This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214408.roa File: AS214408.roa (raw, json) Hash identifier: Oo4+zpvVOTb/TiHsMEeZ7mBXNYBUmniJne9h5weG/6g= Subject key identifier: 89:84:64:B8:80:92:7D:54:C1:2E:B5:49:67:42:86:31:9D:06:B2:2B Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3A6A84A7769B6AC762C090F5ACE5F4C09BDCE40F Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214408.roa Signing time: Sat 13 Dec 2025 20:10:13 +0000 ROA not before: Sat 13 Dec 2025 20:05:13 +0000 ROA not after: Sat 12 Dec 2026 20:10:13 +0000 asID: 214408 IP address blocks: 2a14:7581:fb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6a:84:a7:76:9b:6a:c7:62:c0:90:f5:ac:e5:f4:c0:9b:dc:e4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 13 20:05:13 2025 GMT Not After : Dec 12 20:10:13 2026 GMT Subject: CN=898464B880927D54C12EB549674286319D06B22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:f9:c8:03:a8:66:94:b0:f6:5d:2f:b1:03: 59:41:a8:f8:5f:63:50:56:fd:ca:26:17:67:c4:2a: 10:2d:c4:3a:d9:62:29:76:a9:e9:26:22:5b:37:14: d7:99:bd:7a:9f:33:1f:d2:7d:29:69:71:29:5d:ce: 4c:47:03:0f:dc:2f:7d:07:e9:03:78:18:34:30:19: 2b:28:b4:af:97:95:10:c3:b5:26:8f:e4:78:5c:9c: 7e:a3:24:12:65:1c:04:10:e5:2b:d3:37:6e:91:f6: e5:39:54:9c:61:ef:a5:07:9c:99:06:41:b6:a5:81: 85:66:41:42:08:62:3e:ed:c7:6d:9e:3f:4a:e0:80: 41:f5:75:1f:c6:6d:69:f6:ea:79:a7:65:92:86:ea: 1d:84:1f:11:73:7e:b5:cf:34:e8:29:2c:62:51:37: db:77:ce:09:c0:25:9d:a7:c8:ea:46:8a:45:2f:ef: 1e:f0:26:72:dd:6c:80:d1:83:83:82:52:1a:c7:50: fc:43:5e:70:5b:67:ca:f8:f4:22:84:87:6a:49:5b: 49:6e:a9:06:f4:bc:3d:a1:e7:d3:d0:94:39:c9:0b: 66:77:db:df:10:04:4e:56:2d:35:6f:ba:c9:fb:55: 23:5e:ed:d6:0c:75:5e:c0:f5:4b:72:cb:13:99:ff: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:64:B8:80:92:7D:54:C1:2E:B5:49:67:42:86:31:9D:06:B2:2B X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214408.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:fb0::/44 Signature Algorithm: sha256WithRSAEncryption 7a:ca:04:d9:cf:55:e0:c7:dd:63:9b:ef:6a:07:4f:d3:39:ac: 84:2d:28:8e:95:0a:92:d7:40:37:78:bb:d2:f9:7b:76:49:34: 00:26:da:c1:6e:46:a3:e1:e7:80:69:0b:14:61:70:1f:7a:5b: 40:79:f8:3c:3d:6a:47:c0:46:d2:c2:84:f2:47:a9:52:17:5d: 88:5d:a3:66:b1:c4:ca:9a:1e:f8:f1:82:67:a2:74:d1:e2:b8: 67:5a:d3:6b:48:b4:e3:95:f3:68:71:9b:84:cb:d0:12:e1:c7: 28:a5:53:df:12:4b:a5:1c:ec:12:7a:6c:8f:85:18:82:dd:cf: 44:b4:66:0e:17:d0:d2:6b:cc:59:f9:9b:a2:b4:5f:6f:11:93: df:94:d3:3b:06:3b:91:49:0e:a7:2d:b0:d5:6b:3c:3f:2b:23: 8a:39:2e:2b:09:84:dd:b9:92:05:d0:7b:ea:25:24:dc:6c:b3: bf:8b:57:70:1f:ce:93:a9:f3:d4:40:36:44:27:1a:93:5f:cf: 2b:14:d6:21:67:ac:f1:a2:5e:04:a1:14:4e:48:17:1c:15:8e: 81:f3:db:3e:2e:a8:a8:5a:8f:6b:61:f3:fd:4a:6f:94:14:9c: 92:bd:b1:d3:20:de:a9:c2:af:d8:e1:cf:ae:f7:b7:39:81:ca: ad:29:5b:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOmqEp3abasdiwJD1rOX0wJvc5A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTMyMDA1MTNaFw0yNjEyMTIyMDEwMTNaMDMxMTAvBgNV BAMTKDg5ODQ2NEI4ODA5MjdENTRDMTJFQjU0OTY3NDI4NjMxOUQwNkIyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/vnIA6hmlLD2XS+xA1lBqPhf Y1BW/comF2fEKhAtxDrZYil2qekmIls3FNeZvXqfMx/SfSlpcSldzkxHAw/cL30H 6QN4GDQwGSsotK+XlRDDtSaP5HhcnH6jJBJlHAQQ5SvTN26R9uU5VJxh76UHnJkG QbalgYVmQUIIYj7tx22eP0rggEH1dR/GbWn26nmnZZKG6h2EHxFzfrXPNOgpLGJR N9t3zgnAJZ2nyOpGikUv7x7wJnLdbIDRg4OCUhrHUPxDXnBbZ8r49CKEh2pJW0lu qQb0vD2h59PQlDnJC2Z3298QBE5WLTVvusn7VSNe7dYMdV7A9UtyyxOZ/2xJAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUiYRkuICSfVTBLrVJZ0KGMZ0GsiswHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0NDA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gQ+wMA0GCSqGSIb3DQEBCwUAA4IBAQB6ygTZz1Xgx91jm+9qB0/TOayELSiOlQqS 10A3eLvS+Xt2STQAJtrBbkaj4eeAaQsUYXAfeltAefg8PWpHwEbSwoTyR6lSF12I XaNmscTKmh748YJnonTR4rhnWtNrSLTjlfNocZuEy9AS4ccopVPfEkulHOwSemyP hRiC3c9EtGYOF9DSa8xZ+ZuitF9vEZPflNM7BjuRSQ6nLbDVazw/KyOKOS4rCYTd uZIF0HvqJSTcbLO/i1dwH86TqfPUQDZEJxqTX88rFNYhZ6zxol4EoRROSBccFY6B 89s+LqioWo9rYfP9Sm+UFJySvbHTIN6pwq/Y4c+u97c5gcqtKVsg -----END CERTIFICATE-----Generated at Sun Dec 14 14:46:38 2025 by rpki-client