This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: PIJcMN4llQg5A7+mbddh/65sVy1XY9yv4FhLrNnbseI= Subject key identifier: A7:9F:0D:8F:F5:EB:15:3C:83:F9:6C:B5:7B:80:7F:91:C7:90:73:3C Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 4D81F4C3865074325B68DF0055ADEB70EEAB813C Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214025.roa Signing time: Thu 05 Feb 2026 09:03:32 +0000 ROA not before: Thu 05 Feb 2026 08:58:32 +0000 ROA not after: Thu 04 Feb 2027 09:03:32 +0000 asID: 214025 IP address blocks: 83.171.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:81:f4:c3:86:50:74:32:5b:68:df:00:55:ad:eb:70:ee:ab:81:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 5 08:58:32 2026 GMT Not After : Feb 4 09:03:32 2027 GMT Subject: CN=A79F0D8FF5EB153C83F96CB57B807F91C790733C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:28:c1:3f:ab:e7:9b:45:28:79:aa:61:3a: d9:b4:ad:b0:7a:f6:a5:40:82:ef:3c:22:31:58:88: 8c:49:6a:53:19:42:13:c4:34:f6:ab:de:ee:8b:3e: 42:24:07:81:dd:2b:ad:9d:10:93:74:21:94:fb:78: 56:2e:9a:76:32:c8:18:71:36:a7:25:d3:b4:ac:0a: 52:39:f4:28:55:18:be:a0:be:41:34:e5:3e:db:41: ad:e2:81:f5:ce:bd:c9:8c:04:a7:1d:7f:f4:8e:82: b4:b7:47:e5:7a:9b:1e:50:d6:3b:e4:98:be:05:99: 4d:ab:a5:02:9f:ca:87:8d:09:1a:5a:19:73:c3:93: 6a:65:fc:39:fe:5d:85:75:12:a3:3a:f5:af:b8:28: 83:93:52:d1:c6:36:f5:8f:b1:af:4a:d1:fb:1f:5e: 0e:d0:ce:7d:b3:d6:2d:f7:2c:56:3a:10:03:90:1d: 5c:0f:bb:10:30:62:01:e4:bd:b8:29:f5:70:27:4a: eb:b3:8a:2c:31:f9:b1:08:e4:81:5e:11:e2:9c:d7: 13:23:fb:b0:3d:5d:0d:2a:9a:be:96:ec:a6:ef:a4: d3:b9:29:da:4d:00:3d:ea:ca:5c:d0:19:53:40:ff: 85:5f:49:ad:e1:2b:be:aa:eb:04:48:d3:7c:c4:b1: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9F:0D:8F:F5:EB:15:3C:83:F9:6C:B5:7B:80:7F:91:C7:90:73:3C X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.244.0/24 Signature Algorithm: sha256WithRSAEncryption ca:b4:c8:a9:b2:cc:e5:0a:27:47:87:e5:30:b9:3e:d9:ed:4f: b6:c2:cc:4a:d5:76:c0:af:f6:2d:26:a7:92:c9:d2:4e:ec:b8: d5:38:38:e5:62:a9:9b:ec:27:5d:63:77:31:1f:d9:d9:75:58: 0a:be:0f:8d:b9:f2:a8:ab:08:9c:9f:02:62:2e:a3:ff:63:ce: 7f:86:6f:71:d5:7a:0c:8b:b5:18:71:89:12:9e:16:bc:35:6e: bc:01:61:a1:42:19:c9:3f:b7:24:f9:1a:5c:44:2b:71:70:c0: 82:93:ad:d2:85:9a:1f:5a:29:5f:5d:fa:2c:19:0f:42:3f:25: ae:59:77:32:6c:a5:c8:ab:bd:9f:d8:bf:f1:10:17:25:14:fc: d7:dc:22:9a:62:40:11:ea:06:c4:6f:08:f6:36:7f:d8:b2:39: 57:2c:40:33:5e:82:77:5b:de:da:65:2c:e7:a3:e2:62:d3:42: 0b:f6:f4:ad:e4:bc:c1:2a:a0:d7:f3:56:f4:76:29:4e:cb:74: 52:ca:d3:18:af:5f:ae:09:37:12:fa:62:6f:a4:0d:ed:5f:46: f1:c2:29:6d:64:fc:c3:4c:44:72:0b:25:31:87:96:c5:eb:09: 73:d5:43:6d:22:2b:63:7f:a1:28:74:f3:dc:3c:5f:91:b5:cd: 52:a3:90:37 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTYH0w4ZQdDJbaN8AVa3rcO6rgTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDUwODU4MzJaFw0yNzAyMDQwOTAzMzJaMDMxMTAvBgNV BAMTKEE3OUYwRDhGRjVFQjE1M0M4M0Y5NkNCNTdCODA3RjkxQzc5MDczM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkCjBP6vnm0UoeaphOtm0rbB6 9qVAgu88IjFYiIxJalMZQhPENPar3u6LPkIkB4HdK62dEJN0IZT7eFYumnYyyBhx Nqcl07SsClI59ChVGL6gvkE05T7bQa3igfXOvcmMBKcdf/SOgrS3R+V6mx5Q1jvk mL4FmU2rpQKfyoeNCRpaGXPDk2pl/Dn+XYV1EqM69a+4KIOTUtHGNvWPsa9K0fsf Xg7Qzn2z1i33LFY6EAOQHVwPuxAwYgHkvbgp9XAnSuuziiwx+bEI5IFeEeKc1xMj +7A9XQ0qmr6W7KbvpNO5KdpNAD3qylzQGVNA/4VfSa3hK76q6wRI03zEscMjAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUp58Nj/XrFTyD+Wy1e4B/kceQczwwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU6v0 MA0GCSqGSIb3DQEBCwUAA4IBAQDKtMipsszlCidHh+UwuT7Z7U+2wsxK1XbAr/Yt JqeSydJO7LjVODjlYqmb7CddY3cxH9nZdVgKvg+NufKoqwicnwJiLqP/Y85/hm9x 1XoMi7UYcYkSnha8NW68AWGhQhnJP7ck+RpcRCtxcMCCk63ShZofWilfXfosGQ9C PyWuWXcybKXIq72f2L/xEBclFPzX3CKaYkAR6gbEbwj2Nn/YsjlXLEAzXoJ3W97a ZSzno+Ji00IL9vSt5LzBKqDX81b0dilOy3RSytMYr1+uCTcS+mJvpA3tX0bxwilt ZPzDTERyCyUxh5bF6wlz1UNtIitjf6EodPPcPF+Rtc1So5A3 -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:01 2026 by rpki-client