This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214781.roa File: AS214781.roa (raw, json) Hash identifier: +sYeKY3V3y9Gi2ec02LopwaSpQFugQh9qQboAyN+hEs= Subject key identifier: D6:0C:FD:7D:ED:0F:4A:30:E7:0E:4F:41:CA:21:A9:FA:35:5B:AF:45 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 407E360ED0428985BA0F884451A5EDF0E2934198 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214781.roa Signing time: Fri 28 Nov 2025 03:21:14 +0000 ROA not before: Fri 28 Nov 2025 03:16:14 +0000 ROA not after: Fri 27 Nov 2026 03:21:14 +0000 asID: 214781 IP address blocks: 2a0f:85c1:d9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:36:0e:d0:42:89:85:ba:0f:88:44:51:a5:ed:f0:e2:93:41:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 28 03:16:14 2025 GMT Not After : Nov 27 03:21:14 2026 GMT Subject: CN=D60CFD7DED0F4A30E70E4F41CA21A9FA355BAF45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:80:29:57:b8:d4:46:d7:a7:7d:1b:a4:8a: dd:93:f9:2e:30:ce:92:68:cd:8f:a1:05:f5:7a:9a: 58:10:be:84:d6:f6:7a:d5:ae:9c:9c:0f:17:83:d5: 35:43:2d:1b:98:64:de:26:7c:39:f7:be:d2:b4:a3: 2b:59:da:e6:69:61:73:02:17:ed:af:71:c0:71:10: 71:c3:8c:b2:47:a5:f2:84:9e:5d:60:59:65:92:11: 0c:75:59:7a:e9:43:59:38:0f:89:57:db:0f:3f:00: 68:04:f7:f9:fc:97:94:7e:f5:4c:1f:0d:4b:d7:76: 36:88:c8:45:68:4c:d4:f8:05:9d:5a:d9:85:57:15: 1e:44:a8:47:84:73:9d:04:5b:9d:97:27:a2:1d:0a: 81:37:82:43:28:eb:6c:20:9a:74:48:03:56:e7:15: 0c:f1:1f:9e:9e:fe:3f:70:65:ca:c7:63:e1:81:ef: e6:3d:3c:ba:5c:a0:55:f8:77:a4:83:b2:56:71:5e: a4:a2:a1:3c:90:6f:3a:86:ad:9e:1b:43:86:ed:18: fd:03:2c:ec:3d:a9:a5:0b:50:39:e6:f3:1a:de:aa: 08:a8:8e:b4:69:31:d0:d0:d9:b4:31:14:94:5b:81: 6e:b0:b5:a6:7d:6b:31:23:4f:f9:e8:ba:3e:e3:77: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:FD:7D:ED:0F:4A:30:E7:0E:4F:41:CA:21:A9:FA:35:5B:AF:45 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214781.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d9d::/48 Signature Algorithm: sha256WithRSAEncryption 4b:ae:49:f1:d6:62:6e:12:93:64:b5:24:7c:c0:2a:28:3f:2a: cd:1c:b5:6e:f7:8f:4e:e4:66:5b:d1:c7:54:1d:1d:23:5d:04: 21:44:81:af:e0:ce:80:b1:60:07:50:2e:34:cc:07:b7:e2:4a: 2f:ff:30:7a:23:bd:26:1a:01:3e:94:34:da:7b:e2:fe:cd:3c: 47:76:5e:4a:e8:ad:9c:01:18:89:88:4b:50:b5:86:91:5a:60: bc:45:83:e6:28:93:e0:84:db:63:03:6a:f1:04:71:c6:5a:89: e6:05:1f:53:6b:60:2b:2d:94:c2:74:7c:3a:d4:4a:42:b9:07: 9d:8a:d3:9f:3b:28:cd:64:f6:33:94:9b:76:12:55:d0:19:94: 6b:90:57:e0:1d:59:69:b0:2d:4a:41:89:c5:b1:cb:12:0e:da: ff:da:4c:fe:f1:eb:07:3e:df:09:d8:48:f3:6b:82:ec:13:9b: 9e:9f:31:b9:fd:ca:e8:f8:52:57:6f:4c:78:9f:56:90:1b:42: 3e:2f:1e:08:d4:ae:31:74:76:66:d0:75:ae:ff:46:0d:04:3c: 04:c3:f0:f5:bd:e0:57:b2:a2:d8:52:49:3d:46:5a:50:02:95: 46:06:30:ff:eb:2f:71:e4:92:c0:6b:7b:e1:ad:43:70:e4:21: 54:12:f4:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUQH42DtBCiYW6D4hEUaXt8OKTQZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMjgwMzE2MTRaFw0yNjExMjcwMzIxMTRaMDMxMTAvBgNV BAMTKEQ2MENGRDdERUQwRjRBMzBFNzBFNEY0MUNBMjFBOUZBMzU1QkFGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhoApV7jURtenfRukit2T+S4w zpJozY+hBfV6mlgQvoTW9nrVrpycDxeD1TVDLRuYZN4mfDn3vtK0oytZ2uZpYXMC F+2vccBxEHHDjLJHpfKEnl1gWWWSEQx1WXrpQ1k4D4lX2w8/AGgE9/n8l5R+9Uwf DUvXdjaIyEVoTNT4BZ1a2YVXFR5EqEeEc50EW52XJ6IdCoE3gkMo62wgmnRIA1bn FQzxH56e/j9wZcrHY+GB7+Y9PLpcoFX4d6SDslZxXqSioTyQbzqGrZ4bQ4btGP0D LOw9qaULUDnm8xreqgiojrRpMdDQ2bQxFJRbgW6wtaZ9azEjT/nouj7jd6bhAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU1gz9fe0PSjDnDk9ByiGp+jVbr0UwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NzgxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ2dMA0GCSqGSIb3DQEBCwUAA4IBAQBLrknx1mJuEpNktSR8wCooPyrNHLVu949O 5GZb0cdUHR0jXQQhRIGv4M6AsWAHUC40zAe34kov/zB6I70mGgE+lDTae+L+zTxH dl5K6K2cARiJiEtQtYaRWmC8RYPmKJPghNtjA2rxBHHGWonmBR9Ta2ArLZTCdHw6 1EpCuQeditOfOyjNZPYzlJt2ElXQGZRrkFfgHVlpsC1KQYnFscsSDtr/2kz+8esH Pt8J2Ejza4LsE5uenzG5/cro+FJXb0x4n1aQG0I+Lx4I1K4xdHZm0HWu/0YNBDwE w/D1veBXsqLYUkk9RlpQApVGBjD/6y9x5JLAa3vhrUNw5CFUEvSi -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:33 2025 by rpki-client