This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214454.roa File: AS214454.roa (raw, json) Hash identifier: LX599rXBWCQcRG0W1Ohz3Bu2VxoRwxDioRLLyxCkpLM= Subject key identifier: 05:6D:80:9C:E5:D4:FD:3D:C6:5F:33:AA:70:FC:84:CA:6D:C4:B6:1D Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 54F3C8F6F10A5A9BFB86F328CEC96159CA139AEE Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214454.roa Signing time: Wed 31 Dec 2025 05:38:41 +0000 ROA not before: Wed 31 Dec 2025 05:33:41 +0000 ROA not after: Wed 30 Dec 2026 05:38:41 +0000 asID: 214454 IP address blocks: 141.11.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f3:c8:f6:f1:0a:5a:9b:fb:86:f3:28:ce:c9:61:59:ca:13:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 31 05:33:41 2025 GMT Not After : Dec 30 05:38:41 2026 GMT Subject: CN=056D809CE5D4FD3DC65F33AA70FC84CA6DC4B61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:6d:18:a5:4c:b8:de:e2:70:5a:bb:de:f3: 9d:d1:94:4d:a2:74:18:e5:3b:46:5b:44:d7:03:05: b8:45:c6:fa:3c:f0:53:42:e5:91:c9:bc:4a:26:da: d3:39:b0:b9:89:bf:72:a7:dc:ca:6b:99:98:c7:9a: 0f:32:5c:51:59:a5:60:b9:ba:d8:3c:ff:d6:6e:21: d7:55:64:59:24:0d:43:47:a6:77:77:22:fe:49:f3: 4a:61:00:6d:93:f0:df:dc:d6:07:54:c8:d2:a8:1b: 06:9e:12:25:f6:37:7b:bf:c9:d9:c2:93:3e:89:77: 62:ec:1b:13:68:67:95:98:c4:8d:9a:30:5a:e6:41: 00:aa:2a:b5:58:7b:fb:a6:4e:0e:48:5c:fb:06:2c: f6:37:e8:56:26:9b:fd:ee:85:ee:79:43:3f:e9:6f: 9c:b4:4c:e9:81:7d:5b:0c:8e:ec:a5:1f:78:92:d4: 05:93:3a:a7:8c:d3:f4:af:b2:6c:1b:e7:06:2d:0c: a0:5e:c8:17:25:ab:09:3c:2d:64:b5:43:f3:99:a7: 89:92:e9:c3:2e:cf:98:20:ed:a9:ac:b6:ca:50:ad: 58:cd:0c:24:53:67:90:a5:c6:7b:ea:b0:33:04:c2: 01:82:7f:d9:0a:36:0b:d8:e8:32:c4:e9:a3:cd:98: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6D:80:9C:E5:D4:FD:3D:C6:5F:33:AA:70:FC:84:CA:6D:C4:B6:1D X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.238.0/23 Signature Algorithm: sha256WithRSAEncryption c4:f4:c6:5b:77:dd:97:33:49:86:b4:b4:92:4d:05:0d:9f:9c: d5:10:a4:f0:20:0f:63:17:be:e0:3f:d4:a3:2d:07:bd:5d:a4: ec:78:6d:65:fb:59:ff:e5:6e:e0:d3:4f:82:24:cd:19:66:0b: 00:41:76:a4:7e:8e:62:07:75:2f:bb:5d:05:7d:a4:c3:45:03: 98:db:04:cb:6f:b0:55:6a:9b:d4:8f:72:53:8b:cc:b8:b7:1b: e3:6c:bd:3f:6f:54:7d:84:9f:d8:82:2f:15:0c:0a:c4:8f:90: e7:1d:f6:b1:bb:0c:b5:f9:9c:35:f0:ae:80:8a:a9:2d:32:66: 49:59:56:e7:db:2d:bc:47:f2:2d:51:e6:55:77:bc:e8:50:34: e7:3f:18:5e:8e:df:66:90:7a:31:2d:41:06:d3:9c:9c:62:5e: 8a:81:f4:d8:3d:5d:ac:9b:66:19:0e:6c:a0:8e:e6:96:fe:f8: 31:42:eb:92:f8:e2:31:b7:59:91:52:14:99:27:6a:15:5a:70: 5f:9f:a4:44:57:7c:75:25:d8:5d:0e:1b:1c:0a:7b:e9:a6:f3: c2:9d:43:5f:f2:11:28:cd:48:80:f3:14:a5:74:d9:0d:92:4e: 64:34:ea:91:52:cb:3d:cd:f6:51:9c:db:62:d8:2d:cc:9d:0c: fd:2c:55:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVPPI9vEKWpv7hvMozslhWcoTmu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMzEwNTMzNDFaFw0yNjEyMzAwNTM4NDFaMDMxMTAvBgNV BAMTKDA1NkQ4MDlDRTVENEZEM0RDNjVGMzNBQTcwRkM4NENBNkRDNEI2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC420YpUy43uJwWrve853RlE2i dBjlO0ZbRNcDBbhFxvo88FNC5ZHJvEom2tM5sLmJv3Kn3MprmZjHmg8yXFFZpWC5 utg8/9ZuIddVZFkkDUNHpnd3Iv5J80phAG2T8N/c1gdUyNKoGwaeEiX2N3u/ydnC kz6Jd2LsGxNoZ5WYxI2aMFrmQQCqKrVYe/umTg5IXPsGLPY36FYmm/3uhe55Qz/p b5y0TOmBfVsMjuylH3iS1AWTOqeM0/Svsmwb5wYtDKBeyBclqwk8LWS1Q/OZp4mS 6cMuz5gg7amstspQrVjNDCRTZ5ClxnvqsDMEwgGCf9kKNgvY6DLE6aPNmMuhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUBW2AnOXU/T3GXzOqcPyEym3Eth0wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0NDU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQvu MA0GCSqGSIb3DQEBCwUAA4IBAQDE9MZbd92XM0mGtLSSTQUNn5zVEKTwIA9jF77g P9SjLQe9XaTseG1l+1n/5W7g00+CJM0ZZgsAQXakfo5iB3Uvu10FfaTDRQOY2wTL b7BVapvUj3JTi8y4txvjbL0/b1R9hJ/Ygi8VDArEj5DnHfaxuwy1+Zw18K6Aiqkt MmZJWVbn2y28R/ItUeZVd7zoUDTnPxhejt9mkHoxLUEG05ycYl6KgfTYPV2sm2YZ DmygjuaW/vgxQuuS+OIxt1mRUhSZJ2oVWnBfn6REV3x1JdhdDhscCnvppvPCnUNf 8hEozUiA8xSldNkNkk5kNOqRUss9zfZRnNti2C3MnQz9LFXR -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:43 2026 by rpki-client