This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS60614.roa File: AS60614.roa (raw, json) Hash identifier: ZfVgXbSSgV4+hYDdJmzCoKLxNsabzHA1mG2P6XQQph0= Subject key identifier: BF:D4:61:8A:04:10:1D:7A:AD:04:38:F1:E4:11:2E:2B:86:F6:7A:EC Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3DF2D8776F67842839CE3754B259BD5148B472A2 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS60614.roa Signing time: Tue 06 Jan 2026 01:00:43 +0000 ROA not before: Tue 06 Jan 2026 00:55:43 +0000 ROA not after: Tue 05 Jan 2027 01:00:43 +0000 asID: 60614 IP address blocks: 2a14:7580:f000::/40 maxlen: 48 2a14:7581:9d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f2:d8:77:6f:67:84:28:39:ce:37:54:b2:59:bd:51:48:b4:72:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:43 2026 GMT Not After : Jan 5 01:00:43 2027 GMT Subject: CN=BFD4618A04101D7AAD0438F1E4112E2B86F67AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:2c:c7:a0:6c:74:5c:5a:06:89:48:33:40: ec:a3:5e:2e:e8:cf:d6:d3:db:da:d8:5e:90:88:5c: bc:ef:49:53:d4:ed:ab:24:a5:f9:71:cb:90:11:e6: a8:dd:ef:ff:76:a9:31:3c:68:5e:bf:e7:ab:c2:a9: fe:e9:61:01:63:12:6f:88:65:0e:57:03:7a:c7:02: 59:65:e1:cd:b1:b8:a6:c3:e6:25:26:1f:f0:fa:96: a2:f2:a9:9b:a0:30:ea:99:55:80:0d:4b:ed:11:c1: 2f:99:93:3f:34:fd:ee:4e:ee:c6:12:a4:be:64:06: 61:4f:8f:3f:ed:68:6e:00:0a:ad:f0:08:31:95:08: fb:3a:f0:65:8a:37:92:be:ab:14:6a:b3:30:c7:cb: f4:88:d4:c7:82:1a:46:0a:4b:6c:82:84:26:76:5a: dd:f2:2b:bf:7f:07:bc:40:fa:c4:56:a3:50:b1:13: a5:3a:0c:85:b8:25:70:41:e1:d8:04:e8:7c:7f:f8: e2:16:dc:04:0d:31:1d:92:72:cc:e7:ee:50:61:8e: e1:dd:a1:c6:19:3a:15:9e:a7:23:85:4c:f7:8c:68: c7:de:0e:54:de:5c:b2:6c:65:85:46:16:60:1c:fd: 14:b1:67:bf:1a:e3:b6:50:87:00:0d:7e:17:8c:a0: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:61:8A:04:10:1D:7A:AD:04:38:F1:E4:11:2E:2B:86:F6:7A:EC X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS60614.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f000::/40 2a14:7581:9d00::/40 Signature Algorithm: sha256WithRSAEncryption 8a:a9:1b:40:72:d6:8a:ef:f1:2a:28:34:da:91:68:e0:bb:e8: de:23:d9:06:c2:06:3a:7d:a9:94:2c:d8:eb:6b:d3:c8:61:61: 23:53:61:47:85:c6:ff:44:c4:2f:ff:c9:eb:d4:b3:1c:df:07: c9:47:eb:57:73:3c:f5:80:c7:ea:05:d4:5b:63:47:14:ab:14: 1f:97:c6:96:7f:02:b4:2f:a1:47:f2:45:cd:3a:f5:c3:41:83: 0b:df:33:74:e6:f1:32:9b:a6:6c:e1:80:28:ee:3c:c4:91:83: 3d:40:e8:67:e8:3a:21:a1:15:2a:eb:16:00:8b:00:f2:1a:8e: ca:ec:50:e4:dd:cc:c3:fe:81:85:e5:02:f7:1c:2b:a7:5d:88: ad:9e:5d:a4:31:b2:2b:e4:8b:aa:e5:da:81:68:c0:44:d7:47: 16:7b:1b:92:52:66:58:d5:af:c1:bc:6c:e8:c0:3e:49:27:de: 92:27:bc:65:d3:fe:84:b9:ad:ae:f6:b1:0c:4a:56:ad:89:0b: 80:f8:3f:ae:32:b4:82:74:a3:78:0e:b1:98:9f:62:7c:18:e9: 71:cb:61:f5:a9:b6:7d:58:4a:46:81:6e:12:ae:50:ba:07:cb: 02:0a:dd:75:ed:60:ab:b3:cc:a7:39:1b:00:61:60:8e:62:dd: b4:35:6e:7f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUPfLYd29nhCg5zjdUslm9UUi0cqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDNaFw0yNzAxMDUwMTAwNDNaMDMxMTAvBgNV BAMTKEJGRDQ2MThBMDQxMDFEN0FBRDA0MzhGMUU0MTEyRTJCODZGNjdBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4CzHoGx0XFoGiUgzQOyjXi7o z9bT29rYXpCIXLzvSVPU7askpflxy5AR5qjd7/92qTE8aF6/56vCqf7pYQFjEm+I ZQ5XA3rHAlll4c2xuKbD5iUmH/D6lqLyqZugMOqZVYANS+0RwS+Zkz80/e5O7sYS pL5kBmFPjz/taG4ACq3wCDGVCPs68GWKN5K+qxRqszDHy/SI1MeCGkYKS2yChCZ2 Wt3yK79/B7xA+sRWo1CxE6U6DIW4JXBB4dgE6Hx/+OIW3AQNMR2Scszn7lBhjuHd ocYZOhWepyOFTPeMaMfeDlTeXLJsZYVGFmAc/RSxZ78a47ZQhwANfheMoL45AgMB AAGjggITMIICDzAdBgNVHQ4EFgQUv9RhigQQHXqtBDjx5BEuK4b2euwwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNjA2MTQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqFHWA 8AMGACoUdYGdMA0GCSqGSIb3DQEBCwUAA4IBAQCKqRtActaK7/EqKDTakWjgu+je I9kGwgY6famULNjra9PIYWEjU2FHhcb/RMQv/8nr1LMc3wfJR+tXczz1gMfqBdRb Y0cUqxQfl8aWfwK0L6FH8kXNOvXDQYML3zN05vEym6Zs4YAo7jzEkYM9QOhn6Doh oRUq6xYAiwDyGo7K7FDk3czD/oGF5QL3HCunXYitnl2kMbIr5Iuq5dqBaMBE10cW exuSUmZY1a/BvGzowD5JJ96SJ7xl0/6Eua2u9rEMSlatiQuA+D+uMrSCdKN4DrGY n2J8GOlxy2H1qbZ9WEpGgW4SrlC6B8sCCt117WCrs8ynORsAYWCOYt20NW5/ -----END CERTIFICATE-----Generated at Fri Jan 9 18:20:41 2026 by rpki-client