This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214618.roa File: AS214618.roa (raw, json) Hash identifier: Izu4cGSMrVwWDBhxuf78jaZuIKwrylheqO7dYcJC/jg= Subject key identifier: 42:17:BF:F3:4B:0F:D2:B7:F2:AB:31:C9:E4:78:BB:1A:1F:05:DC:00 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 69F2AD262AD2F8493755D0DDFAFA4E0AF9781DC0 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214618.roa Signing time: Mon 01 Dec 2025 13:43:13 +0000 ROA not before: Mon 01 Dec 2025 13:38:13 +0000 ROA not after: Mon 30 Nov 2026 13:43:13 +0000 asID: 214618 IP address blocks: 45.149.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f2:ad:26:2a:d2:f8:49:37:55:d0:dd:fa:fa:4e:0a:f9:78:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 1 13:38:13 2025 GMT Not After : Nov 30 13:43:13 2026 GMT Subject: CN=4217BFF34B0FD2B7F2AB31C9E478BB1A1F05DC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:b8:5d:c5:99:47:7f:e0:41:98:fe:f7:28: 3c:89:d4:60:7d:6b:68:cb:c7:42:00:fe:25:fb:40: 16:b0:4a:eb:e5:fc:b8:64:38:8d:dd:97:ac:49:ef: 86:ba:59:50:c3:b4:e2:96:d2:8e:d6:c4:da:b7:91: df:ac:52:ff:ce:0b:55:51:10:51:d0:dc:62:b6:f5: d6:3a:07:7e:88:cb:34:94:df:5b:9c:b9:58:3b:06: 89:d3:0b:a0:f0:64:3f:6c:f8:b3:07:4c:7d:41:17: 83:7f:d3:86:e4:e7:da:13:a0:a7:20:b7:93:ec:a6: 01:52:a0:c6:73:98:24:01:34:25:24:67:54:d7:12: 6c:98:83:e2:22:c3:c7:02:b2:40:a5:76:4d:18:9b: a4:8b:68:e6:de:ac:e6:82:70:ba:d0:81:37:ee:c5: bd:75:80:22:fa:f7:e7:08:5e:7a:65:b4:1d:4e:95: c4:29:5d:c3:52:b1:5f:fa:b9:95:61:40:1e:4b:99: 0f:09:5c:92:f6:fd:52:58:bd:2a:23:3e:b2:29:b5: c5:67:da:56:a4:76:8c:eb:c0:bb:73:f6:fb:eb:6e: db:75:de:23:5d:2e:2d:7a:de:06:da:ca:b6:d3:a8: 38:9d:66:eb:a5:18:59:bc:2d:68:f2:47:47:4a:58: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:17:BF:F3:4B:0F:D2:B7:F2:AB:31:C9:E4:78:BB:1A:1F:05:DC:00 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.101.0/24 Signature Algorithm: sha256WithRSAEncryption 94:16:1c:d9:5a:7e:1e:08:b3:13:27:5c:89:78:d7:bd:c0:41: db:e8:a7:65:1f:34:2a:cb:ee:4c:15:98:3a:07:9d:a1:47:5e: 3c:66:aa:a6:0a:7f:8c:c0:c2:38:15:37:cb:65:62:03:8b:06: a8:6c:2e:55:1a:f6:a1:7b:92:de:fd:db:b0:d8:12:30:85:7a: 0f:6b:6f:61:88:9e:12:85:46:24:1e:c4:00:4d:6c:32:58:72: 52:63:09:69:dc:0d:13:db:19:c8:9f:28:df:dc:3b:25:e0:f1: f8:53:88:20:22:22:63:16:99:3d:67:61:10:01:ad:3a:54:06: 64:df:80:9e:55:c0:38:f2:e8:d4:af:da:59:89:de:15:49:51: 19:ad:72:18:eb:63:6a:99:b1:53:77:00:36:eb:4a:5f:b7:6c: 87:cb:f2:4d:80:92:7d:ab:93:bf:f1:8c:35:23:9c:51:90:ba: 65:8c:39:ae:c4:c6:48:1b:73:71:6d:e9:e3:09:1d:b7:13:30: 4a:0d:1d:21:eb:6f:68:23:03:74:89:c8:79:25:70:76:4b:8d: c5:b2:f2:34:a3:86:27:7d:43:36:9c:62:84:4f:d7:7c:b9:2d: 7c:c7:da:dd:3b:cc:0c:fc:c7:a5:fc:fd:30:58:c3:81:04:1c: 95:ea:5b:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUafKtJirS+Ek3VdDd+vpOCvl4HcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMDExMzM4MTNaFw0yNjExMzAxMzQzMTNaMDMxMTAvBgNV BAMTKDQyMTdCRkYzNEIwRkQyQjdGMkFCMzFDOUU0NzhCQjFBMUYwNURDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulrhdxZlHf+BBmP73KDyJ1GB9 a2jLx0IA/iX7QBawSuvl/LhkOI3dl6xJ74a6WVDDtOKW0o7WxNq3kd+sUv/OC1VR EFHQ3GK29dY6B36IyzSU31ucuVg7BonTC6DwZD9s+LMHTH1BF4N/04bk59oToKcg t5PspgFSoMZzmCQBNCUkZ1TXEmyYg+Iiw8cCskCldk0Ym6SLaOberOaCcLrQgTfu xb11gCL69+cIXnpltB1OlcQpXcNSsV/6uZVhQB5LmQ8JXJL2/VJYvSojPrIptcVn 2lakdozrwLtz9vvrbtt13iNdLi163gbayrbTqDidZuulGFm8LWjyR0dKWIrHAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQhe/80sP0rfyqzHJ5Hi7Gh8F3AAwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE0NjE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVl MA0GCSqGSIb3DQEBCwUAA4IBAQCUFhzZWn4eCLMTJ1yJeNe9wEHb6KdlHzQqy+5M FZg6B52hR148ZqqmCn+MwMI4FTfLZWIDiwaobC5VGvahe5Le/duw2BIwhXoPa29h iJ4ShUYkHsQATWwyWHJSYwlp3A0T2xnInyjf3Dsl4PH4U4ggIiJjFpk9Z2EQAa06 VAZk34CeVcA48ujUr9pZid4VSVEZrXIY62NqmbFTdwA260pft2yHy/JNgJJ9q5O/ 8Yw1I5xRkLpljDmuxMZIG3NxbenjCR23EzBKDR0h629oIwN0ich5JXB2S43FsvI0 o4YnfUM2nGKET9d8uS18x9rdO8wM/Mel/P0wWMOBBByV6lvS -----END CERTIFICATE-----Generated at Fri Dec 5 07:59:51 2025 by rpki-client