This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214654.roa File: AS214654.roa (raw, json) Hash identifier: L3+cL2r5pBzcDQ/WHSxCn34G6eNT4TzvAmGbURQhQ+Q= Subject key identifier: 0E:12:96:E5:22:FE:B0:FA:72:48:5F:C0:EE:2E:EE:97:E6:83:29:60 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 35D93D8A4B35DF8E054F6B3530693697AC711BA4 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214654.roa Signing time: Wed 03 Dec 2025 09:51:48 +0000 ROA not before: Wed 03 Dec 2025 09:46:48 +0000 ROA not after: Wed 02 Dec 2026 09:51:48 +0000 asID: 214654 IP address blocks: 143.20.146.0/24 maxlen: 24 143.20.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d9:3d:8a:4b:35:df:8e:05:4f:6b:35:30:69:36:97:ac:71:1b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 3 09:46:48 2025 GMT Not After : Dec 2 09:51:48 2026 GMT Subject: CN=0E1296E522FEB0FA72485FC0EE2EEE97E6832960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:c4:cc:42:3e:45:9a:81:97:e7:74:3e:dc: 74:e9:73:0e:fa:a9:5f:3f:5f:4a:4e:7a:e9:a3:29: 92:49:97:a2:69:aa:14:b3:98:1b:df:6a:41:99:6e: 95:5d:37:e2:a2:5d:01:d5:f7:7a:e9:11:8e:9b:52: 56:b8:d8:f4:dc:1a:f0:1c:76:a2:85:52:3d:d3:90: 23:e3:4d:d4:88:5a:6d:3e:b8:4a:a7:fc:c2:1c:5b: df:6b:8e:aa:88:02:05:6c:d0:c8:64:fb:9f:e0:58: 8e:ff:46:33:0b:83:8f:92:b6:39:88:25:6c:b3:1e: e5:5e:2d:76:f4:5e:79:e9:a6:1a:8c:f3:b9:cc:33: d6:06:71:35:fb:39:60:43:fd:ea:f0:08:a6:a1:d6: 21:65:4c:92:89:8b:ca:36:10:04:fa:9d:31:dc:9c: 1a:e2:cc:72:6b:75:29:08:a1:8b:41:23:84:d2:84: 6c:31:c5:a4:b7:21:4a:35:da:c1:19:ba:7a:c7:77: 39:18:d4:02:35:30:d5:e7:0d:70:2c:5a:6d:22:9c: ec:c1:8c:d8:c0:78:1c:0e:60:e0:4f:b9:f7:28:a7: 3a:80:c4:7a:12:6a:57:1c:ca:40:a3:04:17:3f:a6: 07:75:7b:7a:4e:a4:d3:8d:01:c9:22:85:6c:71:31: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:12:96:E5:22:FE:B0:FA:72:48:5F:C0:EE:2E:EE:97:E6:83:29:60 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214654.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.146.0/24 143.20.148.0/24 Signature Algorithm: sha256WithRSAEncryption ca:cf:b5:cc:c9:a3:72:54:e0:5a:d7:30:9b:4f:15:79:b4:bf: 9d:c9:5c:35:01:fb:4f:b9:39:80:2b:75:68:4c:1d:42:e3:64: 8c:24:3c:9a:0a:70:79:74:27:0a:b7:9b:2c:f5:88:32:05:a7: ce:6a:ab:37:6b:74:61:52:3d:79:b3:ab:ee:81:0c:4e:35:a2: ca:2d:f2:90:c2:d1:5a:85:74:ee:75:f8:6c:95:99:35:3c:2f: 08:e7:dd:58:90:92:80:2c:7c:fb:26:16:27:e1:dd:5d:96:fd: d3:6c:e9:ee:0b:55:63:92:d7:0e:10:63:c3:29:d8:77:ce:4d: 08:05:ec:b1:8e:36:45:6d:a3:b1:72:e4:d4:0a:70:db:c8:86: ae:64:e9:9d:72:83:16:48:7b:3e:53:8e:2d:12:52:bc:74:ca: 63:23:e9:af:50:92:4b:e0:58:c3:5e:17:3a:44:66:97:c3:15: 59:60:0f:70:ae:42:bb:85:0a:e0:7d:13:fa:e0:36:0c:3b:f7: f0:d7:f8:a7:10:4d:23:14:c3:e1:d7:9c:a8:97:8f:48:11:d8: f2:67:60:e4:b3:06:0d:70:a9:4e:a3:de:ec:f0:13:de:34:ca: 63:4e:c4:91:35:b4:4f:5b:65:f8:d8:89:6f:77:5c:c3:80:fc: 74:a8:e9:c7 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUNdk9iks1344FT2s1MGk2l6xxG6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMDMwOTQ2NDhaFw0yNjEyMDIwOTUxNDhaMDMxMTAvBgNV BAMTKDBFMTI5NkU1MjJGRUIwRkE3MjQ4NUZDMEVFMkVFRTk3RTY4MzI5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDcTMQj5FmoGX53Q+3HTpcw76 qV8/X0pOeumjKZJJl6JpqhSzmBvfakGZbpVdN+KiXQHV93rpEY6bUla42PTcGvAc dqKFUj3TkCPjTdSIWm0+uEqn/MIcW99rjqqIAgVs0Mhk+5/gWI7/RjMLg4+StjmI JWyzHuVeLXb0XnnpphqM87nMM9YGcTX7OWBD/erwCKah1iFlTJKJi8o2EAT6nTHc nBrizHJrdSkIoYtBI4TShGwxxaS3IUo12sEZunrHdzkY1AI1MNXnDXAsWm0inOzB jNjAeBwOYOBPufcopzqAxHoSalccykCjBBc/pgd1e3pOpNONAckihWxxMZE7AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUDhKW5SL+sPpySF/A7i7ul+aDKWAwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE0NjU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxSS AwQAjxSUMA0GCSqGSIb3DQEBCwUAA4IBAQDKz7XMyaNyVOBa1zCbTxV5tL+dyVw1 AftPuTmAK3VoTB1C42SMJDyaCnB5dCcKt5ss9YgyBafOaqs3a3RhUj15s6vugQxO NaLKLfKQwtFahXTudfhslZk1PC8I591YkJKALHz7JhYn4d1dlv3TbOnuC1VjktcO EGPDKdh3zk0IBeyxjjZFbaOxcuTUCnDbyIauZOmdcoMWSHs+U44tElK8dMpjI+mv UJJL4FjDXhc6RGaXwxVZYA9wrkK7hQrgfRP64DYMO/fw1/inEE0jFMPh15yol49I EdjyZ2DkswYNcKlOo97s8BPeNMpjTsSRNbRPW2X42Ilvd1zDgPx0qOnH -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:21 2025 by rpki-client