This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: +1wrmzLm3mtExyohSNV3fzho7dngTsXuruFc3gUkan0= Subject key identifier: F5:57:97:17:E0:5C:E2:F9:68:9F:1D:B9:B4:D6:3E:34:60:D1:80:97 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 7B82F3751152D677B4CDD1B7D271D1C80C4943E6 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa Signing time: Thu 20 Nov 2025 00:04:00 +0000 ROA not before: Wed 19 Nov 2025 23:59:00 +0000 ROA not after: Thu 19 Nov 2026 00:04:00 +0000 asID: 2914 IP address blocks: 96.62.32.0/24 maxlen: 24 96.62.33.0/24 maxlen: 24 96.62.34.0/24 maxlen: 24 96.62.35.0/24 maxlen: 24 96.62.36.0/24 maxlen: 24 96.62.38.0/24 maxlen: 24 96.62.39.0/24 maxlen: 24 96.62.40.0/24 maxlen: 24 96.62.41.0/24 maxlen: 24 96.62.42.0/24 maxlen: 24 96.62.43.0/24 maxlen: 24 96.62.44.0/24 maxlen: 24 96.62.46.0/24 maxlen: 24 96.62.64.0/24 maxlen: 24 96.62.65.0/24 maxlen: 24 96.62.66.0/24 maxlen: 24 96.62.67.0/24 maxlen: 24 96.62.68.0/24 maxlen: 24 96.62.70.0/24 maxlen: 24 96.62.102.0/24 maxlen: 24 96.62.104.0/24 maxlen: 24 96.62.106.0/24 maxlen: 24 96.62.107.0/24 maxlen: 24 96.62.108.0/24 maxlen: 24 96.62.109.0/24 maxlen: 24 96.62.110.0/24 maxlen: 24 96.62.112.0/24 maxlen: 24 96.62.113.0/24 maxlen: 24 96.62.116.0/24 maxlen: 24 96.62.117.0/24 maxlen: 24 96.62.118.0/24 maxlen: 24 96.62.119.0/24 maxlen: 24 96.62.120.0/24 maxlen: 24 96.62.121.0/24 maxlen: 24 96.62.122.0/24 maxlen: 24 96.62.123.0/24 maxlen: 24 96.62.124.0/24 maxlen: 24 96.62.125.0/24 maxlen: 24 96.62.126.0/24 maxlen: 24 96.62.132.0/24 maxlen: 24 96.62.133.0/24 maxlen: 24 96.62.134.0/24 maxlen: 24 96.62.136.0/24 maxlen: 24 96.62.137.0/24 maxlen: 24 96.62.138.0/24 maxlen: 24 96.62.139.0/24 maxlen: 24 96.62.141.0/24 maxlen: 24 96.62.142.0/24 maxlen: 24 96.62.143.0/24 maxlen: 24 96.62.144.0/23 maxlen: 24 96.62.146.0/24 maxlen: 24 96.62.147.0/24 maxlen: 24 96.62.156.0/22 maxlen: 24 96.62.160.0/24 maxlen: 24 96.62.161.0/24 maxlen: 24 96.62.162.0/24 maxlen: 24 96.62.163.0/24 maxlen: 24 96.62.164.0/24 maxlen: 24 96.62.165.0/24 maxlen: 24 96.62.166.0/24 maxlen: 24 96.62.167.0/24 maxlen: 24 96.62.168.0/24 maxlen: 24 96.62.169.0/24 maxlen: 24 96.62.170.0/24 maxlen: 24 96.62.171.0/24 maxlen: 24 96.62.172.0/24 maxlen: 24 96.62.173.0/24 maxlen: 24 96.62.174.0/24 maxlen: 24 96.62.175.0/24 maxlen: 24 96.62.177.0/24 maxlen: 24 96.62.178.0/24 maxlen: 24 96.62.179.0/24 maxlen: 24 96.62.188.0/24 maxlen: 24 96.62.189.0/24 maxlen: 24 96.62.196.0/24 maxlen: 24 96.62.198.0/24 maxlen: 24 96.62.199.0/24 maxlen: 24 96.62.212.0/24 maxlen: 24 96.62.213.0/24 maxlen: 24 96.62.215.0/24 maxlen: 24 96.62.225.0/24 maxlen: 24 96.62.226.0/24 maxlen: 24 96.62.230.0/24 maxlen: 24 96.62.236.0/24 maxlen: 24 96.62.237.0/24 maxlen: 24 96.62.238.0/24 maxlen: 24 96.62.239.0/24 maxlen: 24 96.62.240.0/24 maxlen: 24 96.62.241.0/24 maxlen: 24 96.62.245.0/24 maxlen: 24 96.62.246.0/24 maxlen: 24 96.62.252.0/24 maxlen: 24 143.14.60.0/24 maxlen: 24 143.14.61.0/24 maxlen: 24 143.14.72.0/24 maxlen: 24 143.14.84.0/24 maxlen: 24 143.14.85.0/24 maxlen: 24 143.14.108.0/24 maxlen: 24 143.14.109.0/24 maxlen: 24 143.14.154.0/24 maxlen: 24 155.117.101.0/24 maxlen: 24 155.117.104.0/24 maxlen: 24 155.117.160.0/24 maxlen: 24 162.141.16.0/24 maxlen: 24 162.141.18.0/24 maxlen: 24 162.141.20.0/24 maxlen: 24 162.141.45.0/24 maxlen: 24 162.141.53.0/24 maxlen: 24 162.141.81.0/24 maxlen: 24 162.141.89.0/24 maxlen: 24 162.141.99.0/24 maxlen: 24 162.141.102.0/24 maxlen: 24 162.141.132.0/24 maxlen: 24 162.141.143.0/24 maxlen: 24 162.141.154.0/24 maxlen: 24 162.141.162.0/24 maxlen: 24 162.141.176.0/24 maxlen: 24 162.141.177.0/24 maxlen: 24 162.141.182.0/24 maxlen: 24 167.148.7.0/24 maxlen: 24 167.148.9.0/24 maxlen: 24 167.148.11.0/24 maxlen: 24 167.148.13.0/24 maxlen: 24 167.148.31.0/24 maxlen: 24 167.148.32.0/24 maxlen: 24 167.148.34.0/24 maxlen: 24 167.148.47.0/24 maxlen: 24 167.148.71.0/24 maxlen: 24 167.148.72.0/24 maxlen: 24 167.148.73.0/24 maxlen: 24 167.148.74.0/24 maxlen: 24 167.148.101.0/24 maxlen: 24 167.148.103.0/24 maxlen: 24 167.148.107.0/24 maxlen: 24 167.148.113.0/24 maxlen: 24 167.148.114.0/24 maxlen: 24 167.148.124.0/24 maxlen: 24 167.148.129.0/24 maxlen: 24 167.148.132.0/24 maxlen: 24 167.148.133.0/24 maxlen: 24 167.148.137.0/24 maxlen: 24 167.148.142.0/24 maxlen: 24 167.148.143.0/24 maxlen: 24 167.148.146.0/24 maxlen: 24 167.148.151.0/24 maxlen: 24 167.148.155.0/24 maxlen: 24 167.148.160.0/24 maxlen: 24 167.148.174.0/24 maxlen: 24 167.148.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:82:f3:75:11:52:d6:77:b4:cd:d1:b7:d2:71:d1:c8:0c:49:43:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 19 23:59:00 2025 GMT Not After : Nov 19 00:04:00 2026 GMT Subject: CN=F5579717E05CE2F9689F1DB9B4D63E3460D18097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:bd:d5:46:24:96:9e:86:5b:06:2b:02:9d: 6f:da:4e:42:1c:5f:02:ca:73:c3:e0:ce:92:1b:74: 13:90:52:00:39:10:9c:69:1d:03:ae:1d:e1:c6:9a: 1f:ee:13:a8:03:0b:4e:f7:88:5f:b6:da:4b:04:c2: c5:36:31:11:67:c6:fb:85:90:f7:1e:4e:4f:d6:85: f2:ed:42:9e:a5:0b:e6:d8:41:c5:53:88:55:4a:10: a8:0d:01:92:ae:03:53:5c:23:9f:23:a6:16:a1:de: 82:0d:8e:05:b9:e4:ad:ad:03:6b:22:2e:86:a3:e1: 79:c2:eb:4e:e0:6a:7e:81:ee:62:fd:a8:33:94:23: 25:36:96:7a:75:54:57:f0:2d:15:e1:f3:71:9a:29: e4:1b:13:31:4f:a7:a6:85:6c:cd:18:5b:fe:2f:da: f4:52:f3:e3:a0:1a:b5:49:28:37:be:af:0c:f9:54: 6a:5f:b9:3b:c6:49:00:ef:c9:ba:f7:00:2e:eb:99: 51:5d:27:65:54:d2:b6:f0:9e:af:5d:67:2f:9e:65: 65:d5:cf:fb:e7:20:c0:93:9a:35:49:f9:c0:bf:08: fc:f0:51:89:32:16:ca:31:cf:af:10:51:94:5d:2e: 45:00:43:d4:06:ef:fb:67:97:00:e5:ad:f4:95:92: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:57:97:17:E0:5C:E2:F9:68:9F:1D:B9:B4:D6:3E:34:60:D1:80:97 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.32.0-96.62.36.255 96.62.38.0-96.62.44.255 96.62.46.0/24 96.62.64.0-96.62.68.255 96.62.70.0/24 96.62.102.0/24 96.62.104.0/24 96.62.106.0-96.62.110.255 96.62.112.0/23 96.62.116.0-96.62.126.255 96.62.132.0-96.62.134.255 96.62.136.0/22 96.62.141.0-96.62.147.255 96.62.156.0-96.62.175.255 96.62.177.0-96.62.179.255 96.62.188.0/23 96.62.196.0/24 96.62.198.0/23 96.62.212.0/23 96.62.215.0/24 96.62.225.0-96.62.226.255 96.62.230.0/24 96.62.236.0-96.62.241.255 96.62.245.0-96.62.246.255 96.62.252.0/24 143.14.60.0/23 143.14.72.0/24 143.14.84.0/23 143.14.108.0/23 143.14.154.0/24 155.117.101.0/24 155.117.104.0/24 155.117.160.0/24 162.141.16.0/24 162.141.18.0/24 162.141.20.0/24 162.141.45.0/24 162.141.53.0/24 162.141.81.0/24 162.141.89.0/24 162.141.99.0/24 162.141.102.0/24 162.141.132.0/24 162.141.143.0/24 162.141.154.0/24 162.141.162.0/24 162.141.176.0/23 162.141.182.0/24 167.148.7.0/24 167.148.9.0/24 167.148.11.0/24 167.148.13.0/24 167.148.31.0-167.148.32.255 167.148.34.0/24 167.148.47.0/24 167.148.71.0-167.148.74.255 167.148.101.0/24 167.148.103.0/24 167.148.107.0/24 167.148.113.0-167.148.114.255 167.148.124.0/24 167.148.129.0/24 167.148.132.0/23 167.148.137.0/24 167.148.142.0/23 167.148.146.0/24 167.148.151.0/24 167.148.155.0/24 167.148.160.0/24 167.148.174.0/24 167.148.176.0/24 Signature Algorithm: sha256WithRSAEncryption 73:06:49:a8:42:38:d8:25:b8:d1:d6:e1:0a:01:be:2a:68:7b: 52:71:8a:fa:62:7b:08:30:7b:21:c5:06:03:d0:ac:0b:28:aa: 94:51:33:4c:03:6a:57:98:9e:43:9a:2c:78:ee:1b:00:43:75: e7:99:f5:6a:4a:7e:23:9a:b5:8e:08:cd:da:00:b2:57:5b:4d: 1f:85:47:86:57:05:49:6b:02:e5:14:f2:3d:8d:24:cd:a0:b3: 36:ae:ba:b0:ed:00:fc:a0:49:3a:f6:16:3a:a6:5c:fc:8b:e0: aa:24:56:2b:41:f3:87:4e:be:d5:c2:b4:be:86:67:ca:40:55: 8f:b4:97:da:27:52:9c:0d:1c:a4:88:88:2c:77:71:59:14:93: e2:aa:96:f7:72:4f:d6:e6:a2:c8:3e:f2:85:90:b4:53:e3:6c: c6:8b:ac:ba:8f:93:a1:b1:5c:20:9b:4d:57:cb:76:32:3c:53: e6:c0:d5:52:f6:0d:6b:a4:78:e7:22:64:ee:a4:26:d6:d8:42: 15:7d:22:e7:76:33:77:32:0e:38:4e:76:40:92:2e:56:05:2d: 54:c3:ee:c6:0c:10:08:eb:0f:88:e6:b5:c2:32:e1:a4:05:b0: 9b:70:6f:23:51:d8:ab:f9:c4:77:86:b2:c8:78:a0:be:a7:17: f2:d7:dd:4b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUe4LzdRFS1ne0zdG30nHRyAxJQ+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTkyMzU5MDBaFw0yNjExMTkwMDA0MDBaMDMxMTAvBgNV BAMTKEY1NTc5NzE3RTA1Q0UyRjk2ODlGMURCOUI0RDYzRTM0NjBEMTgwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9b3VRiSWnoZbBisCnW/aTkIc XwLKc8PgzpIbdBOQUgA5EJxpHQOuHeHGmh/uE6gDC073iF+22ksEwsU2MRFnxvuF kPceTk/WhfLtQp6lC+bYQcVTiFVKEKgNAZKuA1NcI58jphah3oINjgW55K2tA2si Loaj4XnC607gan6B7mL9qDOUIyU2lnp1VFfwLRXh83GaKeQbEzFPp6aFbM0YW/4v 2vRS8+OgGrVJKDe+rwz5VGpfuTvGSQDvybr3AC7rmVFdJ2VU0rbwnq9dZy+eZWXV z/vnIMCTmjVJ+cC/CPzwUYkyFsoxz68QUZRdLkUAQ9QG7/tnlwDlrfSVkunhAgMB AAGjggQuMIIEKjAdBgNVHQ4EFgQU9VeXF+Bc4vlonx25tNY+NGDRgJcwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAkMGCCsGAQUFBwEHAQH/BIICMjCCAi4wggIqBAIAATCC AiIwDAMEBWA+IAMEAGA+JDAMAwQBYD4mAwQAYD4sAwQAYD4uMAwDBAZgPkADBABg PkQDBABgPkYDBABgPmYDBABgPmgwDAMEAWA+agMEAGA+bgMEAWA+cDAMAwQCYD50 AwQAYD5+MAwDBAJgPoQDBABgPoYDBAJgPogwDAMEAGA+jQMEAmA+kDAMAwQCYD6c AwQEYD6gMAwDBABgPrEDBAJgPrADBAFgPrwDBABgPsQDBAFgPsYDBAFgPtQDBABg PtcwDAMEAGA+4QMEAGA+4gMEAGA+5jAMAwQCYD7sAwQBYD7wMAwDBABgPvUDBABg PvYDBABgPvwDBAGPDjwDBACPDkgDBAGPDlQDBAGPDmwDBACPDpoDBACbdWUDBACb dWgDBACbdaADBACijRADBACijRIDBACijRQDBACijS0DBACijTUDBACijVEDBACi jVkDBACijWMDBACijWYDBACijYQDBACijY8DBACijZoDBACijaIDBAGijbADBACi jbYDBACnlAcDBACnlAkDBACnlAsDBACnlA0wDAMEAKeUHwMEAKeUIAMEAKeUIgME AKeULzAMAwQAp5RHAwQAp5RKAwQAp5RlAwQAp5RnAwQAp5RrMAwDBACnlHEDBACn lHIDBACnlHwDBACnlIEDBAGnlIQDBACnlIkDBAGnlI4DBACnlJIDBACnlJcDBACn lJsDBACnlKADBACnlK4DBACnlLAwDQYJKoZIhvcNAQELBQADggEBAHMGSahCONgl uNHW4QoBvipoe1JxivpiewgweyHFBgPQrAsoqpRRM0wDaleYnkOaLHjuGwBDdeeZ 9WpKfiOatY4IzdoAsldbTR+FR4ZXBUlrAuUU8j2NJM2gszauurDtAPygSTr2Fjqm XPyL4KokVitB84dOvtXCtL6GZ8pAVY+0l9onUpwNHKSIiCx3cVkUk+KqlvdyT9bm osg+8oWQtFPjbMaLrLqPk6GxXCCbTVfLdjI8U+bA1VL2DWukeOciZO6kJtbYQhV9 Iud2M3cyDjhOdkCSLlYFLVTD7sYMEAjrD4jmtcIy4aQFsJtwbyNR2Kv5xHeGssh4 oL6nF/LX3Us= -----END CERTIFICATE-----Generated at Sat Nov 22 20:48:02 2025 by rpki-client