This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa File: AS214677.roa (raw, json) Hash identifier: rmMsav0CTh6u7dkn6XdZ4lEc1FJ/2Bpcfcfv8yxegro= Subject key identifier: 87:B7:F9:71:2F:06:C9:99:48:8B:26:4F:0F:9F:4D:D4:CC:8D:F8:64 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 3EE45EA837AD151BF5C6558B2520B72888579E09 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa Signing time: Wed 03 Dec 2025 09:10:23 +0000 ROA not before: Wed 03 Dec 2025 09:05:23 +0000 ROA not after: Wed 02 Dec 2026 09:10:23 +0000 asID: 214677 IP address blocks: 148.135.207.0/24 maxlen: 24 162.141.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e4:5e:a8:37:ad:15:1b:f5:c6:55:8b:25:20:b7:28:88:57:9e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 3 09:05:23 2025 GMT Not After : Dec 2 09:10:23 2026 GMT Subject: CN=87B7F9712F06C999488B264F0F9F4DD4CC8DF864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:e4:58:1b:10:cd:41:ac:5e:1c:20:d9:31: 54:ed:4e:0e:5a:b1:f7:4d:a2:0c:83:52:e8:4e:8e: c8:d8:6e:4f:14:04:03:0b:13:84:cb:f9:84:d8:e4: e0:34:74:31:8e:b6:c1:7c:ff:b8:c1:7a:ae:87:6c: 10:c2:3b:e4:0e:6f:d9:fb:77:3d:29:03:07:e3:b0: 15:1c:51:da:a4:a5:06:74:d6:b0:b7:01:98:f0:15: 16:f2:93:f8:1a:88:e6:a7:c7:57:46:9f:84:b7:f1: 71:12:45:0e:71:7f:7b:66:ef:90:5e:c1:62:00:63: d3:f3:6b:25:fd:c2:69:0a:33:0a:d7:dd:1f:0c:9d: c1:fa:bf:74:81:0c:19:4c:42:cf:46:72:77:7e:ec: da:84:37:a6:29:70:63:bb:f4:09:ba:1b:63:77:d4: c9:27:58:29:55:8a:7c:a2:06:ee:bb:b2:b6:98:98: 24:41:c4:e5:bc:53:b8:ab:71:32:8a:05:c4:7a:77: e3:a2:63:bd:b0:21:05:71:ce:aa:77:e6:71:08:8f: 93:48:90:38:b3:32:e0:84:ed:8f:3d:0f:41:16:b3: 78:44:0c:2d:1f:90:68:ad:67:48:0e:73:4f:f1:6f: 47:25:a3:3d:59:bd:7a:f4:61:c4:f4:3e:45:f6:ef: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B7:F9:71:2F:06:C9:99:48:8B:26:4F:0F:9F:4D:D4:CC:8D:F8:64 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.135.207.0/24 162.141.92.0/24 Signature Algorithm: sha256WithRSAEncryption 00:14:c8:77:fe:70:85:2c:50:6f:6d:7d:87:c0:36:8f:78:14: df:1d:81:38:db:f5:bf:49:21:af:c4:45:f5:51:3f:8e:a3:94: 18:73:41:b3:47:01:9c:97:0f:b0:41:ed:13:ac:59:62:2b:a4: b9:39:b2:a4:f1:70:6e:7c:35:38:70:db:74:bb:5a:db:31:51: 92:b7:a2:f9:1e:85:a2:05:36:49:e1:3c:ba:5b:6d:9a:4a:be: f2:88:7a:b0:b2:81:d4:52:0f:64:89:92:bd:63:7b:fb:2d:c2: 1c:ce:6f:87:31:1a:25:13:a8:e9:79:a4:1f:dd:59:4f:65:8d: cb:82:fa:d0:ce:cb:05:23:47:5c:56:61:b1:c8:e7:c5:94:d2: 34:f6:73:5b:24:04:f3:ba:f9:ca:81:f2:a7:22:cf:5a:a7:74: 39:7c:77:33:a2:d9:36:f9:36:8e:aa:5d:51:7a:80:90:9c:80: d1:c6:69:f1:d3:82:39:20:43:68:ef:98:01:49:27:ad:a8:5d: eb:d3:f9:13:18:40:2b:34:48:8d:c8:47:96:2c:39:bb:ca:26: 13:71:e7:b7:24:f8:15:6d:d3:a0:39:0c:77:6f:27:90:65:7a: af:9b:e8:a3:b4:83:08:73:d5:82:5a:77:66:57:07:bc:a5:64: 8d:f8:6b:da -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUPuReqDetFRv1xlWLJSC3KIhXngkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDMwOTA1MjNaFw0yNjEyMDIwOTEwMjNaMDMxMTAvBgNV BAMTKDg3QjdGOTcxMkYwNkM5OTk0ODhCMjY0RjBGOUY0REQ0Q0M4REY4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizORYGxDNQaxeHCDZMVTtTg5a sfdNogyDUuhOjsjYbk8UBAMLE4TL+YTY5OA0dDGOtsF8/7jBeq6HbBDCO+QOb9n7 dz0pAwfjsBUcUdqkpQZ01rC3AZjwFRbyk/gaiOanx1dGn4S38XESRQ5xf3tm75Be wWIAY9PzayX9wmkKMwrX3R8MncH6v3SBDBlMQs9Gcnd+7NqEN6YpcGO79Am6G2N3 1MknWClVinyiBu67sraYmCRBxOW8U7ircTKKBcR6d+OiY72wIQVxzqp35nEIj5NI kDizMuCE7Y89D0EWs3hEDC0fkGitZ0gOc0/xb0cloz1ZvXr0YcT0PkX272cjAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUh7f5cS8GyZlIiyZPD59N1MyN+GQwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0Njc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlIfP AwQAoo1cMA0GCSqGSIb3DQEBCwUAA4IBAQAAFMh3/nCFLFBvbX2HwDaPeBTfHYE4 2/W/SSGvxEX1UT+Oo5QYc0GzRwGclw+wQe0TrFliK6S5ObKk8XBufDU4cNt0u1rb MVGSt6L5HoWiBTZJ4Ty6W22aSr7yiHqwsoHUUg9kiZK9Y3v7LcIczm+HMRolE6jp eaQf3VlPZY3LgvrQzssFI0dcVmGxyOfFlNI09nNbJATzuvnKgfKnIs9ap3Q5fHcz otk2+TaOql1ReoCQnIDRxmnx04I5IENo75gBSSetqF3r0/kTGEArNEiNyEeWLDm7 yiYTcee3JPgVbdOgOQx3byeQZXqvm+ijtIMIc9WCWndmVwe8pWSN+Gva -----END CERTIFICATE-----Generated at Fri Dec 5 05:08:16 2025 by rpki-client