This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214970.roa File: AS214970.roa (raw, json) Hash identifier: tD4mepPSKUapnLU1HRp9JGryKzUlcqFYKfEfcZOC2kw= Subject key identifier: 1F:18:B7:D9:48:5B:02:74:7D:E5:70:34:BC:85:3E:18:D7:6D:3F:42 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 77801789763D292E95B75DFB3382DE27B4BCC7E2 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214970.roa Signing time: Sun 04 Jan 2026 10:55:33 +0000 ROA not before: Sun 04 Jan 2026 10:50:33 +0000 ROA not after: Sun 03 Jan 2027 10:55:33 +0000 asID: 214970 IP address blocks: 45.95.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:80:17:89:76:3d:29:2e:95:b7:5d:fb:33:82:de:27:b4:bc:c7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 4 10:50:33 2026 GMT Not After : Jan 3 10:55:33 2027 GMT Subject: CN=1F18B7D9485B02747DE57034BC853E18D76D3F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:47:b4:8e:77:6f:ab:09:a5:17:ec:56:ca: e6:13:6b:a2:71:1a:eb:bf:49:90:50:8a:c6:ee:59: 72:b6:99:88:94:04:f5:d6:19:3a:ac:3d:74:46:9e: 00:91:46:36:27:12:47:ec:50:f6:45:ce:ee:5b:46: 01:03:fc:5a:dd:28:2f:5f:5b:a1:4d:0c:2d:6b:e5: 66:0b:12:34:86:dc:85:d1:73:b5:e7:07:38:68:ed: c8:bb:36:fc:33:45:97:ec:61:1c:ac:74:67:65:7a: 9b:59:5b:c6:e0:3c:3f:ca:c6:30:ea:e5:e6:db:44: ff:54:0e:aa:79:db:85:4d:52:a2:b4:1f:f2:c3:be: 4f:6b:0f:0b:66:ee:5e:1b:a1:9a:1c:90:6e:46:3f: ed:db:a5:68:a6:26:69:89:dd:49:01:bc:27:f6:00: f3:e8:82:58:9a:22:8d:0c:bf:6f:65:f9:95:fd:cd: 0b:de:e0:a0:4f:4a:24:18:ad:68:93:7c:ac:01:c1: 9a:49:47:1d:fe:41:d9:73:c3:b9:c0:74:2a:25:22: 75:1a:5d:61:fd:6b:16:82:93:31:95:06:be:12:82: 28:80:44:b7:44:e7:a3:8b:72:a8:56:a6:c9:fc:00: 4d:e4:b0:19:b8:6c:34:06:8b:7f:96:c1:45:fc:f1: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:B7:D9:48:5B:02:74:7D:E5:70:34:BC:85:3E:18:D7:6D:3F:42 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214970.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.38.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:4c:24:0a:48:8e:5e:1a:4c:08:f6:22:8a:7e:06:6d:47:35: f2:3d:66:37:d1:f0:ae:9c:cc:7d:5b:2d:49:46:fd:97:c4:57: 5d:7e:ac:df:5b:5a:35:17:60:a5:dc:f4:5f:2c:1f:7f:e1:1b: 1d:d2:d4:9f:fd:60:1b:66:4f:95:4b:01:af:1f:c4:d4:e8:d2: 40:ca:bf:39:61:43:03:97:d1:47:1b:39:57:33:81:b7:e1:d2: 0e:a0:84:81:7b:07:b2:0b:92:22:64:cd:18:d5:67:dc:8f:c7: 01:24:1f:37:30:29:9b:19:8b:d6:c9:f3:3f:14:70:ae:93:bf: 2d:33:ff:e4:70:b4:fb:d2:67:c2:d0:40:5c:bd:35:04:c6:c4: 1e:e9:34:5d:2b:d1:de:a8:ee:dc:2e:c5:b2:95:0d:f8:bc:c6: 25:63:f5:49:ff:80:1b:a8:88:94:c4:31:8b:cc:ac:bf:0b:ba: 2d:14:8e:63:db:ca:e5:2d:d2:9c:ef:70:5d:24:2f:6f:54:63: e6:93:f6:83:b3:db:71:ea:15:e2:db:98:6a:5d:88:e2:c4:e8: 59:96:85:bf:3c:c4:6e:18:1c:88:3b:c6:bd:9f:45:36:48:10: 45:d7:58:3f:5b:cb:b5:23:95:79:80:e0:c0:82:09:7b:05:e4: 43:e5:c7:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUd4AXiXY9KS6Vt137M4LeJ7S8x+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMDQxMDUwMzNaFw0yNzAxMDMxMDU1MzNaMDMxMTAvBgNV BAMTKDFGMThCN0Q5NDg1QjAyNzQ3REU1NzAzNEJDODUzRTE4RDc2RDNGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4ke0jndvqwmlF+xWyuYTa6Jx Guu/SZBQisbuWXK2mYiUBPXWGTqsPXRGngCRRjYnEkfsUPZFzu5bRgED/FrdKC9f W6FNDC1r5WYLEjSG3IXRc7XnBzho7ci7NvwzRZfsYRysdGdleptZW8bgPD/KxjDq 5ebbRP9UDqp524VNUqK0H/LDvk9rDwtm7l4boZockG5GP+3bpWimJmmJ3UkBvCf2 APPogliaIo0Mv29l+ZX9zQve4KBPSiQYrWiTfKwBwZpJRx3+Qdlzw7nAdColInUa XWH9axaCkzGVBr4SgiiARLdE56OLcqhWpsn8AE3ksBm4bDQGi3+WwUX88Z+NAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUHxi32UhbAnR95XA0vIU+GNdtP0IwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE0OTcwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV8m MA0GCSqGSIb3DQEBCwUAA4IBAQBLTCQKSI5eGkwI9iKKfgZtRzXyPWY30fCunMx9 Wy1JRv2XxFddfqzfW1o1F2Cl3PRfLB9/4Rsd0tSf/WAbZk+VSwGvH8TU6NJAyr85 YUMDl9FHGzlXM4G34dIOoISBeweyC5IiZM0Y1Wfcj8cBJB83MCmbGYvWyfM/FHCu k78tM//kcLT70mfC0EBcvTUExsQe6TRdK9HeqO7cLsWylQ34vMYlY/VJ/4AbqIiU xDGLzKy/C7otFI5j28rlLdKc73BdJC9vVGPmk/aDs9tx6hXi25hqXYjixOhZloW/ PMRuGByIO8a9n0U2SBBF11g/W8u1I5V5gODAggl7BeRD5cdI -----END CERTIFICATE-----Generated at Mon Jan 19 15:31:07 2026 by rpki-client