This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214300.roa File: AS214300.roa (raw, json) Hash identifier: eE/hRWBQxBHljyEzC9/aGKrowiZ864wjsgk4efY7kLY= Subject key identifier: FF:4D:A7:1E:E8:26:10:F2:DC:51:BC:3F:C0:77:44:36:42:FF:60:AD Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 4EF6708CD7FCFA6D503F4BD9236649FBC99927A8 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214300.roa Signing time: Fri 26 Dec 2025 12:26:00 +0000 ROA not before: Fri 26 Dec 2025 12:21:00 +0000 ROA not after: Fri 25 Dec 2026 12:26:00 +0000 asID: 214300 IP address blocks: 95.134.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f6:70:8c:d7:fc:fa:6d:50:3f:4b:d9:23:66:49:fb:c9:99:27:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 26 12:21:00 2025 GMT Not After : Dec 25 12:26:00 2026 GMT Subject: CN=FF4DA71EE82610F2DC51BC3FC077443642FF60AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:76:88:7c:67:ca:11:6c:d0:1b:66:54:1a:f2: 6e:00:f2:6f:89:e0:47:ca:ca:3d:52:a9:15:e2:d1: 31:b7:6d:94:bf:c0:0b:ee:7c:45:2a:d2:36:de:54: 2f:50:33:74:fb:b8:ba:b2:84:35:67:5b:b5:ed:da: 3e:1e:5a:ed:4e:fb:71:79:61:f8:42:53:43:c3:3a: 4c:4b:7f:14:2e:6c:a8:bc:b3:4f:8d:6a:4b:9b:10: 89:6b:ba:a8:ad:d1:80:11:23:c5:2f:47:04:0f:c9: 5f:70:56:de:e8:72:54:2d:7b:81:fc:99:71:15:a8: 92:26:d9:29:b0:62:0b:50:b6:f9:db:13:5d:57:e3: 7d:14:0c:f6:af:f6:26:66:8f:31:fe:c5:f8:a1:d7: 00:b4:ca:39:c7:4f:db:22:37:b2:16:29:1f:1d:99: d2:43:3b:ff:be:d4:25:6b:8c:bd:42:87:d2:97:0e: f5:61:fb:ac:a8:0a:22:8f:ea:ec:ad:40:f6:2a:6f: 35:3d:6b:2e:11:87:20:f6:ba:6a:81:6c:1a:4c:dd: dd:a0:67:5a:dd:00:cf:f9:ad:a1:96:d2:1c:ab:a3: ce:09:90:38:a4:5f:54:17:2f:84:65:88:84:29:a8: 78:07:98:0e:c4:28:38:e7:a0:61:4c:13:1f:70:03: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4D:A7:1E:E8:26:10:F2:DC:51:BC:3F:C0:77:44:36:42:FF:60:AD X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.134.48.0/23 Signature Algorithm: sha256WithRSAEncryption 78:5c:7c:b3:59:b6:86:61:d8:cd:ae:9f:d2:33:44:83:e7:c1: 6f:13:d3:fd:06:56:e3:d5:27:46:02:62:ea:b3:93:6f:b2:92: 4e:73:ec:00:8f:7e:09:bd:11:8e:25:f7:63:e6:6a:b0:44:15: ea:ba:e1:8c:c5:f3:ad:c9:69:1c:56:b4:1e:aa:28:1f:a8:46: 68:0a:1f:07:a6:51:69:17:5b:be:d7:f1:07:7e:90:1e:46:2e: 86:17:e4:d7:8e:77:78:da:51:e2:38:54:91:f0:2f:14:11:7d: b3:f1:05:04:98:6d:39:97:52:43:3f:60:58:d8:0a:8e:9e:0e: ab:27:55:fb:08:4e:a4:1c:2e:2d:a8:1c:38:46:e9:ee:3b:20: 9b:3a:84:cb:21:65:3f:5d:9e:2d:67:28:0b:b9:77:72:b4:ef: a3:ea:83:c0:86:e7:32:6e:24:9f:d1:2f:02:fe:c0:e8:6c:7e: d2:77:00:59:ba:f9:db:4e:65:0e:22:2f:36:0b:68:44:f0:9b: 2c:67:ef:30:30:8e:3a:3b:ac:c7:4b:09:76:b3:53:1c:a6:1e: 6b:ec:b4:e3:3e:e6:1c:be:d6:00:cd:de:69:30:28:24:f5:cc: af:48:39:30:61:9d:83:85:5f:cb:16:3a:f9:a3:ca:9e:a4:a3: 69:27:99:96 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTvZwjNf8+m1QP0vZI2ZJ+8mZJ6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMjYxMjIxMDBaFw0yNjEyMjUxMjI2MDBaMDMxMTAvBgNV BAMTKEZGNERBNzFFRTgyNjEwRjJEQzUxQkMzRkMwNzc0NDM2NDJGRjYwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrdoh8Z8oRbNAbZlQa8m4A8m+J 4EfKyj1SqRXi0TG3bZS/wAvufEUq0jbeVC9QM3T7uLqyhDVnW7Xt2j4eWu1O+3F5 YfhCU0PDOkxLfxQubKi8s0+NakubEIlruqit0YARI8UvRwQPyV9wVt7oclQte4H8 mXEVqJIm2SmwYgtQtvnbE11X430UDPav9iZmjzH+xfih1wC0yjnHT9siN7IWKR8d mdJDO/++1CVrjL1Ch9KXDvVh+6yoCiKP6uytQPYqbzU9ay4RhyD2umqBbBpM3d2g Z1rdAM/5raGW0hyro84JkDikX1QXL4RliIQpqHgHmA7EKDjnoGFMEx9wA/JZAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU/02nHugmEPLcUbw/wHdENkL/YK0wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0MzAwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4Yw MA0GCSqGSIb3DQEBCwUAA4IBAQB4XHyzWbaGYdjNrp/SM0SD58FvE9P9Blbj1SdG AmLqs5NvspJOc+wAj34JvRGOJfdj5mqwRBXquuGMxfOtyWkcVrQeqigfqEZoCh8H plFpF1u+1/EHfpAeRi6GF+TXjnd42lHiOFSR8C8UEX2z8QUEmG05l1JDP2BY2AqO ng6rJ1X7CE6kHC4tqBw4RunuOyCbOoTLIWU/XZ4tZygLuXdytO+j6oPAhucybiSf 0S8C/sDobH7SdwBZuvnbTmUOIi82C2hE8JssZ+8wMI46O6zHSwl2s1Mcph5r7LTj PuYcvtYAzd5pMCgk9cyvSDkwYZ2DhV/LFjr5o8qepKNpJ5mW -----END CERTIFICATE-----Generated at Sat Dec 27 01:36:26 2025 by rpki-client