This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: G+HIWx5pZVaPWrr7+cEh6shCs0dQ1UfrWVawlQW2EpQ= Subject key identifier: 2A:E9:C0:8A:54:B5:39:0F:64:9F:B7:67:30:D4:40:A7:91:68:3E:62 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 088B21DE9498EF053B13059D096EEB3A683DC115 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214025.roa Signing time: Wed 21 Jan 2026 02:58:13 +0000 ROA not before: Wed 21 Jan 2026 02:53:13 +0000 ROA not after: Wed 20 Jan 2027 02:58:13 +0000 asID: 214025 IP address blocks: 143.20.45.0/24 maxlen: 24 143.20.148.0/24 maxlen: 24 143.20.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8b:21:de:94:98:ef:05:3b:13:05:9d:09:6e:eb:3a:68:3d:c1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Jan 21 02:53:13 2026 GMT Not After : Jan 20 02:58:13 2027 GMT Subject: CN=2AE9C08A54B5390F649FB76730D440A791683E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:f0:a4:28:eb:ff:d7:d7:69:46:ea:3f:fd: 73:78:a8:1e:b6:60:cb:ec:06:97:79:f5:cb:96:4d: d5:18:36:cf:90:03:f9:6e:82:28:f6:26:20:a3:56: 33:c0:00:69:82:bb:fe:96:1e:d6:5a:df:19:b7:fc: f7:e0:f0:6c:93:af:64:f9:0b:f2:fa:c7:86:34:d9: 95:0d:0c:cb:cd:7d:53:8b:97:b1:02:d7:d7:35:4c: d5:99:68:d3:2d:a6:c3:51:f1:9d:6d:46:b7:ce:96: 4f:55:72:94:cb:f3:38:e3:eb:65:fa:15:a5:f5:4e: 52:5d:d2:82:1b:d8:8d:7e:5b:03:e1:92:22:d5:7f: 7d:7a:cc:5b:1d:0c:02:17:72:ee:9a:85:3e:d9:21: c5:fa:d9:53:cf:3e:a1:39:20:45:0c:48:65:dc:88: 5c:4a:aa:e4:f2:b1:8e:7e:a8:a9:23:47:c4:77:5a: 13:51:4f:e8:31:eb:97:d9:62:d9:a8:82:86:47:98: fc:08:2b:09:4b:94:77:f8:a3:1c:e7:43:b9:7a:ff: 52:85:58:89:0a:b0:dc:4f:90:13:4b:33:8f:1f:17: 78:a2:5b:db:19:47:9f:51:07:91:11:38:7e:77:bc: 4c:05:f0:7b:99:b0:12:f8:18:40:1a:c6:2e:38:0c: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E9:C0:8A:54:B5:39:0F:64:9F:B7:67:30:D4:40:A7:91:68:3E:62 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.45.0/24 143.20.148.0/24 143.20.206.0/24 Signature Algorithm: sha256WithRSAEncryption 13:c9:0a:d2:f3:b5:e7:94:d6:ea:c1:0e:d2:65:4b:f6:5e:ab: 95:7d:13:69:9f:61:60:56:05:52:8a:57:5c:88:57:bc:21:24: 7f:c8:9e:79:96:07:8a:37:af:76:01:f7:70:2b:86:cd:c9:92: e0:44:df:30:18:8b:16:ca:49:b7:16:ca:e0:aa:c3:a6:f0:7f: 9e:cc:35:29:b7:60:72:cc:02:2b:c0:ad:11:76:eb:84:a0:8f: 96:ba:e4:82:18:8c:74:ab:41:38:b6:f8:d8:d0:8e:ad:54:9c: e6:8e:9d:26:65:19:a8:75:06:75:26:d0:e9:50:c2:81:c4:13: 06:ab:47:93:69:6b:ef:86:3f:11:96:3c:e4:e8:be:af:26:e5: cd:f2:3c:74:e3:e6:e9:8e:53:b5:b5:56:37:7f:77:ef:0e:bf: 55:50:14:28:b3:70:2b:62:96:54:69:89:6a:93:f8:e4:dd:f8: df:de:22:ae:c0:ac:c0:8d:f0:1b:e2:ce:8c:db:ca:b2:2d:82: b2:69:87:7b:48:8c:96:12:82:e0:1e:5c:98:dd:3a:be:00:0a: 2f:9d:76:3d:3d:54:9f:2c:89:c9:2b:06:48:f8:01:12:59:76: 76:88:82:8a:c8:bd:b7:5c:f9:f1:8c:0c:1a:16:dc:bc:49:8e: 23:c5:1a:7e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUCIsh3pSY7wU7EwWdCW7rOmg9wRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNjAxMjEwMjUzMTNaFw0yNzAxMjAwMjU4MTNaMDMxMTAvBgNV BAMTKDJBRTlDMDhBNTRCNTM5MEY2NDlGQjc2NzMwRDQ0MEE3OTE2ODNFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFPCkKOv/19dpRuo//XN4qB62 YMvsBpd59cuWTdUYNs+QA/lugij2JiCjVjPAAGmCu/6WHtZa3xm3/Pfg8GyTr2T5 C/L6x4Y02ZUNDMvNfVOLl7EC19c1TNWZaNMtpsNR8Z1tRrfOlk9VcpTL8zjj62X6 FaX1TlJd0oIb2I1+WwPhkiLVf316zFsdDAIXcu6ahT7ZIcX62VPPPqE5IEUMSGXc iFxKquTysY5+qKkjR8R3WhNRT+gx65fZYtmogoZHmPwIKwlLlHf4oxznQ7l6/1KF WIkKsNxPkBNLM48fF3iiW9sZR59RB5EROH53vEwF8HuZsBL4GEAaxi44DP+RAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUKunAilS1OQ9kn7dnMNRAp5FoPmIwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjxQt AwQAjxSUAwQAjxTOMA0GCSqGSIb3DQEBCwUAA4IBAQATyQrS87XnlNbqwQ7SZUv2 XquVfRNpn2FgVgVSildciFe8ISR/yJ55lgeKN692AfdwK4bNyZLgRN8wGIsWykm3 FsrgqsOm8H+ezDUpt2ByzAIrwK0RduuEoI+WuuSCGIx0q0E4tvjY0I6tVJzmjp0m ZRmodQZ1JtDpUMKBxBMGq0eTaWvvhj8Rljzk6L6vJuXN8jx04+bpjlO1tVY3f3fv Dr9VUBQos3ArYpZUaYlqk/jk3fjf3iKuwKzAjfAb4s6M28qyLYKyaYd7SIyWEoLg HlyY3Tq+AAovnXY9PVSfLInJKwZI+AESWXZ2iIKKyL23XPnxjAwaFty8SY4jxRp+ -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:24 2026 by rpki-client