This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS45014.roa File: AS45014.roa (raw, json) Hash identifier: ojOe8vOZ/syfN3wmvdo0B4YffokNSX6yXcAye2/YB8U= Subject key identifier: 9C:E1:EF:A1:85:B6:A7:67:3A:E4:8F:95:06:12:0D:02:48:70:9D:A8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2EFFF9AD38FB8D8A967B552DC8C629FCA7D054AC Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS45014.roa Signing time: Tue 06 Jan 2026 16:04:31 +0000 ROA not before: Tue 06 Jan 2026 15:59:31 +0000 ROA not after: Tue 05 Jan 2027 16:04:31 +0000 asID: 45014 IP address blocks: 82.40.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ff:f9:ad:38:fb:8d:8a:96:7b:55:2d:c8:c6:29:fc:a7:d0:54:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 6 15:59:31 2026 GMT Not After : Jan 5 16:04:31 2027 GMT Subject: CN=9CE1EFA185B6A7673AE48F9506120D0248709DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:5e:b9:ae:05:64:5a:a4:da:d9:ff:c1:29: c3:a0:61:cc:78:08:fd:7d:6b:01:83:26:ea:b7:39: ae:60:1e:6e:04:f7:53:e1:95:71:84:23:44:6d:79: 62:e5:9e:b8:28:84:70:16:9d:2a:95:e4:d4:b4:8c: c7:25:08:dc:21:80:ef:1f:a7:d5:36:a3:f4:a8:62: c8:c4:fd:25:71:c8:26:fa:a2:48:29:21:51:8d:1a: 5c:1e:8b:09:66:5b:e5:bf:b8:6b:0b:64:88:d4:d4: 95:a3:b2:19:5e:3e:af:2e:c2:a4:91:7d:d3:54:be: 5f:0b:44:dd:e6:96:b4:5a:de:4f:a0:47:f8:28:29: 32:b0:5c:d2:4e:b7:8b:b0:42:e4:c8:6f:05:32:24: c4:8a:1a:af:c9:32:49:84:0a:6b:2b:dd:37:97:09: 4e:f3:ce:97:ba:9e:59:a8:ba:60:78:3b:27:ef:01: 1d:41:05:49:50:71:1a:d6:58:12:ca:1e:a5:b1:21: fb:70:46:a1:08:cb:73:12:5e:d7:92:f4:83:9c:a5: 05:cd:ce:8c:1a:bd:7c:8c:af:f2:6c:75:39:5b:08: 1f:80:d0:c5:5d:81:77:5b:fa:4c:5d:e9:77:82:37: d0:9c:5e:cf:11:e2:30:2b:36:db:fa:fe:16:fc:35: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E1:EF:A1:85:B6:A7:67:3A:E4:8F:95:06:12:0D:02:48:70:9D:A8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS45014.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.40.23.0/24 Signature Algorithm: sha256WithRSAEncryption 66:cd:e2:78:57:4d:70:95:df:5f:e5:a4:4b:84:d6:be:60:3f: e8:5a:95:a5:be:2f:d5:1a:ea:16:70:7d:da:e1:80:80:01:1c: 91:fb:93:f6:11:eb:bb:30:f2:dd:3f:ea:2f:d5:14:b7:47:d2: fa:5b:e5:f8:71:29:2e:6b:f1:db:83:c1:5c:b4:06:b9:7e:02: d2:09:fa:bd:02:87:5e:82:f6:c0:66:ca:75:6d:8d:52:2a:1a: b0:c8:b2:5d:c9:36:c4:aa:63:ac:8d:8d:8b:de:d6:ad:24:61: 95:8f:8e:47:17:95:e4:c1:6e:e9:a4:9c:9b:d2:56:57:3a:66: f2:96:68:79:81:1d:e4:c8:5c:94:11:c1:3b:b1:e7:41:f5:b8: 2a:4d:e4:e9:ae:a8:f9:6b:74:64:e2:60:64:96:25:ad:de:14: 6e:ad:fa:9d:a0:8c:c5:73:8e:0d:4c:b9:0f:97:3f:6c:a5:e9: 7b:e7:82:60:e4:21:f0:22:2b:53:50:12:95:e5:7b:1c:54:49: 46:7f:d3:04:07:40:a4:43:f3:36:94:b1:fd:e3:60:52:b6:6a: 4a:61:8b:1e:3e:f5:92:13:ee:ef:b3:06:13:e6:ac:bf:5e:ad: 6f:eb:16:e6:98:ca:ee:e7:34:0d:34:d2:ff:93:0c:d7:62:4d: 24:dd:8c:6a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIULv/5rTj7jYqWe1UtyMYp/KfQVKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDYxNTU5MzFaFw0yNzAxMDUxNjA0MzFaMDMxMTAvBgNV BAMTKDlDRTFFRkExODVCNkE3NjczQUU0OEY5NTA2MTIwRDAyNDg3MDlEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOF65rgVkWqTa2f/BKcOgYcx4 CP19awGDJuq3Oa5gHm4E91PhlXGEI0RteWLlnrgohHAWnSqV5NS0jMclCNwhgO8f p9U2o/SoYsjE/SVxyCb6okgpIVGNGlweiwlmW+W/uGsLZIjU1JWjshlePq8uwqSR fdNUvl8LRN3mlrRa3k+gR/goKTKwXNJOt4uwQuTIbwUyJMSKGq/JMkmECmsr3TeX CU7zzpe6nlmoumB4OyfvAR1BBUlQcRrWWBLKHqWxIftwRqEIy3MSXteS9IOcpQXN zowavXyMr/JsdTlbCB+A0MVdgXdb+kxd6XeCN9CcXs8R4jArNtv6/hb8NWjNAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUnOHvoYW2p2c65I+VBhINAkhwnagwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDUwMTQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSKBcw DQYJKoZIhvcNAQELBQADggEBAGbN4nhXTXCV31/lpEuE1r5gP+halaW+L9Ua6hZw fdrhgIABHJH7k/YR67sw8t0/6i/VFLdH0vpb5fhxKS5r8duDwVy0Brl+AtIJ+r0C h16C9sBmynVtjVIqGrDIsl3JNsSqY6yNjYve1q0kYZWPjkcXleTBbumknJvSVlc6 ZvKWaHmBHeTIXJQRwTux50H1uCpN5OmuqPlrdGTiYGSWJa3eFG6t+p2gjMVzjg1M uQ+XP2yl6XvngmDkIfAiK1NQEpXlexxUSUZ/0wQHQKRD8zaUsf3jYFK2akphix4+ 9ZIT7u+zBhPmrL9erW/rFuaYyu7nNA000v+TDNdiTSTdjGo= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:26 2026 by rpki-client