This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa File: AS214566.roa (raw, json) Hash identifier: DN4q8owSZT4nNtHf0uShWLlWpb5drPIBya2qHgkSVQw= Subject key identifier: F6:30:28:C0:20:3A:CF:FC:85:17:35:7B:66:E1:4B:02:6B:94:E6:48 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 759183FC3A6A771CF7D5349032BC24F0ED2D3F73 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa Signing time: Tue 18 Nov 2025 01:08:06 +0000 ROA not before: Tue 18 Nov 2025 01:03:06 +0000 ROA not after: Tue 17 Nov 2026 01:08:06 +0000 asID: 214566 IP address blocks: 2a0f:85c1:82f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:91:83:fc:3a:6a:77:1c:f7:d5:34:90:32:bc:24:f0:ed:2d:3f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 18 01:03:06 2025 GMT Not After : Nov 17 01:08:06 2026 GMT Subject: CN=F63028C0203ACFFC8517357B66E14B026B94E648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:d9:fc:2e:5b:bb:27:66:02:48:63:63:fb: c1:de:3d:45:70:cf:ca:04:37:c6:e7:f7:c4:7a:e7: d0:27:e8:46:63:94:e5:98:59:8a:54:bf:c5:1b:84: 8b:d4:f3:87:8d:56:98:70:aa:65:fc:5a:93:fa:03: 4a:6e:6e:80:ea:9b:fd:07:0c:3c:8b:d6:03:86:4f: d2:47:c2:52:97:80:59:1f:13:05:c6:d5:99:06:a0: 7b:d6:68:b2:29:c9:e0:37:54:f0:4d:fa:08:b9:18: 14:f6:64:b9:f2:62:32:b5:0b:d7:3b:16:69:68:bf: 4e:1b:90:8c:e0:e8:bc:2f:00:1a:04:e2:b3:40:f6: 55:20:5b:74:a1:67:d7:2f:7c:c0:a5:a5:b0:ac:28: a2:72:db:3b:6f:ab:aa:37:25:79:91:10:b0:93:80: 10:ba:c1:2c:66:d7:bc:cb:2e:e1:81:df:3f:8e:94: 72:2a:83:b0:55:5b:77:c9:a4:ab:0d:2e:64:ca:9a: e8:aa:8a:43:17:55:3d:48:4a:5d:3f:61:c1:3d:3a: 04:79:89:ea:f7:9a:64:74:11:9b:d9:78:82:33:d4: f6:7e:79:a9:85:96:50:d6:28:89:d1:0f:8e:a1:c1: 55:ad:d1:e4:97:16:d8:ce:77:4c:56:ec:67:63:08: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:28:C0:20:3A:CF:FC:85:17:35:7B:66:E1:4B:02:6B:94:E6:48 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:82f::/48 Signature Algorithm: sha256WithRSAEncryption 78:25:e4:cb:c8:db:12:1d:4c:b2:64:d3:e8:ab:d6:25:a2:fc: 68:c0:98:a4:bd:1a:81:ff:34:43:69:63:21:bf:b6:a8:90:93: ec:f4:51:a6:49:a7:ac:53:b8:66:f7:0b:db:12:23:3f:b5:6f: ee:55:f1:21:6c:54:fc:bb:2c:7d:c5:da:b3:52:00:19:99:b2: 11:27:80:2b:f0:1c:eb:c0:56:db:eb:07:22:a0:40:da:58:8e: 26:af:c5:28:35:41:62:86:0c:de:fe:57:33:ed:35:bd:2d:5c: 58:03:d3:55:32:30:7e:29:88:ce:b0:0f:81:12:01:97:05:02: 9c:16:b4:41:7a:a8:b9:31:a7:a4:d6:5d:e8:fb:20:6e:21:cc: 74:1a:fd:3c:b2:cc:99:b7:fd:dc:c8:7c:b6:d8:9d:8d:af:7d: 0b:82:a8:39:4c:92:87:77:6c:fe:3c:9f:df:a5:2f:a4:28:7f: 66:db:c9:9d:80:3c:c3:62:1d:56:79:ed:fa:89:2f:e2:47:cb: 5b:ef:15:31:d5:86:2a:ec:58:9f:bf:e4:c3:44:b4:52:ed:72: 6f:d5:0b:c7:35:be:3f:6a:5a:fc:75:48:a5:99:37:cb:86:37: 28:27:16:1a:6b:ab:6c:54:4c:43:3f:cc:5e:9f:be:62:a2:cc: 49:35:ae:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUdZGD/Dpqdxz31TSQMrwk8O0tP3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMTgwMTAzMDZaFw0yNjExMTcwMTA4MDZaMDMxMTAvBgNV BAMTKEY2MzAyOEMwMjAzQUNGRkM4NTE3MzU3QjY2RTE0QjAyNkI5NEU2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcoNn8Llu7J2YCSGNj+8HePUVw z8oEN8bn98R659An6EZjlOWYWYpUv8UbhIvU84eNVphwqmX8WpP6A0puboDqm/0H DDyL1gOGT9JHwlKXgFkfEwXG1ZkGoHvWaLIpyeA3VPBN+gi5GBT2ZLnyYjK1C9c7 Fmlov04bkIzg6LwvABoE4rNA9lUgW3ShZ9cvfMClpbCsKKJy2ztvq6o3JXmRELCT gBC6wSxm17zLLuGB3z+OlHIqg7BVW3fJpKsNLmTKmuiqikMXVT1ISl0/YcE9OgR5 ier3mmR0EZvZeIIz1PZ+eamFllDWKInRD46hwVWt0eSXFtjOd0xW7GdjCIX9AgMB AAGjggINMIICCTAdBgNVHQ4EFgQU9jAowCA6z/yFFzV7ZuFLAmuU5kgwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTY2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQgvMA0GCSqGSIb3DQEBCwUAA4IBAQB4JeTLyNsSHUyyZNPoq9YlovxowJikvRqB /zRDaWMhv7aokJPs9FGmSaesU7hm9wvbEiM/tW/uVfEhbFT8uyx9xdqzUgAZmbIR J4Ar8BzrwFbb6wcioEDaWI4mr8UoNUFihgze/lcz7TW9LVxYA9NVMjB+KYjOsA+B EgGXBQKcFrRBeqi5Maek1l3o+yBuIcx0Gv08ssyZt/3cyHy22J2Nr30Lgqg5TJKH d2z+PJ/fpS+kKH9m28mdgDzDYh1Wee36iS/iR8tb7xUx1YYq7Fifv+TDRLRS7XJv 1QvHNb4/alr8dUilmTfLhjcoJxYaa6tsVExDP8xen75iosxJNa6u -----END CERTIFICATE-----Generated at Fri Dec 5 16:38:42 2025 by rpki-client