This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214140.roa File: AS214140.roa (raw, json) Hash identifier: XM3skrMCLcVdy27xGE5CDV8lsgXawjAN54lGWaR6irQ= Subject key identifier: E6:71:65:65:49:71:4A:03:F3:BC:31:26:FE:DA:F5:6C:90:4E:F3:D9 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4172F9307812FCA2A74F20908CA4E2674B299DAD Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214140.roa Signing time: Wed 26 Nov 2025 16:31:35 +0000 ROA not before: Wed 26 Nov 2025 16:26:35 +0000 ROA not after: Wed 25 Nov 2026 16:31:35 +0000 asID: 214140 IP address blocks: 82.38.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:72:f9:30:78:12:fc:a2:a7:4f:20:90:8c:a4:e2:67:4b:29:9d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 16:26:35 2025 GMT Not After : Nov 25 16:31:35 2026 GMT Subject: CN=E671656549714A03F3BC3126FEDAF56C904EF3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:6b:b9:12:d4:65:62:6c:34:8c:f9:82:46: ba:e9:b4:4d:1f:6b:e6:44:55:a3:04:b0:50:58:77: ff:4b:1b:3e:03:fe:ee:eb:cb:b9:1e:65:e2:f4:6c: 75:59:62:f7:97:29:88:d2:3e:61:b9:a5:4a:54:ce: 61:4a:5d:31:98:7e:a7:d7:4b:f0:67:53:73:2e:62: 5e:ff:af:1c:45:c0:fa:22:f2:17:05:d8:78:5b:3c: 07:32:4f:a1:36:a4:03:7f:be:02:8b:44:06:2b:f7: b7:ad:9f:bf:04:b9:e7:29:6d:ec:0d:5f:b9:76:e0: 55:7b:51:c4:29:f5:fd:c9:bc:55:7c:79:09:ea:34: a1:0e:ba:5d:14:5c:15:56:13:f4:b4:86:41:0d:a6: 9d:b4:48:a9:1f:07:76:48:d8:0f:52:9e:9c:01:bc: b2:8b:88:07:c3:6b:e3:2b:89:97:69:bf:83:6f:48: d1:10:ed:ed:39:b3:7a:11:40:e5:76:6d:8f:b1:0e: 9e:1f:9a:aa:97:e2:d1:32:fa:97:48:88:88:9a:7e: 6a:a7:16:9c:28:e7:4d:39:f1:5b:63:4d:d8:14:1a: b2:68:85:df:57:5c:e6:11:5f:4e:08:93:71:72:4d: c2:50:d3:69:b9:bc:3d:e5:a6:fb:0d:dc:a6:45:2e: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:71:65:65:49:71:4A:03:F3:BC:31:26:FE:DA:F5:6C:90:4E:F3:D9 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214140.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.34.0/24 Signature Algorithm: sha256WithRSAEncryption 88:22:85:fb:ce:a3:86:38:36:a1:5a:d3:f5:87:ca:03:27:9d: e9:24:21:74:65:f5:1a:dc:e7:37:7c:44:cc:e4:57:f4:c6:ec: 21:53:11:a9:ed:60:e6:61:fa:06:f5:7d:aa:d3:5b:e3:9f:2d: 3e:35:15:6e:2e:2d:41:4b:8d:29:91:71:5e:9e:32:89:2f:2d: 71:cc:78:8e:6a:cf:72:6c:8a:ce:31:88:b6:f1:06:4d:35:f6: ac:9a:34:7f:db:3c:9c:c1:47:19:45:8a:d5:32:de:2b:bc:70: f7:19:89:73:b3:79:25:26:b5:dc:7d:12:c2:ff:b6:44:8e:18: af:f4:33:d3:d7:a2:cb:a8:1a:5e:4e:01:33:bb:26:b9:38:8f: 9b:2e:d5:eb:85:c0:fb:0c:7f:4f:b9:d3:e1:5f:d0:8f:04:43: a6:1b:15:54:52:f8:10:f7:d5:8b:ad:cf:c3:7f:5e:31:42:9d: c2:13:01:bf:72:b2:b2:15:2a:6f:ab:a5:1c:4e:41:99:d6:8f: 46:f6:55:1b:a8:8d:f4:5f:71:8d:a6:13:53:42:03:9a:31:05: bc:23:26:ae:6c:e5:8e:1d:3f:cd:61:71:f3:f1:c4:81:90:94: ac:d9:bf:06:1a:99:06:44:47:d4:89:fc:d0:fe:17:99:1e:f3: 11:e4:fb:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQXL5MHgS/KKnTyCQjKTiZ0spna0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYxNjI2MzVaFw0yNjExMjUxNjMxMzVaMDMxMTAvBgNV BAMTKEU2NzE2NTY1NDk3MTRBMDNGM0JDMzEyNkZFREFGNTZDOTA0RUYzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7Wu5EtRlYmw0jPmCRrrptE0f a+ZEVaMEsFBYd/9LGz4D/u7ry7keZeL0bHVZYveXKYjSPmG5pUpUzmFKXTGYfqfX S/BnU3MuYl7/rxxFwPoi8hcF2HhbPAcyT6E2pAN/vgKLRAYr97etn78EuecpbewN X7l24FV7UcQp9f3JvFV8eQnqNKEOul0UXBVWE/S0hkENpp20SKkfB3ZI2A9SnpwB vLKLiAfDa+MriZdpv4NvSNEQ7e05s3oRQOV2bY+xDp4fmqqX4tEy+pdIiIiafmqn Fpwo50058VtjTdgUGrJohd9XXOYRX04Ik3FyTcJQ02m5vD3lpvsN3KZFLmgRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU5nFlZUlxSgPzvDEm/tr1bJBO89kwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MTQwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiYi MA0GCSqGSIb3DQEBCwUAA4IBAQCIIoX7zqOGODahWtP1h8oDJ53pJCF0ZfUa3Oc3 fETM5Ff0xuwhUxGp7WDmYfoG9X2q01vjny0+NRVuLi1BS40pkXFenjKJLy1xzHiO as9ybIrOMYi28QZNNfasmjR/2zycwUcZRYrVMt4rvHD3GYlzs3klJrXcfRLC/7ZE jhiv9DPT16LLqBpeTgEzuya5OI+bLtXrhcD7DH9PudPhX9CPBEOmGxVUUvgQ99WL rc/Df14xQp3CEwG/crKyFSpvq6UcTkGZ1o9G9lUbqI30X3GNphNTQgOaMQW8Iyau bOWOHT/NYXHz8cSBkJSs2b8GGpkGREfUifzQ/heZHvMR5PtH -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client