This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214481.roa File: AS214481.roa (raw, json) Hash identifier: 05NUieXfa7D+xj6QOpfNvgu0LCYpeRQRUKwiGSJynlI= Subject key identifier: 3E:63:64:7B:B3:3B:11:1C:D9:81:BC:B8:FE:72:DD:2E:70:A3:CB:58 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 6A5A6A703BBC323F243B92C510BDAA026212F767 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214481.roa Signing time: Sat 29 Nov 2025 13:55:12 +0000 ROA not before: Sat 29 Nov 2025 13:50:12 +0000 ROA not after: Sat 28 Nov 2026 13:55:12 +0000 asID: 214481 IP address blocks: 141.11.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5a:6a:70:3b:bc:32:3f:24:3b:92:c5:10:bd:aa:02:62:12:f7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 29 13:50:12 2025 GMT Not After : Nov 28 13:55:12 2026 GMT Subject: CN=3E63647BB33B111CD981BCB8FE72DD2E70A3CB58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:32:4a:75:a4:86:b8:b9:fe:c8:e6:69:a9: f4:23:d5:ad:92:37:14:56:c5:e9:32:fe:5c:e8:e3: 0b:e6:44:95:61:02:1b:e7:70:01:9c:ee:21:da:fe: a4:55:16:a2:ef:c9:50:8b:8e:88:b3:36:70:7e:b4: c8:7a:ed:40:fd:84:20:18:30:a6:9c:28:6c:23:49: 54:16:8b:a7:ac:23:0c:76:f1:8b:f0:4c:4a:73:c1: 5b:c5:51:4e:44:d9:7f:57:97:6c:9d:35:df:fb:c3: eb:0f:c5:b4:e1:d3:d5:85:f1:ed:43:79:f8:44:80: 11:e9:96:50:b1:e0:74:0c:2a:23:06:1a:2a:c5:ce: d0:65:d0:3f:60:83:0f:91:a9:12:96:3f:f7:00:ea: 31:f8:68:10:79:f2:47:6f:c3:2e:2c:a3:ef:38:38: 9f:4a:8a:19:96:0c:3c:5b:76:82:a2:fe:c1:cf:f5: 8f:86:61:80:56:64:77:d7:c3:7e:a5:c3:c2:94:8c: 69:1c:1f:c1:16:d7:eb:5b:86:6e:80:64:83:8e:2e: 8b:ac:8c:88:37:32:4e:dd:90:ef:9c:75:ff:42:4a: e5:35:01:a1:7f:d2:b9:92:63:d6:08:69:d7:5e:d8: da:13:f0:e2:7b:c1:13:60:fb:7c:2c:3a:46:e3:0a: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:63:64:7B:B3:3B:11:1C:D9:81:BC:B8:FE:72:DD:2E:70:A3:CB:58 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.62.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:28:77:cd:7b:62:3a:fc:39:ae:92:e7:6b:85:e7:97:52:4d: b4:1e:11:1e:2e:93:93:7d:cf:20:de:a7:49:c3:b3:c0:b3:6c: 38:bc:f9:08:85:08:2e:30:09:32:76:c8:a9:54:dd:2b:53:8a: 2a:75:ee:1c:3f:cf:77:95:0b:ab:80:5d:73:70:d1:b3:b1:f1: f8:ba:99:36:a7:01:ff:4a:3f:a1:01:42:07:dc:e8:5e:cc:97: fe:8e:68:15:90:bc:18:49:f2:86:62:24:32:56:66:37:50:e4: 46:87:f4:0e:59:c2:ac:88:9c:e8:fa:1f:33:f2:98:14:87:55: 85:4b:d4:f8:e6:d5:5b:2d:79:79:ab:7e:f7:91:df:41:7d:f4: 6f:fc:59:0d:74:a0:17:64:4b:57:b7:e5:aa:9c:02:cd:ea:77: 5a:5e:30:91:a7:08:3b:34:24:94:67:ab:7d:49:8a:67:52:bf: 85:b0:24:d6:ae:76:e9:7b:3f:5d:dd:ee:a2:6c:f5:97:01:21: 28:be:6d:57:67:1a:59:87:b8:56:3f:ab:b2:65:c7:27:37:53: bd:57:9a:69:4c:d1:ef:ac:07:fe:6f:25:24:a4:c3:ab:36:a3: 3d:e2:2e:bf:46:32:6d:7e:44:07:2f:9a:ff:f8:79:9b:dd:ff: b0:b0:8f:7e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUalpqcDu8Mj8kO5LFEL2qAmIS92cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMjkxMzUwMTJaFw0yNjExMjgxMzU1MTJaMDMxMTAvBgNV BAMTKDNFNjM2NDdCQjMzQjExMUNEOTgxQkNCOEZFNzJERDJFNzBBM0NCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4zJKdaSGuLn+yOZpqfQj1a2S NxRWxeky/lzo4wvmRJVhAhvncAGc7iHa/qRVFqLvyVCLjoizNnB+tMh67UD9hCAY MKacKGwjSVQWi6esIwx28YvwTEpzwVvFUU5E2X9Xl2ydNd/7w+sPxbTh09WF8e1D efhEgBHpllCx4HQMKiMGGirFztBl0D9ggw+RqRKWP/cA6jH4aBB58kdvwy4so+84 OJ9KihmWDDxbdoKi/sHP9Y+GYYBWZHfXw36lw8KUjGkcH8EW1+tbhm6AZIOOLous jIg3Mk7dkO+cdf9CSuU1AaF/0rmSY9YIadde2NoT8OJ7wRNg+3wsOkbjCtt/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUPmNke7M7ERzZgby4/nLdLnCjy1gwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0NDgxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQs+ MA0GCSqGSIb3DQEBCwUAA4IBAQA6KHfNe2I6/DmukudrheeXUk20HhEeLpOTfc8g 3qdJw7PAs2w4vPkIhQguMAkydsipVN0rU4oqde4cP893lQurgF1zcNGzsfH4upk2 pwH/Sj+hAUIH3OhezJf+jmgVkLwYSfKGYiQyVmY3UORGh/QOWcKsiJzo+h8z8pgU h1WFS9T45tVbLXl5q373kd9BffRv/FkNdKAXZEtXt+WqnALN6ndaXjCRpwg7NCSU Z6t9SYpnUr+FsCTWrnbpez9d3e6ibPWXASEovm1XZxpZh7hWP6uyZccnN1O9V5pp TNHvrAf+byUkpMOrNqM94i6/RjJtfkQHL5r/+Hmb3f+wsI9+ -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:19 2025 by rpki-client