This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214677.roa File: AS214677.roa (raw, json) Hash identifier: 8DIVhWGRiby9e5J6PpZD2nfZfvT+VOKmHbz4jWH4bnw= Subject key identifier: 4A:BD:E4:FE:FC:DA:59:65:79:D5:DB:B3:9B:B6:83:7D:1A:1D:09:F8 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 165FED8A266A896192F54C7888D3B97DD2E81867 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214677.roa Signing time: Wed 05 Nov 2025 15:55:11 +0000 ROA not before: Wed 05 Nov 2025 15:50:11 +0000 ROA not after: Wed 04 Nov 2026 15:55:11 +0000 asID: 214677 IP address blocks: 141.11.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5f:ed:8a:26:6a:89:61:92:f5:4c:78:88:d3:b9:7d:d2:e8:18:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 5 15:50:11 2025 GMT Not After : Nov 4 15:55:11 2026 GMT Subject: CN=4ABDE4FEFCDA596579D5DBB39BB6837D1A1D09F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:fe:be:3f:48:fd:41:2f:43:74:3b:5b:a7: 70:cb:82:49:c9:42:4a:34:61:10:df:d1:29:83:6a: 74:5b:f8:b4:cd:69:74:a5:52:3e:cc:96:9b:f0:34: 8d:c8:1e:ba:58:15:e0:1e:32:e1:d6:49:90:37:0f: 85:64:44:9b:35:c0:e5:6b:64:6f:e6:32:24:4a:7f: da:e5:30:da:02:9b:ec:71:b8:e2:ec:79:6c:b8:da: 5e:7f:08:bd:e4:25:bd:ec:e6:d6:62:ff:93:c7:b5: 0e:d7:a1:86:80:d0:09:65:18:c1:91:28:d9:eb:51: af:76:d1:ab:f0:10:e1:27:31:48:99:a8:fe:4a:35: bf:6c:2e:22:9a:00:40:55:82:6a:82:2e:13:a9:59: e3:f0:2b:0d:21:bd:c5:02:13:d1:cc:f9:b7:88:3b: ae:e2:51:15:ae:0b:41:50:78:c7:63:38:9a:3e:10: 45:9a:fe:04:a0:fd:70:d6:30:8d:f1:94:68:61:0b: 59:4a:87:98:62:72:80:47:cb:d4:a0:fe:f9:4e:e7: f1:61:b9:ec:7a:ce:3b:31:5f:e1:f6:0c:94:29:01: 52:9b:4e:af:af:dd:5f:de:5a:b6:67:a5:a8:00:fc: fb:28:44:49:d7:a1:b2:92:d1:07:51:37:25:fb:4e: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BD:E4:FE:FC:DA:59:65:79:D5:DB:B3:9B:B6:83:7D:1A:1D:09:F8 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214677.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.167.0/24 Signature Algorithm: sha256WithRSAEncryption 25:0e:65:ee:0f:f2:64:a3:16:11:9f:d1:ff:3f:95:95:ba:a6: 86:fa:b7:82:2a:72:5c:7f:2b:3c:63:91:80:e1:ac:02:91:c8: dc:ef:a2:28:eb:af:4b:aa:93:13:b5:da:e2:bc:4b:56:ce:25: 78:94:2b:64:b2:29:77:85:0b:7f:d3:50:85:09:48:82:51:25: 00:ea:a3:5b:f3:a6:99:16:6a:95:c1:20:79:c5:57:5f:0b:01: 1f:b3:44:de:94:f4:f7:94:c8:f2:e3:d1:6d:0b:fe:b6:a7:a4: b8:12:68:79:36:02:ce:6c:f2:5c:a8:db:a1:55:cd:40:8e:c0: bc:2f:23:88:3f:7b:4e:c2:d8:8b:1e:ee:15:84:57:ac:43:4b: 7a:b2:30:f5:43:70:f9:be:4e:26:09:a5:dc:53:de:ef:5c:16: 29:bb:6c:c5:4d:eb:73:f1:07:be:06:23:61:c6:a3:5a:76:16: 33:3f:56:41:f8:b4:bb:58:1a:35:5b:09:a7:69:c0:bc:90:1c: 3e:71:f6:0c:98:58:6e:a2:40:76:cd:86:f4:2e:0d:78:76:fd: ed:c2:dd:a3:a9:25:46:6c:fc:ee:f1:81:51:24:0d:44:31:d4: 1f:6d:18:d6:10:57:7d:ee:bb:6d:c0:02:9e:7b:cc:41:de:e9: 27:97:e8:1e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUFl/tiiZqiWGS9Ux4iNO5fdLoGGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMDUxNTUwMTFaFw0yNjExMDQxNTU1MTFaMDMxMTAvBgNV BAMTKDRBQkRFNEZFRkNEQTU5NjU3OUQ1REJCMzlCQjY4MzdEMUExRDA5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEf6+P0j9QS9DdDtbp3DLgknJ Qko0YRDf0SmDanRb+LTNaXSlUj7MlpvwNI3IHrpYFeAeMuHWSZA3D4VkRJs1wOVr ZG/mMiRKf9rlMNoCm+xxuOLseWy42l5/CL3kJb3s5tZi/5PHtQ7XoYaA0AllGMGR KNnrUa920avwEOEnMUiZqP5KNb9sLiKaAEBVgmqCLhOpWePwKw0hvcUCE9HM+beI O67iURWuC0FQeMdjOJo+EEWa/gSg/XDWMI3xlGhhC1lKh5hicoBHy9Sg/vlO5/Fh uex6zjsxX+H2DJQpAVKbTq+v3V/eWrZnpagA/PsoREnXobKS0QdRNyX7ToPLAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUSr3k/vzaWWV51duzm7aDfRodCfgwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0Njc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQun MA0GCSqGSIb3DQEBCwUAA4IBAQAlDmXuD/JkoxYRn9H/P5WVuqaG+reCKnJcfys8 Y5GA4awCkcjc76Io669LqpMTtdrivEtWziV4lCtksil3hQt/01CFCUiCUSUA6qNb 86aZFmqVwSB5xVdfCwEfs0TelPT3lMjy49FtC/62p6S4Emh5NgLObPJcqNuhVc1A jsC8LyOIP3tOwtiLHu4VhFesQ0t6sjD1Q3D5vk4mCaXcU97vXBYpu2zFTetz8Qe+ BiNhxqNadhYzP1ZB+LS7WBo1WwmnacC8kBw+cfYMmFhuokB2zYb0Lg14dv3twt2j qSVGbPzu8YFRJA1EMdQfbRjWEFd97rttwAKee8xB3uknl+ge -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:56 2025 by rpki-client