This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214693.roa File: AS214693.roa (raw, json) Hash identifier: UsnP0hfj77ANJzhjhPhAhx/S3pZrb018U37MbIE10AY= Subject key identifier: 14:96:1D:1E:1B:9D:6C:33:3A:D4:8E:52:0D:4C:F1:F1:09:1F:DE:9F Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 2CE2701748C75C0210F593F94FB03C29AAC6B16C Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214693.roa Signing time: Wed 10 Dec 2025 02:14:22 +0000 ROA not before: Wed 10 Dec 2025 02:09:22 +0000 ROA not after: Wed 09 Dec 2026 02:14:22 +0000 asID: 214693 IP address blocks: 2a0f:85c1:dd5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e2:70:17:48:c7:5c:02:10:f5:93:f9:4f:b0:3c:29:aa:c6:b1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 10 02:09:22 2025 GMT Not After : Dec 9 02:14:22 2026 GMT Subject: CN=14961D1E1B9D6C333AD48E520D4CF1F1091FDE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:c5:bf:4f:93:4f:ff:fc:77:80:a2:ac:44: 5b:b1:09:cd:17:cf:ee:50:20:f6:b4:23:b1:42:38: ff:0e:82:6f:8a:99:36:0a:71:d5:e9:75:af:ea:d4: a9:e0:63:12:5c:d0:da:d8:f8:d8:90:76:f1:51:8a: 25:50:2f:f5:83:cb:43:49:6d:04:a4:80:0b:0c:11: 5a:3e:db:bb:33:70:5d:70:8c:a6:bf:4f:12:26:de: a4:fa:6f:53:1f:43:34:52:7c:e6:5b:54:7b:a3:cf: 47:7c:e0:14:65:82:5b:5b:c2:2a:85:ac:4b:cd:79: 4a:24:f2:ca:4f:bd:43:d7:b6:40:3a:d8:2c:4e:21: 33:be:5f:94:5c:7e:15:b5:64:37:64:5d:48:49:d8: 88:76:2e:fd:fa:f9:51:5a:cc:e2:ef:7e:00:b8:07: a1:a6:05:a1:f6:ee:67:3e:09:ce:51:6f:9c:ce:fa: 83:18:bf:68:e1:98:34:6a:f0:e5:79:79:ce:c3:1b: 4a:ff:2c:a8:63:c9:a0:ae:41:a0:89:d6:3d:66:13: f6:2a:2b:19:23:b7:5d:1f:4e:1a:f1:d9:14:53:b1: bf:6e:c7:37:b8:72:a2:7d:9b:c9:cd:69:78:59:07: 02:51:2d:2c:d1:f9:60:72:2e:13:29:45:14:f6:fb: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:96:1D:1E:1B:9D:6C:33:3A:D4:8E:52:0D:4C:F1:F1:09:1F:DE:9F X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:dd5::/48 Signature Algorithm: sha256WithRSAEncryption 36:2a:44:f7:12:af:1c:f3:63:36:62:95:90:57:48:aa:d3:f3: 1e:75:a2:24:0e:65:6c:5a:2f:b7:7d:53:aa:88:7c:a6:ad:fd: 3a:75:14:84:b0:35:5a:88:80:e2:fd:fa:08:35:f2:37:b1:ba: 5f:c4:51:ea:ba:a3:01:fd:df:1f:d8:88:e1:c3:92:49:fc:90: 5c:bc:63:a8:92:90:06:f9:79:d8:f7:fe:22:71:bb:01:c7:17: b4:53:7f:7b:cd:42:be:71:de:39:ad:22:81:68:02:44:30:ab: 9e:16:14:af:f0:b9:17:28:a1:87:49:fb:29:42:48:07:f4:dc: cc:65:b1:14:b0:7c:35:2e:01:5b:ff:c9:6f:2c:5c:bb:d6:9e: ca:75:2c:3a:76:f9:47:9b:8a:77:09:0e:05:cf:2a:b0:09:20: a6:4b:97:e7:3f:73:c7:9c:bb:e3:e5:3a:73:31:fb:9d:a5:23: 43:28:d2:a7:5d:0b:7d:a9:1c:e2:86:e4:47:8e:4d:5f:9d:df: 56:28:87:1e:8b:37:e0:04:1f:71:13:e1:e2:9d:8f:e2:4a:f5: 34:9c:fd:ca:f3:03:b6:e7:78:ea:55:c9:8d:b2:07:45:77:f0: 35:b3:88:fe:b6:a2:83:d5:44:cf:16:9f:e6:4a:ef:03:a7:a3: af:ce:5a:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULOJwF0jHXAIQ9ZP5T7A8KarGsWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTAwMjA5MjJaFw0yNjEyMDkwMjE0MjJaMDMxMTAvBgNV BAMTKDE0OTYxRDFFMUI5RDZDMzMzQUQ0OEU1MjBENENGMUYxMDkxRkRFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd8W/T5NP//x3gKKsRFuxCc0X z+5QIPa0I7FCOP8Ogm+KmTYKcdXpda/q1KngYxJc0NrY+NiQdvFRiiVQL/WDy0NJ bQSkgAsMEVo+27szcF1wjKa/TxIm3qT6b1MfQzRSfOZbVHujz0d84BRlgltbwiqF rEvNeUok8spPvUPXtkA62CxOITO+X5RcfhW1ZDdkXUhJ2Ih2Lv36+VFazOLvfgC4 B6GmBaH27mc+Cc5Rb5zO+oMYv2jhmDRq8OV5ec7DG0r/LKhjyaCuQaCJ1j1mE/Yq Kxkjt10fThrx2RRTsb9uxze4cqJ9m8nNaXhZBwJRLSzR+WByLhMpRRT2+5TxAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUFJYdHhudbDM61I5SDUzx8Qkf3p8wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NjkzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ3VMA0GCSqGSIb3DQEBCwUAA4IBAQA2KkT3Eq8c82M2YpWQV0iq0/MedaIkDmVs Wi+3fVOqiHymrf06dRSEsDVaiIDi/foINfI3sbpfxFHquqMB/d8f2Ijhw5JJ/JBc vGOokpAG+XnY9/4icbsBxxe0U397zUK+cd45rSKBaAJEMKueFhSv8LkXKKGHSfsp QkgH9NzMZbEUsHw1LgFb/8lvLFy71p7KdSw6dvlHm4p3CQ4FzyqwCSCmS5fnP3PH nLvj5TpzMfudpSNDKNKnXQt9qRzihuRHjk1fnd9WKIceizfgBB9xE+HinY/iSvU0 nP3K8wO253jqVcmNsgdFd/A1s4j+tqKD1UTPFp/mSu8Dp6OvzlqR -----END CERTIFICATE-----Generated at Sun Dec 14 04:53:14 2025 by rpki-client