This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214571.roa File: AS214571.roa (raw, json) Hash identifier: XPxZW7LnMRWoPaNi50A1kZv+NKoJQm4Rrxs5PmJxBh0= Subject key identifier: 44:E9:33:27:17:10:33:79:B5:5F:8B:12:E9:01:A7:4D:0A:BB:C2:4E Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 50D6F272FEC0F45306CFEEE1E00FFA88F0D495B0 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214571.roa Signing time: Wed 12 Nov 2025 03:08:02 +0000 ROA not before: Wed 12 Nov 2025 03:03:02 +0000 ROA not after: Wed 11 Nov 2026 03:08:02 +0000 asID: 214571 IP address blocks: 2a0f:85c1:82d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d6:f2:72:fe:c0:f4:53:06:cf:ee:e1:e0:0f:fa:88:f0:d4:95:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 12 03:03:02 2025 GMT Not After : Nov 11 03:08:02 2026 GMT Subject: CN=44E9332717103379B55F8B12E901A74D0ABBC24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:33:21:0e:a1:1d:c4:c8:88:8f:14:a5:aa: 8b:0d:ca:f0:5e:8c:a7:71:f7:5f:e6:ca:e5:e1:a8: bd:73:34:53:10:bd:e7:6d:08:be:12:c8:e8:3e:6b: 25:75:9b:7e:7e:40:86:b1:b4:b3:07:f4:09:63:44: c9:9d:6c:80:f0:b8:12:34:21:2e:51:5a:74:c3:f0: 4d:99:aa:e4:8e:4d:e5:c2:9f:c3:ca:13:f2:ae:08: fc:72:f5:0c:a6:3f:06:77:6b:b7:2c:42:a4:f7:c0: e7:62:8b:1f:5d:03:9b:c1:4c:8b:f6:d0:a6:c5:74: af:ed:96:cf:90:93:6b:6e:90:ef:a9:74:84:f0:37: 64:6b:7f:21:a2:3b:8e:02:37:bc:20:33:80:04:aa: 11:d3:ae:82:1a:45:f6:2c:fe:e3:8b:53:7e:2b:d0: 8c:49:9a:39:96:42:81:8e:b3:e6:27:0f:a5:19:77: f6:27:d5:8e:12:d8:53:f0:99:af:6e:62:77:45:5d: 8b:ed:2e:ab:06:05:f7:1a:d6:d6:0c:3a:f7:c6:65: 58:52:c3:fc:3f:f2:1b:5c:1e:e5:34:8a:56:91:bf: 90:b9:c2:a7:17:35:b3:84:6f:97:37:fa:a2:eb:0f: 0c:bc:e1:92:63:68:13:36:df:b0:5f:57:14:b0:32: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E9:33:27:17:10:33:79:B5:5F:8B:12:E9:01:A7:4D:0A:BB:C2:4E X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214571.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:82d::/48 Signature Algorithm: sha256WithRSAEncryption 80:8d:2e:70:01:a9:14:5c:d1:1e:a9:b3:27:c9:3e:8c:8b:d3: cb:20:d8:ac:8a:d4:ef:b5:5b:2f:86:33:b9:2f:47:2c:4e:ed: 26:04:82:13:8f:66:f2:57:1c:c3:3b:c7:22:45:b5:db:d3:2d: 13:fc:9a:20:62:d7:83:4e:04:15:57:a8:96:61:8f:fd:aa:a5: c3:8d:f9:d5:ea:18:b6:e1:85:02:7e:30:c6:93:00:59:ee:39: ef:60:d8:b2:57:a1:3d:07:17:88:40:bd:30:f6:22:03:47:d6: 49:93:0d:0a:34:8b:10:b1:14:49:fd:84:dd:4b:33:dd:a0:b9: 58:d8:b6:4b:fe:1d:53:43:8f:42:cb:6c:1c:2b:3c:2a:4f:8d: 93:53:c3:40:4c:3e:e9:92:21:f9:12:0b:0d:ec:d5:9c:22:d8: 40:d8:8d:34:1f:94:0e:73:4e:01:33:81:aa:35:02:3d:d9:fb: 82:23:5b:0a:84:14:b1:9a:35:08:eb:e0:88:51:b5:8d:0d:c7: 02:c9:28:5c:0d:c3:b1:69:ff:f0:da:ef:f7:a2:db:13:b2:11: 9b:69:1a:d7:82:1b:05:44:24:ff:8a:d8:78:92:39:65:c6:0b: 76:81:fb:9e:5b:8f:a3:86:76:34:c9:2d:d7:fa:4d:74:fc:e4: 6b:55:68:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUUNbycv7A9FMGz+7h4A/6iPDUlbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMTIwMzAzMDJaFw0yNjExMTEwMzA4MDJaMDMxMTAvBgNV BAMTKDQ0RTkzMzI3MTcxMDMzNzlCNTVGOEIxMkU5MDFBNzREMEFCQkMyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+zMhDqEdxMiIjxSlqosNyvBe jKdx91/myuXhqL1zNFMQvedtCL4SyOg+ayV1m35+QIaxtLMH9AljRMmdbIDwuBI0 IS5RWnTD8E2ZquSOTeXCn8PKE/KuCPxy9QymPwZ3a7csQqT3wOdiix9dA5vBTIv2 0KbFdK/tls+Qk2tukO+pdITwN2RrfyGiO44CN7wgM4AEqhHTroIaRfYs/uOLU34r 0IxJmjmWQoGOs+YnD6UZd/Yn1Y4S2FPwma9uYndFXYvtLqsGBfca1tYMOvfGZVhS w/w/8htcHuU0ilaRv5C5wqcXNbOEb5c3+qLrDwy84ZJjaBM237BfVxSwMnFtAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUROkzJxcQM3m1X4sS6QGnTQq7wk4wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQgtMA0GCSqGSIb3DQEBCwUAA4IBAQCAjS5wAakUXNEeqbMnyT6Mi9PLINisitTv tVsvhjO5L0csTu0mBIITj2byVxzDO8ciRbXb0y0T/JogYteDTgQVV6iWYY/9qqXD jfnV6hi24YUCfjDGkwBZ7jnvYNiyV6E9BxeIQL0w9iIDR9ZJkw0KNIsQsRRJ/YTd SzPdoLlY2LZL/h1TQ49Cy2wcKzwqT42TU8NATD7pkiH5EgsN7NWcIthA2I00H5QO c04BM4GqNQI92fuCI1sKhBSxmjUI6+CIUbWNDccCyShcDcOxaf/w2u/3otsTshGb aRrXghsFRCT/ith4kjllxgt2gfueW4+jhnY0yS3X+k10/ORrVWhl -----END CERTIFICATE-----Generated at Fri Dec 5 16:39:33 2025 by rpki-client