This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214677.roa File: AS214677.roa (raw, json) Hash identifier: LpzF+vp0liD254xvfsh3NsW25shxGjlOELNvoKaVxjA= Subject key identifier: 0D:F5:37:B8:11:E9:6E:EC:12:81:B7:65:41:FF:DD:2B:6D:B8:D2:06 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 1B32D25ECDDC744ABB78A3FCB669AF85C13753BA Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214677.roa Signing time: Mon 24 Nov 2025 13:57:12 +0000 ROA not before: Mon 24 Nov 2025 13:52:12 +0000 ROA not after: Mon 23 Nov 2026 13:57:12 +0000 asID: 214677 IP address blocks: 195.206.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:32:d2:5e:cd:dc:74:4a:bb:78:a3:fc:b6:69:af:85:c1:37:53:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Nov 24 13:52:12 2025 GMT Not After : Nov 23 13:57:12 2026 GMT Subject: CN=0DF537B811E96EEC1281B76541FFDD2B6DB8D206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:e3:9b:b1:6f:29:c1:bf:04:de:4a:69:82: 1a:0a:e2:e7:5b:f3:11:27:d8:aa:9b:eb:e4:2a:15: 12:b6:24:72:5b:a2:3e:8d:85:e5:60:4f:f1:07:2f: 34:dd:b8:fc:8b:e1:99:5d:3f:bb:26:88:ec:dd:3b: aa:05:14:d3:1a:1f:42:8f:35:50:87:8a:20:52:75: 0e:0b:73:14:44:bd:2a:7b:6d:75:80:30:64:d8:0f: 76:a6:4c:7b:2e:58:65:34:2c:69:4e:f9:ff:b9:57: cd:4b:2f:5c:11:b4:00:88:68:6c:77:f8:fa:cb:fb: 85:3c:05:59:0f:05:1c:94:58:af:2b:27:98:c5:26: d4:74:2a:fc:57:a9:2a:4a:a2:f7:c4:cc:9e:db:c3: 73:22:d4:7b:eb:10:f2:d2:1d:b6:5b:17:28:69:8e: fb:29:f9:ab:5e:c6:63:26:69:e2:b0:bc:61:af:8e: c0:92:37:d7:ee:a7:35:23:fe:c8:51:7c:fd:ea:23: fe:c2:24:06:aa:1a:4c:d6:3d:c9:d2:42:3f:e9:93: 19:a9:b0:09:50:7d:21:38:18:9a:44:2b:8c:e9:d8: d9:3c:9f:19:46:b0:ed:0b:a0:62:7d:5a:05:76:53: 8e:18:dc:ff:c2:07:a2:05:20:93:88:dd:06:9b:37: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F5:37:B8:11:E9:6E:EC:12:81:B7:65:41:FF:DD:2B:6D:B8:D2:06 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214677.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.206.234.0/24 Signature Algorithm: sha256WithRSAEncryption 17:11:52:cc:ea:66:bf:7f:89:e2:80:6f:b2:04:50:07:6b:1f: 21:18:9e:f8:9e:6b:d4:34:c6:ca:34:2f:04:74:2a:e0:e3:2d: 29:3e:20:ce:48:0e:f2:08:8b:90:0d:17:4d:35:72:a1:5c:61: a7:37:d2:ce:7c:1f:56:4e:bd:1d:bb:e0:47:2a:29:97:63:cb: 4c:29:19:1b:b3:be:b9:6b:74:88:b1:47:9f:0f:51:39:89:82: 4b:d7:f7:8e:c2:51:23:a8:ae:55:cb:a2:87:b9:e2:e7:de:6d: f3:0a:ac:70:ad:7f:59:c5:42:c4:b9:50:8a:e7:a9:13:c5:94: 9d:79:b9:a3:57:01:0f:7f:2e:19:80:10:fa:28:95:c2:f8:3f: b2:bb:70:f4:35:2e:e2:27:e2:40:41:31:49:fb:5d:67:26:95: 6c:30:0e:12:3e:10:55:7e:cb:fb:59:0d:55:89:87:8f:51:94: bf:57:f9:33:71:56:9e:67:ba:3f:47:79:6c:0a:e8:ed:d5:de: 16:0d:52:69:08:c4:83:1c:70:42:36:0a:e2:43:36:b7:fb:05: 74:d3:44:f4:55:56:e1:50:0b:0f:0b:42:81:7f:8d:b5:fb:8b: 90:39:19:a1:91:13:44:9e:54:47:8b:74:fc:cd:1f:e9:05:b2: ce:64:46:39 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGzLSXs3cdEq7eKP8tmmvhcE3U7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTExMjQxMzUyMTJaFw0yNjExMjMxMzU3MTJaMDMxMTAvBgNV BAMTKDBERjUzN0I4MTFFOTZFRUMxMjgxQjc2NTQxRkZERDJCNkRCOEQyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoX+ObsW8pwb8E3kppghoK4udb 8xEn2Kqb6+QqFRK2JHJboj6NheVgT/EHLzTduPyL4ZldP7smiOzdO6oFFNMaH0KP NVCHiiBSdQ4LcxREvSp7bXWAMGTYD3amTHsuWGU0LGlO+f+5V81LL1wRtACIaGx3 +PrL+4U8BVkPBRyUWK8rJ5jFJtR0KvxXqSpKovfEzJ7bw3Mi1HvrEPLSHbZbFyhp jvsp+atexmMmaeKwvGGvjsCSN9fupzUj/shRfP3qI/7CJAaqGkzWPcnSQj/pkxmp sAlQfSE4GJpEK4zp2Nk8nxlGsO0LoGJ9WgV2U44Y3P/CB6IFIJOI3QabNwWnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUDfU3uBHpbuwSgbdlQf/dK2240gYwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE0Njc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw87q MA0GCSqGSIb3DQEBCwUAA4IBAQAXEVLM6ma/f4nigG+yBFAHax8hGJ74nmvUNMbK NC8EdCrg4y0pPiDOSA7yCIuQDRdNNXKhXGGnN9LOfB9WTr0du+BHKimXY8tMKRkb s765a3SIsUefD1E5iYJL1/eOwlEjqK5Vy6KHueLn3m3zCqxwrX9ZxULEuVCK56kT xZSdebmjVwEPfy4ZgBD6KJXC+D+yu3D0NS7iJ+JAQTFJ+11nJpVsMA4SPhBVfsv7 WQ1ViYePUZS/V/kzcVaeZ7o/R3lsCujt1d4WDVJpCMSDHHBCNgriQza3+wV000T0 VVbhUAsPC0KBf421+4uQORmhkRNEnlRHi3T8zR/pBbLOZEY5 -----END CERTIFICATE-----Generated at Fri Dec 5 08:01:44 2025 by rpki-client