This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214143.roa File: AS214143.roa (raw, json) Hash identifier: dKRI6ynv6FJP2yFMQi9M0sUPYBV6zr6EQ/tMfy1Za9U= Subject key identifier: 33:B7:8B:2A:C2:D0:6C:D0:4B:C9:18:23:A2:D9:BF:5A:8B:BF:53:C1 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 1953D6020B1842D9F4A7E2ABEF4F7970CC1C5F08 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214143.roa Signing time: Tue 13 Jan 2026 07:23:21 +0000 ROA not before: Tue 13 Jan 2026 07:18:21 +0000 ROA not after: Tue 12 Jan 2027 07:23:21 +0000 asID: 214143 IP address blocks: 46.203.2.0/24 maxlen: 24 92.112.244.0/24 maxlen: 24 92.112.245.0/24 maxlen: 24 178.92.102.0/24 maxlen: 24 178.92.104.0/24 maxlen: 24 178.92.105.0/24 maxlen: 24 178.92.107.0/24 maxlen: 24 178.92.109.0/24 maxlen: 24 178.92.153.0/24 maxlen: 24 178.92.166.0/24 maxlen: 24 178.92.185.0/24 maxlen: 24 178.92.197.0/24 maxlen: 24 178.92.198.0/24 maxlen: 24 178.92.201.0/24 maxlen: 24 178.92.211.0/24 maxlen: 24 178.92.215.0/24 maxlen: 24 178.92.223.0/24 maxlen: 24 178.92.224.0/24 maxlen: 24 178.92.226.0/24 maxlen: 24 178.92.229.0/24 maxlen: 24 178.92.230.0/24 maxlen: 24 178.92.235.0/24 maxlen: 24 178.92.237.0/24 maxlen: 24 178.92.249.0/24 maxlen: 24 178.92.251.0/24 maxlen: 24 178.93.4.0/24 maxlen: 24 178.93.9.0/24 maxlen: 24 178.93.27.0/24 maxlen: 24 178.93.40.0/24 maxlen: 24 178.93.42.0/24 maxlen: 24 178.93.141.0/24 maxlen: 24 178.93.142.0/24 maxlen: 24 178.93.145.0/24 maxlen: 24 178.93.147.0/24 maxlen: 24 178.93.152.0/24 maxlen: 24 178.93.155.0/24 maxlen: 24 178.93.162.0/24 maxlen: 24 178.93.167.0/24 maxlen: 24 178.93.210.0/24 maxlen: 24 178.93.214.0/24 maxlen: 24 178.93.218.0/24 maxlen: 24 178.93.228.0/24 maxlen: 24 178.93.233.0/24 maxlen: 24 178.94.12.0/24 maxlen: 24 178.94.16.0/24 maxlen: 24 178.94.18.0/24 maxlen: 24 178.94.33.0/24 maxlen: 24 178.94.35.0/24 maxlen: 24 178.94.40.0/24 maxlen: 24 178.94.82.0/24 maxlen: 24 178.94.104.0/24 maxlen: 24 178.94.118.0/24 maxlen: 24 178.94.210.0/24 maxlen: 24 178.94.220.0/24 maxlen: 24 178.94.234.0/24 maxlen: 24 178.94.238.0/24 maxlen: 24 178.94.239.0/24 maxlen: 24 178.94.240.0/24 maxlen: 24 178.94.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:53:d6:02:0b:18:42:d9:f4:a7:e2:ab:ef:4f:79:70:cc:1c:5f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 13 07:18:21 2026 GMT Not After : Jan 12 07:23:21 2027 GMT Subject: CN=33B78B2AC2D06CD04BC91823A2D9BF5A8BBF53C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:b9:18:bf:ea:02:d9:57:73:a7:ba:a5:53: c5:8c:ef:5c:56:5c:58:cc:6a:eb:04:a2:87:23:29: 9b:1f:6b:48:99:62:a1:11:a0:3c:f4:1f:0b:3e:f9: 39:35:06:b0:c8:8e:aa:87:af:c5:06:05:c5:c0:d9: 60:28:a2:ac:bb:58:2b:a3:7e:f9:f7:fc:2f:d4:4c: e0:0c:bc:30:5b:ea:6e:c1:04:6f:77:03:93:89:39: 2a:73:fa:d0:f8:d1:2d:90:d8:fd:ed:e9:6d:91:0d: 24:4e:dc:3e:4e:b0:3b:4b:ba:ac:6a:fe:f8:67:14: 25:79:0e:14:49:68:3e:81:49:63:88:27:a8:b4:e1: 28:0d:92:3b:76:b8:e7:40:45:47:8f:12:48:4a:a0: 2b:30:1f:26:76:b0:09:69:f3:d1:e4:70:55:dc:bd: 31:98:ed:ed:96:f6:b3:d3:82:f1:78:d8:b2:ee:b9: 7f:45:59:41:dc:b9:e3:a8:4e:6f:0d:5a:67:e3:a6: c6:76:08:cd:92:98:05:23:37:b1:eb:7a:5a:92:34: 07:0b:88:62:c1:ce:29:58:69:68:0f:6f:c1:b3:1b: 07:02:46:27:d9:08:fa:a2:cb:40:d6:e5:8d:02:74: 5a:38:b8:d7:bd:34:69:d6:9b:5a:02:92:e9:42:ce: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:8B:2A:C2:D0:6C:D0:4B:C9:18:23:A2:D9:BF:5A:8B:BF:53:C1 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214143.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.2.0/24 92.112.244.0/23 178.92.102.0/24 178.92.104.0/23 178.92.107.0/24 178.92.109.0/24 178.92.153.0/24 178.92.166.0/24 178.92.185.0/24 178.92.197.0-178.92.198.255 178.92.201.0/24 178.92.211.0/24 178.92.215.0/24 178.92.223.0-178.92.224.255 178.92.226.0/24 178.92.229.0-178.92.230.255 178.92.235.0/24 178.92.237.0/24 178.92.249.0/24 178.92.251.0/24 178.93.4.0/24 178.93.9.0/24 178.93.27.0/24 178.93.40.0/24 178.93.42.0/24 178.93.141.0-178.93.142.255 178.93.145.0/24 178.93.147.0/24 178.93.152.0/24 178.93.155.0/24 178.93.162.0/24 178.93.167.0/24 178.93.210.0/24 178.93.214.0/24 178.93.218.0/24 178.93.228.0/24 178.93.233.0/24 178.94.12.0/24 178.94.16.0/24 178.94.18.0/24 178.94.33.0/24 178.94.35.0/24 178.94.40.0/24 178.94.82.0/24 178.94.104.0/24 178.94.118.0/24 178.94.210.0/24 178.94.220.0/24 178.94.234.0/24 178.94.238.0-178.94.240.255 178.94.243.0/24 Signature Algorithm: sha256WithRSAEncryption 20:8d:41:ad:92:31:8e:7c:75:74:f8:37:b9:9d:14:17:57:5d: 70:66:7c:bb:f8:3c:21:20:98:bb:c2:86:e4:91:5e:92:48:a2: 31:49:5e:3c:53:5c:9c:19:60:0d:3a:f2:72:a1:3a:8c:ce:c9: a0:bc:45:e7:22:48:8a:33:4a:89:e5:f5:24:f2:8f:4f:49:1d: f1:ff:01:72:bd:f1:88:07:62:34:61:e8:81:fe:22:17:a0:39: 12:c4:44:e5:49:6b:2f:e3:9a:96:76:50:7e:5f:4c:50:15:dd: 16:a7:fc:31:7c:fc:82:3c:f8:1a:4f:4d:f7:9d:95:5e:82:54: 95:13:70:13:b4:51:2c:58:ad:78:6a:83:66:ca:11:e9:73:1b: 71:16:02:34:7e:06:33:ae:c8:16:5d:2a:8d:76:9b:ab:2d:48: 82:2d:01:f8:59:99:d6:e5:05:8b:cb:fc:d8:1c:a9:31:ac:a0: 7a:0f:05:81:f5:01:ac:cd:d7:1f:0a:ac:55:c1:1a:66:1f:18: 0a:4a:a7:5c:ac:49:9b:a6:12:61:07:fe:a0:7c:7d:4f:07:fa: 4a:5d:0f:82:00:cf:cb:c9:80:7c:86:e9:a5:b2:a5:f4:89:c5: cf:b1:dc:c2:c8:ff:82:76:7a:ec:06:ea:c2:97:e0:fd:ba:d0: d4:d6:db:3e -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUGVPWAgsYQtn0p+Kr7095cMwcXwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMTMwNzE4MjFaFw0yNzAxMTIwNzIzMjFaMDMxMTAvBgNV BAMTKDMzQjc4QjJBQzJEMDZDRDA0QkM5MTgyM0EyRDlCRjVBOEJCRjUzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCrkYv+oC2Vdzp7qlU8WM71xW XFjMausEoocjKZsfa0iZYqERoDz0Hws++Tk1BrDIjqqHr8UGBcXA2WAooqy7WCuj fvn3/C/UTOAMvDBb6m7BBG93A5OJOSpz+tD40S2Q2P3t6W2RDSRO3D5OsDtLuqxq /vhnFCV5DhRJaD6BSWOIJ6i04SgNkjt2uOdARUePEkhKoCswHyZ2sAlp89HkcFXc vTGY7e2W9rPTgvF42LLuuX9FWUHcueOoTm8NWmfjpsZ2CM2SmAUjN7HrelqSNAcL iGLBzilYaWgPb8GzGwcCRifZCPqiy0DW5Y0CdFo4uNe9NGnWm1oCkulCzh39AgMB AAGjggNoMIIDZDAdBgNVHQ4EFgQUM7eLKsLQbNBLyRgjotm/Wou/U8EwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0MTQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIIBewYIKwYBBQUHAQcBAf8EggFqMIIBZjCCAWIEAgAB MIIBWgMEAC7LAgMEAVxw9AMEALJcZgMEAbJcaAMEALJcawMEALJcbQMEALJcmQME ALJcpgMEALJcuTAMAwQAslzFAwQAslzGAwQAslzJAwQAslzTAwQAslzXMAwDBACy XN8DBACyXOADBACyXOIwDAMEALJc5QMEALJc5gMEALJc6wMEALJc7QMEALJc+QME ALJc+wMEALJdBAMEALJdCQMEALJdGwMEALJdKAMEALJdKjAMAwQAsl2NAwQAsl2O AwQAsl2RAwQAsl2TAwQAsl2YAwQAsl2bAwQAsl2iAwQAsl2nAwQAsl3SAwQAsl3W AwQAsl3aAwQAsl3kAwQAsl3pAwQAsl4MAwQAsl4QAwQAsl4SAwQAsl4hAwQAsl4j AwQAsl4oAwQAsl5SAwQAsl5oAwQAsl52AwQAsl7SAwQAsl7cAwQAsl7qMAwDBAGy Xu4DBACyXvADBACyXvMwDQYJKoZIhvcNAQELBQADggEBACCNQa2SMY58dXT4N7md FBdXXXBmfLv4PCEgmLvChuSRXpJIojFJXjxTXJwZYA068nKhOozOyaC8ReciSIoz Sonl9STyj09JHfH/AXK98YgHYjRh6IH+IhegORLEROVJay/jmpZ2UH5fTFAV3Ran /DF8/II8+BpPTfedlV6CVJUTcBO0USxYrXhqg2bKEelzG3EWAjR+BjOuyBZdKo12 m6stSIItAfhZmdblBYvL/NgcqTGsoHoPBYH1AazN1x8KrFXBGmYfGApKp1ysSZum EmEH/qB8fU8H+kpdD4IAz8vJgHyG6aWypfSJxc+x3MLI/4J2euwG6sKX4P260NTW 2z4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:22 2026 by rpki-client