This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: ZRUCdAywb55J7hm++r10ft1xR4VeuFwOeX12MSD/L1U= Subject key identifier: BE:D0:DB:35:0A:89:C9:DE:01:37:BB:BB:FB:56:B2:A7:72:02:B5:EB Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 5068C88A79AF79462C8113590CDB5094E93A2174 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS14618.roa Signing time: Mon 26 Jan 2026 09:04:07 +0000 ROA not before: Mon 26 Jan 2026 08:59:07 +0000 ROA not after: Mon 25 Jan 2027 09:04:07 +0000 asID: 14618 IP address blocks: 85.8.144.0/23 maxlen: 24 85.8.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:68:c8:8a:79:af:79:46:2c:81:13:59:0c:db:50:94:e9:3a:21:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Jan 26 08:59:07 2026 GMT Not After : Jan 25 09:04:07 2027 GMT Subject: CN=BED0DB350A89C9DE0137BBBBFB56B2A77202B5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:fd:14:0b:8b:de:ab:13:d7:d5:dd:95:d2: 63:f8:3c:32:f6:74:b5:04:0e:6b:21:8d:80:72:83: 93:b4:1d:7f:44:a1:fd:69:8f:e2:e5:d3:82:a1:35: 69:e3:15:65:b6:a0:74:7b:0c:77:df:8f:80:0f:8b: c6:a6:b6:3f:f1:87:bf:3e:07:87:51:a9:d2:04:3b: 63:aa:00:4e:36:b0:9b:2e:7b:e9:11:bb:c4:cb:88: 0b:1e:0a:cd:8c:ad:32:17:b8:cf:48:ce:b7:68:73: 73:e8:5b:88:ba:f9:88:94:89:07:0c:53:56:e8:58: 8b:9a:c8:1c:79:99:69:22:a3:0b:14:65:3f:6a:32: e1:03:ba:53:19:d0:09:a3:62:56:e0:8f:15:25:98: 8a:45:60:d8:99:71:31:10:ac:1f:69:70:2b:68:33: a6:fc:c4:6c:c1:b5:17:bd:f6:a7:7b:b6:05:ac:0b: 4d:dc:d4:43:72:55:ac:6e:c6:83:f8:73:d7:9f:49: 03:ed:f1:ca:32:e0:98:81:e9:0e:fd:d5:8b:4f:67: e6:d3:a8:6f:f7:97:6a:32:68:4b:74:e1:3e:25:4c: fc:dc:44:5f:d9:4b:0e:af:04:dc:47:11:7f:08:53: 51:f2:f8:fd:b5:71:38:b5:fe:94:70:cf:48:83:c2: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D0:DB:35:0A:89:C9:DE:01:37:BB:BB:FB:56:B2:A7:72:02:B5:EB X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.144.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:b6:f5:65:7d:9d:30:dc:51:8d:28:86:14:61:8e:bd:1d:43: 56:23:e7:ca:81:61:c4:7b:63:3b:35:b5:d3:4d:91:24:51:e5: af:d6:4f:a8:b9:b4:90:99:bb:fd:46:be:ed:e5:97:1a:ce:6f: 11:89:ee:cf:77:4f:fa:aa:eb:32:4e:8c:76:65:6c:02:5f:6c: b4:b7:2e:ab:6e:40:51:a2:69:f5:e8:19:eb:ea:fb:64:a1:07: a1:75:a8:e6:f9:04:29:5b:53:dc:b4:7b:51:68:79:8b:cf:61: eb:e6:4c:26:74:63:7b:85:df:95:0f:b7:bf:3e:2a:7b:be:b9: f9:4f:2e:4c:b5:c7:3c:57:73:80:48:56:ac:26:5b:a5:d5:71: 87:5a:2b:42:90:bc:a4:30:d6:1a:80:b0:ff:62:d4:a7:41:08: 76:0d:a7:b7:80:43:06:e2:32:b8:59:b8:12:83:b0:ac:99:f9: f5:6d:44:f4:9b:f8:8b:13:d2:dd:84:e1:a5:94:0f:1e:1a:3f: e4:16:94:11:79:2f:55:fc:e8:ef:67:a8:7e:c9:ac:f8:3d:2c: ec:8e:a5:89:93:eb:98:e0:46:6e:e2:e1:48:f8:0a:3f:43:57: f3:ae:45:23:4c:b9:1d:4d:6a:f8:9e:b7:a6:87:d5:4e:f2:6d: e2:6f:51:87 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUUGjIinmveUYsgRNZDNtQlOk6IXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNjAxMjYwODU5MDdaFw0yNzAxMjUwOTA0MDdaMDMxMTAvBgNV BAMTKEJFRDBEQjM1MEE4OUM5REUwMTM3QkJCQkZCNTZCMkE3NzIwMkI1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOv0UC4veqxPX1d2V0mP4PDL2 dLUEDmshjYByg5O0HX9Eof1pj+Ll04KhNWnjFWW2oHR7DHffj4APi8amtj/xh78+ B4dRqdIEO2OqAE42sJsue+kRu8TLiAseCs2MrTIXuM9Izrdoc3PoW4i6+YiUiQcM U1boWIuayBx5mWkiowsUZT9qMuEDulMZ0AmjYlbgjxUlmIpFYNiZcTEQrB9pcCto M6b8xGzBtRe99qd7tgWsC03c1ENyVaxuxoP4c9efSQPt8coy4JiB6Q791YtPZ+bT qG/3l2oyaEt04T4lTPzcRF/ZSw6vBNxHEX8IU1Hy+P21cTi1/pRwz0iDwtM1AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUvtDbNQqJyd4BN7u7+1ayp3ICteswHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJVCJAw DQYJKoZIhvcNAQELBQADggEBAC629WV9nTDcUY0ohhRhjr0dQ1Yj58qBYcR7Yzs1 tdNNkSRR5a/WT6i5tJCZu/1Gvu3llxrObxGJ7s93T/qq6zJOjHZlbAJfbLS3Lqtu QFGiafXoGevq+2ShB6F1qOb5BClbU9y0e1FoeYvPYevmTCZ0Y3uF35UPt78+Knu+ uflPLky1xzxXc4BIVqwmW6XVcYdaK0KQvKQw1hqAsP9i1KdBCHYNp7eAQwbiMrhZ uBKDsKyZ+fVtRPSb+IsT0t2E4aWUDx4aP+QWlBF5L1X86O9nqH7JrPg9LOyOpYmT 65jgRm7i4Uj4Cj9DV/OuRSNMuR1Naviet6aH1U7ybeJvUYc= -----END CERTIFICATE-----Generated at Mon Feb 2 17:36:53 2026 by rpki-client