This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS14315.roa File: AS14315.roa (raw, json) Hash identifier: R/Wlb7NxGJBfN+XE7Z8WPYQfneQcpLJG+9B+6WBZWyE= Subject key identifier: 3F:A1:CB:5A:C4:B9:B3:B6:25:38:53:37:CC:D6:34:B1:36:CC:EE:CE Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 4AD7AEEDDCD228A6E6A4DF0BF5FAB541758B6550 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS14315.roa Signing time: Wed 17 Dec 2025 03:08:14 +0000 ROA not before: Wed 17 Dec 2025 03:03:14 +0000 ROA not after: Wed 16 Dec 2026 03:08:14 +0000 asID: 14315 IP address blocks: 2a0f:85c1:b49::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d7:ae:ed:dc:d2:28:a6:e6:a4:df:0b:f5:fa:b5:41:75:8b:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:14 2025 GMT Not After : Dec 16 03:08:14 2026 GMT Subject: CN=3FA1CB5AC4B9B3B625385337CCD634B136CCEECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:7b:83:ed:09:9b:4a:fa:1f:2e:a3:64:b3: d3:5a:a5:1e:9a:d9:e7:72:51:bf:d1:db:d2:4a:9e: 58:ce:72:2a:60:fb:55:3e:53:86:15:ba:4d:d2:23: 17:20:7f:1d:ed:65:84:5a:a8:65:10:a3:ba:30:9a: d1:66:5e:3e:8f:30:4d:25:dd:d6:14:76:f3:7a:2f: 17:ce:1e:53:e3:cf:c0:27:ae:6a:26:d4:f1:39:3e: 26:b8:39:9c:62:1b:cb:45:9b:ed:3a:a2:45:3c:b2: d9:d6:85:09:31:57:c6:8b:c2:51:79:28:9c:44:ef: c9:a6:12:26:84:c6:41:ed:00:ef:e5:5f:46:51:56: 78:80:3b:4a:e8:7e:5c:80:1a:21:fa:b9:61:b2:ac: 04:47:86:f0:36:4b:69:41:9b:b4:da:73:10:21:75: 70:28:47:c1:44:69:84:1d:09:9b:69:5f:59:66:78: a3:4c:71:c2:67:72:55:7d:ef:24:1d:06:5f:34:20: 6e:3e:ec:4a:04:ea:66:f8:aa:17:e7:3a:a0:0e:a8: 99:45:06:c4:92:60:13:c9:f2:3f:61:1c:cb:ca:c8: 4c:50:46:6b:85:37:b9:c8:57:bc:05:1a:0e:10:19: b9:65:91:ae:f5:89:a8:88:93:76:cd:87:09:18:a8: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A1:CB:5A:C4:B9:B3:B6:25:38:53:37:CC:D6:34:B1:36:CC:EE:CE X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS14315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b49::/48 Signature Algorithm: sha256WithRSAEncryption bb:fb:bd:37:28:d8:5a:07:50:77:c5:fe:10:a9:ed:30:ad:4b: ab:f8:4d:b6:7a:9f:6d:e5:a5:99:68:d0:1c:d3:3a:2e:60:23: cb:89:f5:10:44:58:8b:f2:a1:90:8a:21:4e:1a:bc:81:5c:2a: c3:8c:84:57:af:69:03:c0:4b:98:9f:3e:22:5b:a8:21:af:a4: ac:ed:2b:49:8a:47:78:4a:2e:58:8c:90:ef:ad:58:14:1a:c4: 37:9f:8d:01:d6:ec:51:f6:eb:ee:43:aa:3e:ba:55:63:7d:cd: 79:85:9a:cd:02:c6:d5:32:c6:68:25:23:e2:30:95:06:e1:09: 42:f6:8b:2f:71:dc:1a:a7:50:3d:57:84:7d:bd:1c:a6:04:ab: c7:22:71:5f:d2:b7:a6:66:71:bd:cb:86:a2:ef:30:3b:d8:19: 03:22:ed:7f:ad:33:7c:1b:ab:c5:77:70:91:db:14:23:b5:8c: ef:94:a4:35:8f:42:c2:5a:2b:ce:63:a0:2f:3e:eb:60:fe:b5: 7a:a0:15:af:b5:3d:e9:88:66:87:3a:a5:5c:39:45:85:53:95: d0:67:3e:d5:e5:93:67:48:b9:55:ed:d8:57:1e:39:ff:3f:bb: db:4b:d9:bf:b9:c2:f1:d1:cb:e1:24:32:66:30:e1:f9:36:fd: ea:97:9d:65 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUSteu7dzSKKbmpN8L9fq1QXWLZVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTRaFw0yNjEyMTYwMzA4MTRaMDMxMTAvBgNV BAMTKDNGQTFDQjVBQzRCOUIzQjYyNTM4NTMzN0NDRDYzNEIxMzZDQ0VFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUynuD7QmbSvofLqNks9NapR6a 2edyUb/R29JKnljOcipg+1U+U4YVuk3SIxcgfx3tZYRaqGUQo7owmtFmXj6PME0l 3dYUdvN6LxfOHlPjz8Anrmom1PE5Pia4OZxiG8tFm+06okU8stnWhQkxV8aLwlF5 KJxE78mmEiaExkHtAO/lX0ZRVniAO0roflyAGiH6uWGyrARHhvA2S2lBm7TacxAh dXAoR8FEaYQdCZtpX1lmeKNMccJnclV97yQdBl80IG4+7EoE6mb4qhfnOqAOqJlF BsSSYBPJ8j9hHMvKyExQRmuFN7nIV7wFGg4QGbllka71iaiIk3bNhwkYqPaRAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUP6HLWsS5s7YlOFM3zNY0sTbM7s4wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMTQzMTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD4XB C0kwDQYJKoZIhvcNAQELBQADggEBALv7vTco2FoHUHfF/hCp7TCtS6v4TbZ6n23l pZlo0BzTOi5gI8uJ9RBEWIvyoZCKIU4avIFcKsOMhFevaQPAS5ifPiJbqCGvpKzt K0mKR3hKLliMkO+tWBQaxDefjQHW7FH26+5Dqj66VWN9zXmFms0CxtUyxmglI+Iw lQbhCUL2iy9x3BqnUD1XhH29HKYEq8cicV/St6Zmcb3LhqLvMDvYGQMi7X+tM3wb q8V3cJHbFCO1jO+UpDWPQsJaK85joC8+62D+tXqgFa+1PemIZoc6pVw5RYVTldBn PtXlk2dIuVXt2FceOf8/u9tL2b+5wvHRy+EkMmYw4fk2/eqXnWU= -----END CERTIFICATE-----Generated at Sat Dec 20 12:53:37 2025 by rpki-client