This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214024.roa File: AS214024.roa (raw, json) Hash identifier: kIf55GzKUeLTIws4LgBVKMz3uQarEkYlOgGgc1Gw0pM= Subject key identifier: 05:76:70:12:9A:51:BE:A4:FE:8E:F1:74:B5:12:EF:42:EE:C4:89:7B Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 655A07A0EEAA8B9C1CA5A95B97D77BD9D8C99A48 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214024.roa Signing time: Mon 08 Dec 2025 13:54:43 +0000 ROA not before: Mon 08 Dec 2025 13:49:43 +0000 ROA not after: Mon 07 Dec 2026 13:54:43 +0000 asID: 214024 IP address blocks: 141.11.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5a:07:a0:ee:aa:8b:9c:1c:a5:a9:5b:97:d7:7b:d9:d8:c9:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 8 13:49:43 2025 GMT Not After : Dec 7 13:54:43 2026 GMT Subject: CN=057670129A51BEA4FE8EF174B512EF42EEC4897B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:f7:15:15:34:8d:84:ec:2d:31:49:3a:12: 52:86:9c:c6:25:8e:1d:66:28:68:c4:d3:d3:d8:93: f3:89:7b:74:d3:37:a7:99:08:4b:f6:11:f9:64:4a: 60:6c:6d:67:6f:8e:03:a6:b2:14:df:5a:12:3f:74: cd:fa:f6:43:15:b3:4f:d4:32:1f:bc:c3:9c:52:1b: 1b:03:b1:5e:97:66:f0:e9:82:3d:ca:9e:37:1c:a2: 9c:14:44:57:42:a3:ee:08:7b:f0:80:5d:e3:7f:47: 3b:b7:41:c7:48:f1:6c:f7:19:f1:97:70:38:3e:7f: dd:69:32:a9:7a:a1:69:16:d2:f5:8f:9f:d3:c0:b1: 73:71:54:56:c0:d5:d9:95:8f:8c:4d:ae:3b:3a:03: bd:f7:eb:6d:84:de:4b:b9:de:60:02:3b:0e:a0:e2: f7:dc:05:9c:0f:45:e9:a4:47:4e:69:26:90:51:69: 5f:49:9c:dc:bd:a1:96:8b:5c:88:4c:72:9f:b7:15: f5:1f:ac:bb:2d:43:58:28:81:66:f4:ec:13:01:0e: 27:b7:29:94:7f:08:66:17:36:d1:b7:51:48:5e:37: a0:ec:be:dd:bb:3a:d7:f0:5a:2f:33:0e:e7:fe:c2: 1d:aa:04:6e:ca:5f:80:a0:73:7b:5a:3c:dd:b8:82: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:76:70:12:9A:51:BE:A4:FE:8E:F1:74:B5:12:EF:42:EE:C4:89:7B X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.78.0/24 Signature Algorithm: sha256WithRSAEncryption ca:97:66:01:72:aa:20:74:bf:b6:c5:ff:44:b9:ee:ec:f2:fb: 36:16:37:cd:94:12:42:34:97:aa:43:9d:aa:22:c2:be:13:9c: 29:cf:09:9c:e8:30:d3:9d:ab:62:b4:c3:c4:48:34:c6:b5:d9: c2:1b:aa:e3:ae:1b:27:97:95:82:a9:f5:16:0e:e9:9a:e4:d1: a7:6e:02:2e:e0:70:6b:20:4e:5e:87:d9:50:e3:3f:0f:31:44: cb:21:5d:d2:c4:7a:46:21:51:d3:65:ca:32:e9:8a:3b:a2:aa: 8e:46:74:6e:d6:db:38:11:7f:fa:b7:ca:c2:9e:eb:06:1a:de: 6e:62:24:33:04:42:73:93:b4:84:7a:2e:32:12:5b:ef:b8:0c: 02:5d:cf:6c:51:77:90:b5:bb:c8:16:c2:9d:b8:58:9b:10:96: c6:19:3a:f0:12:6a:e5:c7:bd:4f:5f:c9:52:53:b2:54:d3:01: d3:22:3e:b4:a6:2b:26:4e:32:52:b1:5d:9b:b2:da:00:9e:cb: 62:f0:98:c0:32:13:a0:67:48:b3:23:80:18:bc:63:5e:2c:77: 71:86:47:ff:6e:2e:87:e5:24:37:b4:9e:92:e7:3f:2c:72:ba: f0:91:0f:b5:34:ab:ec:5d:b4:e8:df:e4:53:0d:7d:11:ba:0d: d6:72:04:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUZVoHoO6qi5wcpalbl9d72djJmkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMDgxMzQ5NDNaFw0yNjEyMDcxMzU0NDNaMDMxMTAvBgNV BAMTKDA1NzY3MDEyOUE1MUJFQTRGRThFRjE3NEI1MTJFRjQyRUVDNDg5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6fcVFTSNhOwtMUk6ElKGnMYl jh1mKGjE09PYk/OJe3TTN6eZCEv2EflkSmBsbWdvjgOmshTfWhI/dM369kMVs0/U Mh+8w5xSGxsDsV6XZvDpgj3KnjccopwURFdCo+4Ie/CAXeN/Rzu3QcdI8Wz3GfGX cDg+f91pMql6oWkW0vWPn9PAsXNxVFbA1dmVj4xNrjs6A733622E3ku53mACOw6g 4vfcBZwPRemkR05pJpBRaV9JnNy9oZaLXIhMcp+3FfUfrLstQ1gogWb07BMBDie3 KZR/CGYXNtG3UUheN6Dsvt27OtfwWi8zDuf+wh2qBG7KX4Cgc3taPN24ghPxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUBXZwEppRvqT+jvF0tRLvQu7EiXswHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0MDI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtO MA0GCSqGSIb3DQEBCwUAA4IBAQDKl2YBcqogdL+2xf9Eue7s8vs2FjfNlBJCNJeq Q52qIsK+E5wpzwmc6DDTnatitMPESDTGtdnCG6rjrhsnl5WCqfUWDuma5NGnbgIu 4HBrIE5eh9lQ4z8PMUTLIV3SxHpGIVHTZcoy6Yo7oqqORnRu1ts4EX/6t8rCnusG Gt5uYiQzBEJzk7SEei4yElvvuAwCXc9sUXeQtbvIFsKduFibEJbGGTrwEmrlx71P X8lSU7JU0wHTIj60pismTjJSsV2bstoAnsti8JjAMhOgZ0izI4AYvGNeLHdxhkf/ bi6H5SQ3tJ6S5z8scrrwkQ+1NKvsXbTo3+RTDX0Rug3WcgTj -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:11 2025 by rpki-client