This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214000.roa File: AS214000.roa (raw, json) Hash identifier: tFfRKoVPnSpfvZMuyJNa+jHnNKckhfoAtGlDXbU7xRs= Subject key identifier: 2F:DE:21:26:CC:23:E9:C3:39:FD:36:7F:A2:5E:10:0B:B5:F7:9C:40 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 71BD13672CDCC8F2A62C74AEFE6C3805E418AD23 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214000.roa Signing time: Sat 03 Jan 2026 00:55:33 +0000 ROA not before: Sat 03 Jan 2026 00:50:33 +0000 ROA not after: Sat 02 Jan 2027 00:55:33 +0000 asID: 214000 IP address blocks: 179.61.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bd:13:67:2c:dc:c8:f2:a6:2c:74:ae:fe:6c:38:05:e4:18:ad:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 3 00:50:33 2026 GMT Not After : Jan 2 00:55:33 2027 GMT Subject: CN=2FDE2126CC23E9C339FD367FA25E100BB5F79C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:68:73:92:ff:ab:53:9b:0d:c2:1b:e8:c6: 10:bc:80:b3:e0:01:56:5d:0a:ac:d1:e0:dd:94:09: 49:dd:9f:91:20:f2:fa:d6:b7:94:7f:d3:cb:72:90: 37:e7:78:34:12:37:4f:f6:a9:0b:9e:cb:b2:93:9c: 96:7d:f8:f0:ae:6b:78:99:cf:33:25:45:c4:e3:c2: dc:84:df:60:6e:9f:d9:52:80:2b:e9:6c:f2:d4:de: 56:8f:be:51:b2:20:03:6f:68:ae:cc:f8:c0:bd:9f: 06:b3:12:a4:30:27:99:19:df:62:35:49:b5:cf:09: 71:ab:86:ad:4c:b0:4d:99:ca:0f:b6:e4:43:b5:61: 6e:32:fa:de:2e:6a:91:67:14:a0:61:cf:32:9a:3d: 3e:44:96:98:d3:3c:55:68:1e:b1:50:19:d7:1f:b1: cd:00:b6:68:47:78:c2:15:58:89:b9:af:a1:76:b9: 37:d9:41:54:00:93:da:78:67:cf:cd:76:d3:12:c4: db:71:29:18:8b:34:3b:ee:80:7f:17:0a:6f:d7:6a: 4f:31:91:c8:04:a2:a1:7c:71:49:bc:05:84:f9:d5: a3:0f:64:94:ee:d9:c5:49:a8:fe:a0:ee:f2:37:38: be:29:04:2e:7d:fd:c6:ea:3b:44:fa:ff:27:04:b8: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DE:21:26:CC:23:E9:C3:39:FD:36:7F:A2:5E:10:0B:B5:F7:9C:40 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.61.129.0/24 Signature Algorithm: sha256WithRSAEncryption 26:8c:f4:7d:77:36:1d:c1:c7:8b:91:51:56:7b:0b:60:c6:fa: 84:1d:a2:f5:f3:58:a7:c9:58:9b:d2:6a:76:46:91:cb:10:e6: d4:c6:7f:99:20:b2:00:01:db:a0:61:74:da:94:1c:2c:ca:73: 11:6b:de:66:f0:92:ff:b9:07:1e:0a:77:db:fb:f6:eb:4f:d2: e7:79:3e:71:e5:f6:6b:1d:9e:d3:94:dd:4f:c4:94:f1:72:8c: 2d:24:2f:9e:d4:6f:9f:90:30:e5:b3:d4:8f:f7:b8:3b:4b:ba: 93:e3:cb:3b:61:70:3c:fa:ca:7f:d3:4c:fd:15:b5:4a:09:02: 4f:91:7a:f1:51:5a:67:18:d3:f0:4e:87:83:dc:a1:89:f2:81: b1:05:be:c4:c5:ff:86:41:ff:12:49:1c:52:ea:06:49:42:c6: 6c:b3:fb:c7:26:14:76:f2:42:13:56:03:7c:f8:03:83:60:6c: 1e:ef:01:8c:55:15:85:30:64:68:90:3a:80:7e:02:1c:5f:21: a0:1c:fd:6b:2e:50:4f:25:b0:5c:12:8a:55:bd:ff:66:0e:99: c0:53:6f:ea:66:51:f3:27:f5:d2:13:c3:67:06:1d:52:4b:15: 9d:e0:ff:bb:dc:c6:50:fb:6c:96:5b:ee:90:4e:df:99:75:db: 37:3a:e4:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUcb0TZyzcyPKmLHSu/mw4BeQYrSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMDMwMDUwMzNaFw0yNzAxMDIwMDU1MzNaMDMxMTAvBgNV BAMTKDJGREUyMTI2Q0MyM0U5QzMzOUZEMzY3RkEyNUUxMDBCQjVGNzlDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvmhzkv+rU5sNwhvoxhC8gLPg AVZdCqzR4N2UCUndn5Eg8vrWt5R/08tykDfneDQSN0/2qQuey7KTnJZ9+PCua3iZ zzMlRcTjwtyE32Bun9lSgCvpbPLU3laPvlGyIANvaK7M+MC9nwazEqQwJ5kZ32I1 SbXPCXGrhq1MsE2Zyg+25EO1YW4y+t4uapFnFKBhzzKaPT5ElpjTPFVoHrFQGdcf sc0AtmhHeMIVWIm5r6F2uTfZQVQAk9p4Z8/NdtMSxNtxKRiLNDvugH8XCm/Xak8x kcgEoqF8cUm8BYT51aMPZJTu2cVJqP6g7vI3OL4pBC59/cbqO0T6/ycEuPedAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUL94hJswj6cM5/TZ/ol4QC7X3nEAwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE0MDAwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz2B MA0GCSqGSIb3DQEBCwUAA4IBAQAmjPR9dzYdwceLkVFWewtgxvqEHaL181inyVib 0mp2RpHLEObUxn+ZILIAAdugYXTalBwsynMRa95m8JL/uQceCnfb+/brT9LneT5x 5fZrHZ7TlN1PxJTxcowtJC+e1G+fkDDls9SP97g7S7qT48s7YXA8+sp/00z9FbVK CQJPkXrxUVpnGNPwToeD3KGJ8oGxBb7Exf+GQf8SSRxS6gZJQsZss/vHJhR28kIT VgN8+AODYGwe7wGMVRWFMGRokDqAfgIcXyGgHP1rLlBPJbBcEopVvf9mDpnAU2/q ZlHzJ/XSE8NnBh1SSxWd4P+73MZQ+2yWW+6QTt+Zdds3OuRN -----END CERTIFICATE-----Generated at Mon Jan 19 23:41:30 2026 by rpki-client