D4:BB:5C:E1:04:6F:21:38:36:F2:C4:EA:31:00:09:1E:F5 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 53B28BC6E1D9661F5DD621844429466C248CE9A7 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214841.roa Signing time: Tue 06 Jan 2026 01:00:48 +0000 ROA not before: Tue 06 Jan 2026 00:55:48 +0000 ROA not after: Tue 05 Jan 2027 01:00:48 +0000 asID: 214841 IP address blocks: 2a14:7581:e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b2:8b:c6:e1:d9:66:1f:5d:d6:21:84:44:29:46:6c:24:8c:e9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:48 2026 GMT Not After : Jan 5 01:00:48 2027 GMT Subject: CN=33C88BD4BB5CE1046F213836F2C4EA3100091EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:5b:95:5e:e9:f5:03:0f:81:ec:bb:77:e5: fb:99:01:a2:94:37:83:31:fe:bd:9e:a7:dc:c6:04: fc:12:7a:5f:9d:68:da:c9:32:6e:8a:b6:ef:82:f7: b6:66:73:5a:1e:d3:97:90:c8:79:39:e5:9d:d1:f6: 8c:96:46:1a:3a:46:d0:8d:6c:f4:17:45:f0:25:6a: dc:5c:9b:83:cb:0d:76:86:29:e4:7d:e2:03:31:7d: 8f:85:98:2f:75:12:85:70:e8:e4:89:ef:5a:53:0c: 7d:6d:95:7b:43:69:37:a5:a4:40:33:da:5d:ec:de: 44:61:ba:d6:5b:05:bb:4e:47:8d:76:4d:a1:c8:6c: 3a:eb:f2:3d:99:9b:28:80:07:24:76:e4:b5:73:3d: ac:bd:e0:0d:33:7a:21:0d:28:80:c5:10:28:46:b2: e7:c2:6e:b1:30:6a:db:d9:55:b7:b8:16:87:ff:b9: 71:16:7c:46:6c:36:e4:0a:4d:aa:7c:7e:b9:ce:ec: 35:aa:75:c2:bb:7e:ee:b8:76:56:22:04:4a:0e:b9: d5:cf:ba:17:ec:8a:26:a9:d1:45:49:f8:d9:6d:ad: 2f:af:1c:62:3b:81:55:36:fb:fd:8d:15:cc:7f:8d: 39:a1:1f:d0:d0:10:2e:d9:eb:e5:68:f0:91:28:43: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:8B:D4:BB:5C:E1:04:6F:21:38:36:F2:C4:EA:31:00:09:1E:F5 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e00::/40 Signature Algorithm: sha256WithRSAEncryption 35:e8:17:86:7e:dc:2c:0a:ae:d0:1c:f0:5f:87:7b:d5:49:3a: c9:b6:01:75:13:4b:9c:b1:6c:77:4c:df:ae:b1:44:e1:f8:26: 94:76:de:85:3a:cb:62:fd:06:85:a0:e9:9c:e0:1f:16:fe:e8: 91:9b:e2:15:5a:e5:5c:20:43:88:ab:de:81:d9:e1:2e:10:94: ad:91:d5:39:a4:6c:00:8a:1a:ad:96:d3:05:5c:57:c3:97:83: 00:48:c1:65:c4:86:0a:a4:13:7a:37:98:d4:90:1b:c1:fd:5d: 3d:98:76:02:ae:a5:67:8c:c3:15:aa:71:c8:18:5c:0a:20:0a: ea:b6:2b:db:1d:bc:89:f9:ce:50:80:32:62:05:a0:4c:6d:57: 28:3c:bb:ef:79:de:1e:d9:67:b3:0b:0a:fe:09:ab:3b:88:bd: 74:20:81:ea:52:b2:93:5a:24:95:55:04:c0:d6:f0:bf:66:39: 71:4c:12:26:2e:b9:7e:9c:44:f7:d3:12:04:64:29:40:72:be: b8:25:0d:f2:84:70:15:81:59:7a:b1:fc:8d:a4:2f:29:16:10: 95:e8:47:12:ab:26:57:dd:c4:00:bc:9c:e0:42:bf:42:e5:31: 5b:11:64:99:6c:f0:07:84:71:f0:ed:19:94:3e:84:46:4e:2d: bd:2b:6b:a1 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUU7KLxuHZZh9d1iGERClGbCSM6acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDhaFw0yNzAxMDUwMTAwNDhaMDMxMTAvBgNV BAMTKDMzQzg4QkQ0QkI1Q0UxMDQ2RjIxMzgzNkYyQzRFQTMxMDAwOTFFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8FuVXun1Aw+B7Lt35fuZAaKU N4Mx/r2ep9zGBPwSel+daNrJMm6Ktu+C97Zmc1oe05eQyHk55Z3R9oyWRho6RtCN bPQXRfAlatxcm4PLDXaGKeR94gMxfY+FmC91EoVw6OSJ71pTDH1tlXtDaTelpEAz 2l3s3kRhutZbBbtOR412TaHIbDrr8j2ZmyiAByR25LVzPay94A0zeiENKIDFEChG sufCbrEwatvZVbe4Fof/uXEWfEZsNuQKTap8frnO7DWqdcK7fu64dlYiBEoOudXP uhfsiiap0UVJ+NltrS+vHGI7gVU2+/2NFcx/jTmhH9DQEC7Z6+Vo8JEoQ11nAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUM8iL1Ltc4QRvITg28sTqMQAJHvUwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0ODQxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gQ4wDQYJKoZIhvcNAQELBQADggEBADXoF4Z+3CwKrtAc8F+He9VJOsm2AXUTS5yx bHdM366xROH4JpR23oU6y2L9BoWg6ZzgHxb+6JGb4hVa5VwgQ4ir3oHZ4S4QlK2R 1TmkbACKGq2W0wVcV8OXgwBIwWXEhgqkE3o3mNSQG8H9XT2YdgKupWeMwxWqccgY XAogCuq2K9sdvIn5zlCAMmIFoExtVyg8u+953h7ZZ7MLCv4JqzuIvXQggepSspNa JJVVBMDW8L9mOXFMEiYuuX6cRPfTEgRkKUByvrglDfKEcBWBWXqx/I2kLykWEJXo RxKrJlfdxAC8nOBCv0LlMVsRZJls8AeEcfDtGZQ+hEZOLb0ra6E= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:07 2026 by rpki-client