This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: QQrQzSCf1RokpR1jZpI0uXRdVOPLg7PuMKRznUH/3LY= Subject key identifier: C0:FA:F3:3F:5B:81:FC:61:A4:7F:D0:58:FA:42:B1:26:35:96:FA:0B Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 6391A5A68727B026AF6E6B23FC0EC0D153B9F27A Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214025.roa Signing time: Mon 24 Nov 2025 09:30:22 +0000 ROA not before: Mon 24 Nov 2025 09:25:22 +0000 ROA not after: Mon 23 Nov 2026 09:30:22 +0000 asID: 214025 IP address blocks: 82.139.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 14:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:91:a5:a6:87:27:b0:26:af:6e:6b:23:fc:0e:c0:d1:53:b9:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 24 09:25:22 2025 GMT Not After : Nov 23 09:30:22 2026 GMT Subject: CN=C0FAF33F5B81FC61A47FD058FA42B1263596FA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:a4:8b:d7:0b:54:60:70:10:07:d4:0a:ea: c1:b2:ce:7c:64:20:47:0d:2f:75:88:7a:67:84:90: c1:fd:2f:31:39:82:54:78:78:13:11:9e:5b:44:8c: 3f:9c:83:6f:9e:2e:97:37:70:f4:8b:a4:0e:31:a3: 9b:ba:06:2c:f7:46:ce:b8:39:ef:ec:70:62:0a:41: b4:68:80:f6:60:af:91:92:95:6e:64:6f:ca:22:ac: cb:cc:f9:6a:8b:17:24:4d:b9:cb:ed:1a:9f:76:d1: 3b:e5:45:e7:19:2b:78:7c:e7:5d:7e:08:89:b1:8d: 2c:aa:82:76:cf:4a:5b:00:ba:e1:73:67:17:85:46: 8c:9e:31:1e:38:50:cd:91:29:e0:0e:79:e7:f8:a0: f1:37:2c:92:5a:20:a0:b5:f9:4e:78:97:44:0a:2a: 77:33:d9:a7:f3:35:83:f9:b5:bc:89:c2:45:b2:15: 77:70:b8:05:5a:c8:ff:f1:21:ed:7f:ea:8e:1e:40: d4:0b:5f:90:bb:b9:6a:97:02:0e:94:a9:c7:37:26: dd:e3:fa:4f:c8:1a:e5:df:4d:13:1b:e0:1d:c4:d5: 6b:4f:27:14:7c:06:67:1a:8e:b9:cc:8b:98:2a:dd: e6:eb:81:98:59:24:50:8e:8b:f6:56:bf:ec:ed:d6: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:F3:3F:5B:81:FC:61:A4:7F:D0:58:FA:42:B1:26:35:96:FA:0B X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.247.0/24 Signature Algorithm: sha256WithRSAEncryption 01:98:a0:1d:21:25:86:b1:8f:33:32:18:79:58:21:43:c2:a7: f7:fa:6b:63:67:94:1e:d1:67:00:56:f3:a9:e8:39:b1:09:6e: f9:e6:f7:08:f7:c7:41:50:63:54:21:39:47:a6:ea:b9:38:82: 5e:f3:2c:20:6f:09:db:64:40:e1:a3:44:11:3c:0b:78:fe:2b: a6:cf:b9:9c:37:40:ae:26:44:12:ce:c3:a7:da:24:5e:0a:1a: 5e:d2:5f:88:99:57:21:a5:ec:57:fe:93:34:c2:1b:eb:a5:f8: 53:af:f9:4b:10:6b:db:e0:b2:7d:b9:ff:0a:6d:a5:53:94:4d: b8:93:12:17:d3:0d:09:58:5d:29:ca:02:27:5a:1a:57:57:3c: 31:ee:ef:6f:00:58:96:5a:41:45:98:13:bc:c8:ce:1c:9d:2e: 08:01:8a:f5:22:46:82:b7:62:13:53:38:05:21:87:7d:86:15: 64:3f:ef:81:a1:da:7d:b2:6d:35:e5:8c:0c:9a:aa:2f:c5:c0: 0b:28:f2:3e:ea:6f:97:d8:e6:ff:09:4d:37:b0:18:d9:d0:4d: cd:ef:b7:9f:8d:95:b9:d6:d2:d4:a2:96:99:f5:c4:ba:a6:08: bc:d0:e7:0b:08:ec:89:f3:92:e1:bb:cb:09:4e:db:67:5f:f7: ad:b9:43:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUY5GlpocnsCavbmsj/A7A0VO58nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMjQwOTI1MjJaFw0yNjExMjMwOTMwMjJaMDMxMTAvBgNV BAMTKEMwRkFGMzNGNUI4MUZDNjFBNDdGRDA1OEZBNDJCMTI2MzU5NkZBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQnqSL1wtUYHAQB9QK6sGyznxk IEcNL3WIemeEkMH9LzE5glR4eBMRnltEjD+cg2+eLpc3cPSLpA4xo5u6Biz3Rs64 Oe/scGIKQbRogPZgr5GSlW5kb8oirMvM+WqLFyRNucvtGp920TvlRecZK3h8511+ CImxjSyqgnbPSlsAuuFzZxeFRoyeMR44UM2RKeAOeef4oPE3LJJaIKC1+U54l0QK Kncz2afzNYP5tbyJwkWyFXdwuAVayP/xIe1/6o4eQNQLX5C7uWqXAg6Uqcc3Jt3j +k/IGuXfTRMb4B3E1WtPJxR8BmcajrnMi5gq3ebrgZhZJFCOi/ZWv+zt1hlBAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUwPrzP1uB/GGkf9BY+kKxJjWW+gswHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUov3 MA0GCSqGSIb3DQEBCwUAA4IBAQABmKAdISWGsY8zMhh5WCFDwqf3+mtjZ5Qe0WcA VvOp6DmxCW755vcI98dBUGNUITlHpuq5OIJe8ywgbwnbZEDho0QRPAt4/iumz7mc N0CuJkQSzsOn2iReChpe0l+ImVchpexX/pM0whvrpfhTr/lLEGvb4LJ9uf8KbaVT lE24kxIX0w0JWF0pygInWhpXVzwx7u9vAFiWWkFFmBO8yM4cnS4IAYr1IkaCt2IT UzgFIYd9hhVkP++Bodp9sm015YwMmqovxcALKPI+6m+X2Ob/CU03sBjZ0E3N77ef jZW51tLUopaZ9cS6pgi80OcLCOyJ85Lhu8sJTttnX/etuUMQ -----END CERTIFICATE-----Generated at Thu Dec 4 21:26:34 2025 by rpki-client