This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214995.roa File: AS214995.roa (raw, json) Hash identifier: pIyXhotTuioVaAYhE5IRO11iUs8swprUyCo4abruYzg= Subject key identifier: 9E:DF:EA:DD:BA:C8:A7:8B:26:BB:88:C3:3F:44:DA:95:24:B9:27:D2 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 031863A8510F2C9997A6C8EC9F43E7D348535961 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214995.roa Signing time: Wed 04 Feb 2026 12:57:51 +0000 ROA not before: Wed 04 Feb 2026 12:52:51 +0000 ROA not after: Wed 03 Feb 2027 12:57:51 +0000 asID: 214995 IP address blocks: 92.249.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:18:63:a8:51:0f:2c:99:97:a6:c8:ec:9f:43:e7:d3:48:53:59:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:51 2026 GMT Not After : Feb 3 12:57:51 2027 GMT Subject: CN=9EDFEADDBAC8A78B26BB88C33F44DA9524B927D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:6f:34:17:7f:b6:3b:f0:3b:f2:31:aa:71: 72:72:40:67:ec:16:69:e3:67:02:3a:fe:9b:b8:17: 33:59:ed:01:c1:f2:b3:79:41:2e:35:50:74:5f:07: 2c:c8:69:1d:cd:97:c4:ec:c3:f3:60:d2:e4:37:69: 1c:dc:a3:29:11:fa:39:f3:2b:36:d4:cb:73:02:f4: 85:95:a1:06:38:3a:6c:3e:29:f6:f8:1b:86:60:61: 0b:13:f5:02:c2:08:c0:fe:c3:6e:a4:7a:d4:01:18: be:82:3b:23:b9:85:2d:04:b9:98:60:ba:79:ed:05: aa:12:62:dc:8c:b7:6a:40:48:e2:4b:a8:39:eb:60: c0:1a:14:f8:78:4d:6f:e4:ff:96:13:16:c5:a2:77: 2d:19:8f:16:62:94:32:02:8d:66:9d:2d:68:79:c8: 1e:ad:59:e5:3e:e0:c1:dc:ea:52:88:a1:c4:a9:ef: 55:b8:fc:33:ad:9d:77:f4:02:f4:27:e9:b6:87:38: 9a:13:9f:86:1e:31:4a:3d:61:1d:f4:fe:fe:dc:f1: 4e:2b:78:8a:4c:c1:c2:42:94:92:74:6c:d4:c8:12: 12:31:b2:fa:93:53:06:59:a3:8a:2f:fb:12:21:a8: 12:93:35:88:25:c3:f3:4d:23:15:af:ee:5f:c6:4b: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DF:EA:DD:BA:C8:A7:8B:26:BB:88:C3:3F:44:DA:95:24:B9:27:D2 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.62.0/24 Signature Algorithm: sha256WithRSAEncryption 19:a4:72:c8:59:a6:18:05:1f:84:fb:bc:bd:4f:c6:e8:b0:9d: a1:22:d5:e1:49:36:c9:0c:f7:60:cc:4e:c2:f1:d0:97:ed:61: d3:3b:f0:97:e2:e0:88:76:9c:48:fb:79:31:3e:8d:4f:6a:66: cc:5e:e8:9c:a1:12:06:8c:f7:2e:90:d2:78:77:fc:7f:4d:d1: 56:c0:1f:8d:b2:53:45:e6:d9:e4:8f:d4:9c:6c:e8:29:b0:df: d8:b8:fa:e1:e9:84:7b:91:61:8d:1b:5c:4b:17:17:a7:c8:df: 36:bb:f9:28:51:8b:2c:73:a1:37:4a:e6:5d:1d:78:82:8b:21: 1b:ba:aa:5a:56:6a:35:68:6c:3f:7a:fc:17:6d:30:54:5d:be: 05:8e:52:cb:bb:de:fd:aa:67:a1:f7:fc:0e:73:e5:d6:3c:0b: a9:3c:84:35:06:1a:6c:5c:fc:83:19:96:1e:ae:52:62:42:b4: 85:d9:30:e5:0a:e2:08:6a:38:56:24:df:b3:8c:fe:c2:d2:b7: ec:d0:cb:32:e4:4c:2b:ec:99:a5:b2:6a:54:b7:0f:85:92:7c: 2c:76:b8:74:00:a0:4f:e6:1a:94:b7:9c:1c:66:a6:a6:69:51: 84:66:06:97:26:ea:1a:3e:4e:2b:ca:09:cc:c4:3c:c0:42:59: 41:94:19:6f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAxhjqFEPLJmXpsjsn0Pn00hTWWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTFaFw0yNzAyMDMxMjU3NTFaMDMxMTAvBgNV BAMTKDlFREZFQUREQkFDOEE3OEIyNkJCODhDMzNGNDREQTk1MjRCOTI3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIWG80F3+2O/A78jGqcXJyQGfs FmnjZwI6/pu4FzNZ7QHB8rN5QS41UHRfByzIaR3Nl8Tsw/Ng0uQ3aRzcoykR+jnz KzbUy3MC9IWVoQY4Omw+Kfb4G4ZgYQsT9QLCCMD+w26ketQBGL6COyO5hS0EuZhg unntBaoSYtyMt2pASOJLqDnrYMAaFPh4TW/k/5YTFsWidy0ZjxZilDICjWadLWh5 yB6tWeU+4MHc6lKIocSp71W4/DOtnXf0AvQn6baHOJoTn4YeMUo9YR30/v7c8U4r eIpMwcJClJJ0bNTIEhIxsvqTUwZZo4ov+xIhqBKTNYglw/NNIxWv7l/GSyhxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUnt/q3brIp4smu4jDP0TalSS5J9IwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE0OTk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPk+ MA0GCSqGSIb3DQEBCwUAA4IBAQAZpHLIWaYYBR+E+7y9T8bosJ2hItXhSTbJDPdg zE7C8dCX7WHTO/CX4uCIdpxI+3kxPo1PambMXuicoRIGjPcukNJ4d/x/TdFWwB+N slNF5tnkj9ScbOgpsN/YuPrh6YR7kWGNG1xLFxenyN82u/koUYssc6E3SuZdHXiC iyEbuqpaVmo1aGw/evwXbTBUXb4FjlLLu979qmeh9/wOc+XWPAupPIQ1BhpsXPyD GZYerlJiQrSF2TDlCuIIajhWJN+zjP7C0rfs0Msy5Ewr7JmlsmpUtw+Fknwsdrh0 AKBP5hqUt5wcZqamaVGEZgaXJuoaPk4rygnMxDzAQllBlBlv -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:28 2026 by rpki-client