This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa File: AS214654.roa (raw, json) Hash identifier: QfDbjFJVkW1N88yDFC4ybDTuERSlfTCF48b1slH6tME= Subject key identifier: 55:9B:B0:DA:7E:D4:2D:45:96:57:F4:3F:F9:B9:56:4C:7B:5B:D2:70 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 0E8B54E82C8BF8417BAC56EC46660D7ACEB45B30 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa Signing time: Wed 03 Dec 2025 12:35:33 +0000 ROA not before: Wed 03 Dec 2025 12:30:33 +0000 ROA not after: Wed 02 Dec 2026 12:35:33 +0000 asID: 214654 IP address blocks: 46.203.98.0/24 maxlen: 24 46.203.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8b:54:e8:2c:8b:f8:41:7b:ac:56:ec:46:66:0d:7a:ce:b4:5b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 3 12:30:33 2025 GMT Not After : Dec 2 12:35:33 2026 GMT Subject: CN=559BB0DA7ED42D459657F43FF9B9564C7B5BD270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:83:7d:83:97:50:2c:ba:86:29:77:26:33: b6:a9:97:2e:a3:33:89:88:00:1b:cf:a3:24:bd:94: 31:90:66:d1:86:49:96:40:84:7e:b6:a9:82:44:77: 13:80:d7:8c:69:26:e9:46:c1:d4:ec:92:01:89:71: 3d:aa:54:72:7a:80:a0:24:63:86:3d:11:9b:96:d8: a8:a4:1e:27:88:a2:d4:65:98:8e:3e:0c:8f:bc:4f: af:4e:ac:ae:19:46:ab:c9:bf:04:ca:f4:72:74:06: da:e9:35:12:3c:d7:b4:ce:b7:8c:53:75:b3:9c:10: 0e:f3:1a:e5:ad:e7:7a:1e:be:93:25:19:c0:e1:43: 4c:f8:be:c2:b8:73:39:84:5f:f3:82:e4:4e:45:2a: 44:9d:12:c0:b4:2b:85:78:9b:18:65:6d:03:b1:66: 81:f8:ce:02:c7:32:53:b6:61:4a:5d:b9:5a:67:df: 45:3f:ea:b7:44:ac:d0:a5:e6:8e:dc:e7:2a:fe:37: 18:64:3f:5d:cc:14:96:f8:44:fa:d3:c8:29:53:90: 35:14:78:a2:f1:e3:94:2a:6d:8e:0b:4b:3e:68:f0: 36:82:2b:b1:5a:c9:4c:9f:bd:4b:43:8f:ed:4f:5f: 98:d6:46:34:b7:7d:9c:23:d4:88:a9:2f:fe:f2:a4: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9B:B0:DA:7E:D4:2D:45:96:57:F4:3F:F9:B9:56:4C:7B:5B:D2:70 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.98.0/24 46.203.203.0/24 Signature Algorithm: sha256WithRSAEncryption a7:a9:29:04:51:34:0e:05:82:ba:55:54:90:af:3d:f2:4f:ba: 5f:ae:1e:6f:e4:f5:27:51:45:79:ff:b2:78:56:b5:02:d2:51: 37:ad:70:b8:1e:ad:70:50:44:d5:ef:eb:71:93:fc:c8:3f:de: 28:aa:03:11:b7:32:3b:68:0c:dd:5f:9d:77:60:6b:98:4c:0b: da:9f:ab:cc:50:a4:5e:cd:b9:46:0d:00:ea:b7:36:4d:2b:3f: 78:25:7a:6e:a8:3a:38:1d:fc:00:2e:58:00:12:3c:94:09:b6: e6:4c:bb:f7:72:8f:f5:9d:ff:0a:4f:2f:46:ac:92:44:94:a6: 11:75:bd:c7:50:f1:94:76:a7:ac:95:27:ac:57:f1:f0:c1:92: 0a:53:83:64:27:ed:1f:85:65:1a:09:1b:bc:61:a6:67:cf:cc: 87:a3:66:16:17:97:3a:c6:9f:39:88:e1:de:91:ab:c9:81:f3: 20:ae:cf:21:6f:63:b4:71:74:10:04:bd:01:65:29:e6:4f:29: 8e:23:e3:79:51:3b:16:a6:f3:b8:54:f6:99:12:50:43:51:4b: 3c:ed:bd:b3:c8:ba:bc:fc:39:73:8e:80:69:a9:29:77:b5:71: 49:b3:67:96:6d:7c:41:42:93:3e:5c:76:f1:82:a9:35:e3:2c: 63:69:43:08 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUDotU6CyL+EF7rFbsRmYNes60WzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDMxMjMwMzNaFw0yNjEyMDIxMjM1MzNaMDMxMTAvBgNV BAMTKDU1OUJCMERBN0VENDJENDU5NjU3RjQzRkY5Qjk1NjRDN0I1QkQyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnYN9g5dQLLqGKXcmM7aply6j M4mIABvPoyS9lDGQZtGGSZZAhH62qYJEdxOA14xpJulGwdTskgGJcT2qVHJ6gKAk Y4Y9EZuW2KikHieIotRlmI4+DI+8T69OrK4ZRqvJvwTK9HJ0BtrpNRI817TOt4xT dbOcEA7zGuWt53oevpMlGcDhQ0z4vsK4czmEX/OC5E5FKkSdEsC0K4V4mxhlbQOx ZoH4zgLHMlO2YUpduVpn30U/6rdErNCl5o7c5yr+NxhkP13MFJb4RPrTyClTkDUU eKLx45QqbY4LSz5o8DaCK7FayUyfvUtDj+1PX5jWRjS3fZwj1IipL/7ypMkVAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUVZuw2n7ULUWWV/Q/+blWTHtb0nAwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0NjU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALsti AwQALsvLMA0GCSqGSIb3DQEBCwUAA4IBAQCnqSkEUTQOBYK6VVSQrz3yT7pfrh5v 5PUnUUV5/7J4VrUC0lE3rXC4Hq1wUETV7+txk/zIP94oqgMRtzI7aAzdX513YGuY TAvan6vMUKRezblGDQDqtzZNKz94JXpuqDo4HfwALlgAEjyUCbbmTLv3co/1nf8K Ty9GrJJElKYRdb3HUPGUdqeslSesV/HwwZIKU4NkJ+0fhWUaCRu8YaZnz8yHo2YW F5c6xp85iOHekavJgfMgrs8hb2O0cXQQBL0BZSnmTymOI+N5UTsWpvO4VPaZElBD UUs87b2zyLq8/DlzjoBpqSl3tXFJs2eWbXxBQpM+XHbxgqk14yxjaUMI -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:35 2025 by rpki-client