This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa File: AS214208.roa (raw, json) Hash identifier: nHYA92osRuE1NS+C+LmheTiUcQ19tIWbD9ehCqxY2C4= Subject key identifier: FD:A5:58:93:79:F2:FF:75:3D:A3:AF:4F:E6:B6:67:87:88:3B:CF:7D Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6EBEB0791B2572F47C0EC03605D7D84A06444408 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa Signing time: Fri 16 Jan 2026 08:20:07 +0000 ROA not before: Fri 16 Jan 2026 08:15:07 +0000 ROA not after: Fri 15 Jan 2027 08:20:07 +0000 asID: 214208 IP address blocks: 143.14.184.0/24 maxlen: 24 148.135.154.0/24 maxlen: 24 150.241.145.0/24 maxlen: 24 155.117.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:be:b0:79:1b:25:72:f4:7c:0e:c0:36:05:d7:d8:4a:06:44:44:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 16 08:15:07 2026 GMT Not After : Jan 15 08:20:07 2027 GMT Subject: CN=FDA5589379F2FF753DA3AF4FE6B66787883BCF7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:b1:1a:a8:5e:5d:8d:9c:db:62:ce:24:63: 9b:ed:66:8b:12:dd:90:3f:3c:4a:7f:47:d4:1f:09: e2:5e:5e:dc:df:e6:17:f8:6a:cf:ad:b4:f8:50:67: 2e:97:99:56:43:ec:f4:b1:5c:64:bd:fd:42:64:f3: a5:1b:d6:81:f6:06:11:1e:5c:fe:51:00:8c:9f:ed: 67:72:8a:2a:ad:6c:70:d7:d8:63:48:0b:67:ac:d3: ff:90:70:5f:16:0b:dc:56:e6:3d:65:30:cc:a1:f3: 7c:a2:28:6e:14:1b:48:14:4e:ec:97:0d:a6:bf:b9: eb:9f:aa:84:d1:18:36:a4:33:b4:cc:5c:6b:92:9e: 96:5a:9d:e9:4e:3f:ad:01:05:cb:b0:1e:d0:cc:3d: b4:8a:4d:ac:8d:87:b0:f6:20:ed:33:17:6c:b0:f9: 9e:9e:44:41:50:77:b6:e9:b8:08:57:f1:37:a0:81: b3:3a:f4:08:de:a0:87:80:3f:53:2b:e7:4a:35:71: ed:d2:e2:b0:c9:21:dc:f1:d4:54:19:13:f6:d4:d6: 53:8c:4f:73:9f:db:0c:c5:da:bc:09:66:e3:e7:09: 6f:53:c5:76:b2:0c:32:f0:7c:77:d4:03:ea:e6:93: 39:8c:da:10:5b:86:3a:53:3a:64:ef:5d:18:e3:9e: b8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:58:93:79:F2:FF:75:3D:A3:AF:4F:E6:B6:67:87:88:3B:CF:7D X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.184.0/24 148.135.154.0/24 150.241.145.0/24 155.117.231.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:0a:a3:33:00:cf:8f:a7:25:69:be:f4:94:da:c5:3b:c5:6f: 22:6f:44:a1:79:2a:e0:80:48:2e:b4:af:ed:90:12:f1:58:61: d0:ee:1d:8a:54:97:aa:41:4f:45:d7:f6:58:61:be:6a:6a:2b: 34:e4:b2:9f:7b:53:12:50:e1:f6:cb:d4:d1:20:24:84:c1:4f: cd:fb:63:12:e2:d9:84:0c:03:4b:b0:8e:03:fa:b1:9c:99:bf: 9b:37:0a:7f:e2:7e:b3:b7:8a:fa:6b:8a:12:cb:e4:0b:9f:da: a3:dc:1c:09:fc:8e:81:d9:7e:dc:dc:8b:8b:1e:3b:bf:c8:15: 52:fb:5f:c0:23:1a:41:22:9b:0b:2f:39:58:68:78:91:df:76: 6c:09:ca:e0:ea:50:2b:19:ef:07:a1:65:03:6e:c8:09:4f:ca: de:f2:0e:21:03:f2:86:76:9f:4d:d8:b6:18:05:36:46:5c:a6: c3:4f:bc:32:4a:5c:80:24:2d:b8:fc:fb:26:32:db:3b:48:f4: e2:f0:6c:5b:f1:95:fd:0c:4a:24:7c:37:5c:d0:13:2c:db:fd: 0d:24:41:a5:a9:03:ae:1e:61:82:40:42:68:1e:60:96:a9:7b: a1:72:96:cc:96:5b:c7:62:07:4e:30:c9:6a:28:20:97:c8:13: 22:09:62:98 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUbr6weRslcvR8DsA2BdfYSgZERAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTYwODE1MDdaFw0yNzAxMTUwODIwMDdaMDMxMTAvBgNV BAMTKEZEQTU1ODkzNzlGMkZGNzUzREEzQUY0RkU2QjY2Nzg3ODgzQkNGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T7EaqF5djZzbYs4kY5vtZosS 3ZA/PEp/R9QfCeJeXtzf5hf4as+ttPhQZy6XmVZD7PSxXGS9/UJk86Ub1oH2BhEe XP5RAIyf7WdyiiqtbHDX2GNIC2es0/+QcF8WC9xW5j1lMMyh83yiKG4UG0gUTuyX Daa/ueufqoTRGDakM7TMXGuSnpZanelOP60BBcuwHtDMPbSKTayNh7D2IO0zF2yw +Z6eREFQd7bpuAhX8TeggbM69AjeoIeAP1Mr50o1ce3S4rDJIdzx1FQZE/bU1lOM T3Of2wzF2rwJZuPnCW9TxXayDDLwfHfUA+rmkzmM2hBbhjpTOmTvXRjjnrjFAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQU/aVYk3ny/3U9o69P5rZnh4g7z30wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0MjA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjw64 AwQAlIeaAwQAlvGRAwQAm3XnMA0GCSqGSIb3DQEBCwUAA4IBAQCeCqMzAM+PpyVp vvSU2sU7xW8ib0SheSrggEgutK/tkBLxWGHQ7h2KVJeqQU9F1/ZYYb5qais05LKf e1MSUOH2y9TRICSEwU/N+2MS4tmEDANLsI4D+rGcmb+bNwp/4n6zt4r6a4oSy+QL n9qj3BwJ/I6B2X7c3IuLHju/yBVS+1/AIxpBIpsLLzlYaHiR33ZsCcrg6lArGe8H oWUDbsgJT8re8g4hA/KGdp9N2LYYBTZGXKbDT7wySlyAJC24/PsmMts7SPTi8Gxb 8ZX9DEokfDdc0BMs2/0NJEGlqQOuHmGCQEJoHmCWqXuhcpbMllvHYgdOMMlqKCCX yBMiCWKY -----END CERTIFICATE-----Generated at Mon Jan 19 08:20:20 2026 by rpki-client