This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214024.roa File: AS214024.roa (raw, json) Hash identifier: p1aeV9jiATmgAfJnJ/3kpeRn/SKhcpmVSX+RkLVndmM= Subject key identifier: 09:F2:F7:84:92:3F:EB:98:21:EC:85:8A:83:BF:F0:0B:9C:E4:82:C5 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 3F91A06886AF1D4C0D3B4210610B8761BF5827FB Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214024.roa Signing time: Tue 30 Dec 2025 03:20:07 +0000 ROA not before: Tue 30 Dec 2025 03:15:07 +0000 ROA not after: Tue 29 Dec 2026 03:20:07 +0000 asID: 214024 IP address blocks: 95.134.195.0/24 maxlen: 24 95.135.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:91:a0:68:86:af:1d:4c:0d:3b:42:10:61:0b:87:61:bf:58:27:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 30 03:15:07 2025 GMT Not After : Dec 29 03:20:07 2026 GMT Subject: CN=09F2F784923FEB9821EC858A83BFF00B9CE482C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:21:48:d4:b0:dc:b5:02:42:9f:74:1c:ee: 2a:84:eb:b5:62:1e:c3:8a:eb:5b:b9:c2:86:09:c0: 0b:3c:c4:b4:97:18:4d:b8:51:63:68:48:ad:fd:76: b5:45:09:f9:1f:9c:9b:f1:05:92:87:7a:89:07:2f: e1:3c:47:85:2c:95:37:d3:18:77:1c:e4:37:6c:51: 49:09:e7:e6:d5:a4:18:e5:7c:bf:0d:f2:52:06:77: f2:36:a2:1e:f4:16:75:28:f6:42:31:85:52:f0:f9: 13:52:e4:8d:e4:df:9d:53:45:8a:ee:01:1a:95:30: 65:46:58:a0:85:54:73:61:30:87:c6:3f:ad:0a:18: 5a:5c:e2:49:3e:b0:b8:8b:3c:01:5b:cf:b2:bc:c0: ef:f8:b3:d0:9d:40:1f:7e:03:4d:f0:69:2a:1f:64: 92:a1:a9:26:67:eb:a6:0b:63:83:12:71:5c:fe:72: dc:a0:9b:31:f9:19:e0:6a:0e:25:fe:e3:e6:51:60: da:34:56:69:98:6e:f1:bb:9e:53:70:88:34:ee:9f: da:de:5a:56:ab:dc:95:9c:46:51:b3:7a:61:d2:5d: 55:1f:f9:d6:c6:3a:11:10:0a:55:ad:0e:f4:1b:53: 52:2d:4f:4c:5b:29:0d:c4:39:7f:5a:13:e9:59:5e: 19:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:F7:84:92:3F:EB:98:21:EC:85:8A:83:BF:F0:0B:9C:E4:82:C5 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.134.195.0/24 95.135.80.0/24 Signature Algorithm: sha256WithRSAEncryption 09:05:5d:66:70:01:69:5a:fd:95:f6:d7:90:ed:fc:6f:58:62: be:41:74:db:33:9d:96:fb:43:41:a1:ea:b2:a0:86:0b:74:11: fd:5a:35:be:2e:9d:34:bc:1c:ee:5f:cc:78:c7:ad:8a:72:70: a2:0e:69:22:fa:3d:bf:bb:55:2e:17:52:fa:ac:4f:e8:75:2b: c6:43:81:de:2d:92:59:d9:fa:ec:a5:7a:f8:74:25:37:19:39: 50:da:dc:e1:92:b3:8b:e7:cf:e1:dd:ea:60:eb:83:00:79:d2: df:25:94:9a:5b:d6:1c:5d:f6:49:6d:ef:46:a2:25:16:b1:c8: 3c:81:cd:35:a0:4c:2f:d9:86:e5:4b:7a:b4:f7:dd:8d:71:48: 32:bd:f7:68:e5:8c:27:6e:18:18:4b:dc:ca:95:ce:9a:f0:ba: ea:dd:52:62:4f:b2:02:50:72:06:97:e5:98:1e:03:74:7a:b5: 29:c4:bc:38:b1:c5:41:d8:76:7e:94:f3:5c:da:6d:51:9e:1b: 6c:38:d1:0c:88:c2:29:01:bb:17:7c:a5:24:34:24:fd:cc:fe: 7c:23:45:38:5d:b6:53:b5:77:1e:36:c9:30:90:1e:9f:24:8c: 02:40:79:5f:c5:c0:5b:e0:08:7b:d4:d3:1a:4c:13:5c:c0:10: 12:2b:b7:6d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUP5GgaIavHUwNO0IQYQuHYb9YJ/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMzAwMzE1MDdaFw0yNjEyMjkwMzIwMDdaMDMxMTAvBgNV BAMTKDA5RjJGNzg0OTIzRkVCOTgyMUVDODU4QTgzQkZGMDBCOUNFNDgyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntSFI1LDctQJCn3Qc7iqE67Vi HsOK61u5woYJwAs8xLSXGE24UWNoSK39drVFCfkfnJvxBZKHeokHL+E8R4UslTfT GHcc5DdsUUkJ5+bVpBjlfL8N8lIGd/I2oh70FnUo9kIxhVLw+RNS5I3k351TRYru ARqVMGVGWKCFVHNhMIfGP60KGFpc4kk+sLiLPAFbz7K8wO/4s9CdQB9+A03waSof ZJKhqSZn66YLY4MScVz+ctygmzH5GeBqDiX+4+ZRYNo0VmmYbvG7nlNwiDTun9re Wlar3JWcRlGzemHSXVUf+dbGOhEQClWtDvQbU1ItT0xbKQ3EOX9aE+lZXhllAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUCfL3hJI/65gh7IWKg7/wC5zkgsUwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0MDI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4bD AwQAX4dQMA0GCSqGSIb3DQEBCwUAA4IBAQAJBV1mcAFpWv2V9teQ7fxvWGK+QXTb M52W+0NBoeqyoIYLdBH9WjW+Lp00vBzuX8x4x62KcnCiDmki+j2/u1UuF1L6rE/o dSvGQ4HeLZJZ2frspXr4dCU3GTlQ2tzhkrOL58/h3epg64MAedLfJZSaW9YcXfZJ be9GoiUWscg8gc01oEwv2YblS3q0992NcUgyvfdo5YwnbhgYS9zKlc6a8Lrq3VJi T7ICUHIGl+WYHgN0erUpxLw4scVB2HZ+lPNc2m1RnhtsONEMiMIpAbsXfKUkNCT9 zP58I0U4XbZTtXceNskwkB6fJIwCQHlfxcBb4Ah71NMaTBNcwBASK7dt -----END CERTIFICATE-----Generated at Wed Dec 31 06:42:05 2025 by rpki-client