This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: /+JmGUX9kVFTlL3rrHDvQEauU4lVCkpMyKziY8MLGEo= Subject key identifier: BB:FF:96:06:7E:9D:37:D4:EB:FB:7C:3B:71:27:C6:70:ED:AE:65:A0 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6EB0A60C8F7F1C3887BCF5A6D286F37E949068E9 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa Signing time: Thu 11 Dec 2025 03:14:19 +0000 ROA not before: Thu 11 Dec 2025 03:09:19 +0000 ROA not after: Thu 10 Dec 2026 03:14:19 +0000 asID: 2914 IP address blocks: 96.62.32.0/24 maxlen: 24 96.62.33.0/24 maxlen: 24 96.62.34.0/24 maxlen: 24 96.62.35.0/24 maxlen: 24 96.62.36.0/24 maxlen: 24 96.62.38.0/24 maxlen: 24 96.62.39.0/24 maxlen: 24 96.62.40.0/24 maxlen: 24 96.62.41.0/24 maxlen: 24 96.62.42.0/24 maxlen: 24 96.62.43.0/24 maxlen: 24 96.62.44.0/24 maxlen: 24 96.62.46.0/24 maxlen: 24 96.62.64.0/24 maxlen: 24 96.62.65.0/24 maxlen: 24 96.62.66.0/24 maxlen: 24 96.62.67.0/24 maxlen: 24 96.62.68.0/24 maxlen: 24 96.62.70.0/24 maxlen: 24 96.62.102.0/24 maxlen: 24 96.62.104.0/24 maxlen: 24 96.62.106.0/24 maxlen: 24 96.62.107.0/24 maxlen: 24 96.62.108.0/24 maxlen: 24 96.62.109.0/24 maxlen: 24 96.62.110.0/24 maxlen: 24 96.62.112.0/24 maxlen: 24 96.62.113.0/24 maxlen: 24 96.62.116.0/24 maxlen: 24 96.62.117.0/24 maxlen: 24 96.62.118.0/24 maxlen: 24 96.62.119.0/24 maxlen: 24 96.62.120.0/24 maxlen: 24 96.62.121.0/24 maxlen: 24 96.62.122.0/24 maxlen: 24 96.62.123.0/24 maxlen: 24 96.62.124.0/24 maxlen: 24 96.62.125.0/24 maxlen: 24 96.62.126.0/24 maxlen: 24 96.62.132.0/24 maxlen: 24 96.62.133.0/24 maxlen: 24 96.62.134.0/24 maxlen: 24 96.62.136.0/24 maxlen: 24 96.62.137.0/24 maxlen: 24 96.62.138.0/24 maxlen: 24 96.62.139.0/24 maxlen: 24 96.62.141.0/24 maxlen: 24 96.62.142.0/24 maxlen: 24 96.62.143.0/24 maxlen: 24 96.62.144.0/23 maxlen: 24 96.62.146.0/24 maxlen: 24 96.62.147.0/24 maxlen: 24 96.62.156.0/22 maxlen: 24 96.62.160.0/24 maxlen: 24 96.62.161.0/24 maxlen: 24 96.62.162.0/24 maxlen: 24 96.62.163.0/24 maxlen: 24 96.62.164.0/24 maxlen: 24 96.62.165.0/24 maxlen: 24 96.62.166.0/24 maxlen: 24 96.62.167.0/24 maxlen: 24 96.62.168.0/24 maxlen: 24 96.62.169.0/24 maxlen: 24 96.62.170.0/24 maxlen: 24 96.62.171.0/24 maxlen: 24 96.62.172.0/24 maxlen: 24 96.62.173.0/24 maxlen: 24 96.62.174.0/24 maxlen: 24 96.62.175.0/24 maxlen: 24 96.62.177.0/24 maxlen: 24 96.62.178.0/24 maxlen: 24 96.62.179.0/24 maxlen: 24 96.62.188.0/24 maxlen: 24 96.62.189.0/24 maxlen: 24 96.62.196.0/24 maxlen: 24 96.62.198.0/24 maxlen: 24 96.62.199.0/24 maxlen: 24 96.62.212.0/24 maxlen: 24 96.62.213.0/24 maxlen: 24 96.62.215.0/24 maxlen: 24 96.62.225.0/24 maxlen: 24 96.62.226.0/24 maxlen: 24 96.62.230.0/24 maxlen: 24 96.62.236.0/24 maxlen: 24 96.62.237.0/24 maxlen: 24 96.62.238.0/24 maxlen: 24 96.62.239.0/24 maxlen: 24 96.62.240.0/24 maxlen: 24 96.62.241.0/24 maxlen: 24 96.62.245.0/24 maxlen: 24 96.62.246.0/24 maxlen: 24 96.62.252.0/24 maxlen: 24 143.14.60.0/24 maxlen: 24 143.14.61.0/24 maxlen: 24 143.14.72.0/24 maxlen: 24 143.14.84.0/24 maxlen: 24 143.14.85.0/24 maxlen: 24 143.14.108.0/24 maxlen: 24 143.14.109.0/24 maxlen: 24 143.14.154.0/24 maxlen: 24 155.117.101.0/24 maxlen: 24 155.117.104.0/24 maxlen: 24 155.117.160.0/24 maxlen: 24 162.141.16.0/24 maxlen: 24 162.141.18.0/24 maxlen: 24 162.141.20.0/24 maxlen: 24 162.141.45.0/24 maxlen: 24 162.141.53.0/24 maxlen: 24 162.141.81.0/24 maxlen: 24 162.141.89.0/24 maxlen: 24 162.141.99.0/24 maxlen: 24 162.141.102.0/24 maxlen: 24 162.141.132.0/24 maxlen: 24 162.141.143.0/24 maxlen: 24 162.141.154.0/24 maxlen: 24 162.141.162.0/24 maxlen: 24 162.141.176.0/24 maxlen: 24 162.141.177.0/24 maxlen: 24 162.141.182.0/24 maxlen: 24 167.148.7.0/24 maxlen: 24 167.148.9.0/24 maxlen: 24 167.148.11.0/24 maxlen: 24 167.148.13.0/24 maxlen: 24 167.148.31.0/24 maxlen: 24 167.148.32.0/24 maxlen: 24 167.148.34.0/24 maxlen: 24 167.148.47.0/24 maxlen: 24 167.148.71.0/24 maxlen: 24 167.148.72.0/24 maxlen: 24 167.148.73.0/24 maxlen: 24 167.148.74.0/24 maxlen: 24 167.148.99.0/24 maxlen: 24 167.148.101.0/24 maxlen: 24 167.148.103.0/24 maxlen: 24 167.148.107.0/24 maxlen: 24 167.148.113.0/24 maxlen: 24 167.148.114.0/24 maxlen: 24 167.148.124.0/24 maxlen: 24 167.148.129.0/24 maxlen: 24 167.148.132.0/24 maxlen: 24 167.148.133.0/24 maxlen: 24 167.148.137.0/24 maxlen: 24 167.148.142.0/24 maxlen: 24 167.148.143.0/24 maxlen: 24 167.148.146.0/24 maxlen: 24 167.148.151.0/24 maxlen: 24 167.148.155.0/24 maxlen: 24 167.148.160.0/24 maxlen: 24 167.148.174.0/24 maxlen: 24 167.148.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b0:a6:0c:8f:7f:1c:38:87:bc:f5:a6:d2:86:f3:7e:94:90:68:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 11 03:09:19 2025 GMT Not After : Dec 10 03:14:19 2026 GMT Subject: CN=BBFF96067E9D37D4EBFB7C3B7127C670EDAE65A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:18:52:58:2a:5e:5e:16:cf:e6:0c:a7:74: eb:54:73:e7:62:46:bb:ca:a6:cb:76:d9:54:b3:6f: a4:f3:eb:0c:8c:44:89:6c:64:e8:31:98:49:6c:27: 27:aa:c9:6e:84:25:f5:b6:5d:ca:fa:5e:3c:28:2a: 5c:f8:28:47:ae:bf:bd:3f:38:80:b5:2e:b9:bb:1f: d6:0b:24:70:01:1c:f7:15:a5:b9:37:1f:57:80:54: 2f:dd:f1:30:a2:39:5d:9f:aa:49:a8:df:3e:c8:91: c1:35:d7:8f:dd:6f:04:fa:5a:f6:5e:7e:1e:89:0a: 90:00:ec:8d:b7:cc:ca:0d:d1:f7:15:fd:a0:23:fd: 21:1e:af:74:ef:31:33:fd:71:32:a7:75:bc:dd:db: dc:4f:7e:aa:2d:ec:29:5e:92:3f:6d:ac:01:42:61: 13:af:da:e6:46:e1:59:da:ef:08:76:32:1b:7f:db: 79:9c:dd:c5:0b:04:de:00:7b:51:8a:87:ba:b0:70: ba:f1:2c:71:96:43:c9:43:65:7e:e7:60:bd:95:9e: 7c:3e:bc:c5:07:3b:e8:ee:9e:9c:a6:0e:0f:c9:36: 54:f3:84:27:cc:2d:8c:32:5c:61:2a:cb:22:ad:5a: bf:4d:17:02:70:9a:0d:90:9f:ca:92:09:11:70:29: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FF:96:06:7E:9D:37:D4:EB:FB:7C:3B:71:27:C6:70:ED:AE:65:A0 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.32.0-96.62.36.255 96.62.38.0-96.62.44.255 96.62.46.0/24 96.62.64.0-96.62.68.255 96.62.70.0/24 96.62.102.0/24 96.62.104.0/24 96.62.106.0-96.62.110.255 96.62.112.0/23 96.62.116.0-96.62.126.255 96.62.132.0-96.62.134.255 96.62.136.0/22 96.62.141.0-96.62.147.255 96.62.156.0-96.62.175.255 96.62.177.0-96.62.179.255 96.62.188.0/23 96.62.196.0/24 96.62.198.0/23 96.62.212.0/23 96.62.215.0/24 96.62.225.0-96.62.226.255 96.62.230.0/24 96.62.236.0-96.62.241.255 96.62.245.0-96.62.246.255 96.62.252.0/24 143.14.60.0/23 143.14.72.0/24 143.14.84.0/23 143.14.108.0/23 143.14.154.0/24 155.117.101.0/24 155.117.104.0/24 155.117.160.0/24 162.141.16.0/24 162.141.18.0/24 162.141.20.0/24 162.141.45.0/24 162.141.53.0/24 162.141.81.0/24 162.141.89.0/24 162.141.99.0/24 162.141.102.0/24 162.141.132.0/24 162.141.143.0/24 162.141.154.0/24 162.141.162.0/24 162.141.176.0/23 162.141.182.0/24 167.148.7.0/24 167.148.9.0/24 167.148.11.0/24 167.148.13.0/24 167.148.31.0-167.148.32.255 167.148.34.0/24 167.148.47.0/24 167.148.71.0-167.148.74.255 167.148.99.0/24 167.148.101.0/24 167.148.103.0/24 167.148.107.0/24 167.148.113.0-167.148.114.255 167.148.124.0/24 167.148.129.0/24 167.148.132.0/23 167.148.137.0/24 167.148.142.0/23 167.148.146.0/24 167.148.151.0/24 167.148.155.0/24 167.148.160.0/24 167.148.174.0/24 167.148.176.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:e5:34:a3:85:21:24:a0:4c:e3:a8:82:62:62:f9:fe:fe:05: c6:4c:c7:c0:de:f1:d9:2d:6a:3a:80:c4:b0:74:a3:a6:50:a0: f1:45:5a:a7:07:77:f1:fc:49:1f:76:7e:59:04:08:71:db:a9: cc:af:f7:76:60:b2:43:2d:06:8c:18:66:e2:c3:7d:05:e1:4a: 4a:f9:de:d0:4f:04:17:04:7a:71:81:7b:1c:00:75:86:73:90: dc:d8:19:4c:63:35:90:3e:08:b3:6c:76:a0:18:46:38:8c:1d: d5:1a:e2:18:f4:70:f2:9d:fa:cb:97:b9:8e:2c:56:05:a5:e2: 03:74:73:a2:fc:10:0b:54:7c:ef:56:8e:4d:ae:87:64:70:92: c5:96:88:19:30:13:96:09:80:25:12:3a:54:13:b4:e0:d8:59: 46:3b:84:9b:4a:bc:51:9d:13:b6:94:4c:9c:b1:34:fa:30:ac: a6:0a:90:55:01:43:4f:f3:30:1e:7e:7b:de:5a:02:e0:c4:3e: 3d:ff:81:41:26:af:99:b5:8f:87:0b:42:59:fd:c8:26:32:c2: 34:71:91:d4:c4:88:2c:dd:81:2f:ba:22:74:61:8b:7f:af:3f: 34:e1:09:71:de:b5:ed:da:2a:bd:3a:61:7e:02:58:80:c2:a1: 79:61:2b:72 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUbrCmDI9/HDiHvPWm0obzfpSQaOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTEwMzA5MTlaFw0yNjEyMTAwMzE0MTlaMDMxMTAvBgNV BAMTKEJCRkY5NjA2N0U5RDM3RDRFQkZCN0MzQjcxMjdDNjcwRURBRTY1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvBhSWCpeXhbP5gyndOtUc+di RrvKpst22VSzb6Tz6wyMRIlsZOgxmElsJyeqyW6EJfW2Xcr6XjwoKlz4KEeuv70/ OIC1Lrm7H9YLJHABHPcVpbk3H1eAVC/d8TCiOV2fqkmo3z7IkcE114/dbwT6WvZe fh6JCpAA7I23zMoN0fcV/aAj/SEer3TvMTP9cTKndbzd29xPfqot7Clekj9trAFC YROv2uZG4Vna7wh2Mht/23mc3cULBN4Ae1GKh7qwcLrxLHGWQ8lDZX7nYL2Vnnw+ vMUHO+junpymDg/JNlTzhCfMLYwyXGEqyyKtWr9NFwJwmg2Qn8qSCRFwKV0TAgMB AAGjggQ0MIIEMDAdBgNVHQ4EFgQUu/+WBn6dN9Tr+3w7cSfGcO2uZaAwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAkkGCCsGAQUFBwEHAQH/BIICODCCAjQwggIwBAIAATCC AigwDAMEBWA+IAMEAGA+JDAMAwQBYD4mAwQAYD4sAwQAYD4uMAwDBAZgPkADBABg PkQDBABgPkYDBABgPmYDBABgPmgwDAMEAWA+agMEAGA+bgMEAWA+cDAMAwQCYD50 AwQAYD5+MAwDBAJgPoQDBABgPoYDBAJgPogwDAMEAGA+jQMEAmA+kDAMAwQCYD6c AwQEYD6gMAwDBABgPrEDBAJgPrADBAFgPrwDBABgPsQDBAFgPsYDBAFgPtQDBABg PtcwDAMEAGA+4QMEAGA+4gMEAGA+5jAMAwQCYD7sAwQBYD7wMAwDBABgPvUDBABg PvYDBABgPvwDBAGPDjwDBACPDkgDBAGPDlQDBAGPDmwDBACPDpoDBACbdWUDBACb dWgDBACbdaADBACijRADBACijRIDBACijRQDBACijS0DBACijTUDBACijVEDBACi jVkDBACijWMDBACijWYDBACijYQDBACijY8DBACijZoDBACijaIDBAGijbADBACi jbYDBACnlAcDBACnlAkDBACnlAsDBACnlA0wDAMEAKeUHwMEAKeUIAMEAKeUIgME AKeULzAMAwQAp5RHAwQAp5RKAwQAp5RjAwQAp5RlAwQAp5RnAwQAp5RrMAwDBACn lHEDBACnlHIDBACnlHwDBACnlIEDBAGnlIQDBACnlIkDBAGnlI4DBACnlJIDBACn lJcDBACnlJsDBACnlKADBACnlK4DBACnlLAwDQYJKoZIhvcNAQELBQADggEBAErl NKOFISSgTOOogmJi+f7+BcZMx8De8dktajqAxLB0o6ZQoPFFWqcHd/H8SR92flkE CHHbqcyv93ZgskMtBowYZuLDfQXhSkr53tBPBBcEenGBexwAdYZzkNzYGUxjNZA+ CLNsdqAYRjiMHdUa4hj0cPKd+suXuY4sVgWl4gN0c6L8EAtUfO9Wjk2uh2RwksWW iBkwE5YJgCUSOlQTtODYWUY7hJtKvFGdE7aUTJyxNPowrKYKkFUBQ0/zMB5+e95a AuDEPj3/gUEmr5m1j4cLQln9yCYywjRxkdTEiCzdgS+6InRhi3+vPzThCXHete3a Kr06YX4CWIDCoXlhK3I= -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:06 2025 by rpki-client