This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214129.roa File: AS214129.roa (raw, json) Hash identifier: WAx/bhL3mfkPjlcsEnn3Ocm3UbMIL62cYgcxaJdC32s= Subject key identifier: 3C:67:E4:37:39:1D:EB:58:60:B8:6D:4F:43:A0:BB:70:60:F1:60:53 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 6BCF00EDCEAB364C77738F442D9B7BF83237623F Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214129.roa Signing time: Wed 17 Dec 2025 03:08:14 +0000 ROA not before: Wed 17 Dec 2025 03:03:14 +0000 ROA not after: Wed 16 Dec 2026 03:08:14 +0000 asID: 214129 IP address blocks: 2a0f:85c1:b4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cf:00:ed:ce:ab:36:4c:77:73:8f:44:2d:9b:7b:f8:32:37:62:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:14 2025 GMT Not After : Dec 16 03:08:14 2026 GMT Subject: CN=3C67E437391DEB5860B86D4F43A0BB7060F16053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:07:7b:75:bd:6f:c9:6f:94:60:53:2f:fa: b8:ff:2c:a3:a1:44:c7:3c:b9:cf:53:83:5f:e6:70: 53:8f:14:11:ca:6c:1f:fe:8d:c7:5d:46:94:7f:5e: 49:ce:94:2a:b3:08:7c:be:28:4e:ba:67:04:bc:2d: a6:0b:b5:5b:ad:09:5b:a8:3d:26:77:b4:5f:98:92: 30:fc:0d:ec:4f:8f:1a:e8:8e:7a:be:c8:a3:5a:42: 38:d4:88:9e:bf:cb:4e:35:d1:2a:40:c2:82:c6:b2: 22:44:7c:fb:7a:40:99:7f:ec:33:53:38:e4:2d:e8: 71:03:2c:81:ec:9b:f7:6d:3b:4b:46:87:67:08:22: 73:02:9c:63:c2:8b:23:89:b5:ac:2a:b0:46:ff:61: f3:a9:3b:9b:05:b2:19:7b:ca:5e:a9:4a:1d:99:2c: c2:57:9f:f0:b5:77:b3:ff:6f:72:4e:3a:ee:d9:73: 85:93:8c:b1:09:43:81:9b:3d:0f:73:b6:5b:67:2f: b5:c7:4c:0e:38:62:6c:4f:f4:91:4c:e5:0b:2f:60: 96:b1:68:f3:43:c5:fd:d6:fc:b1:5c:ad:6d:6b:53: 78:4c:c5:4e:3b:dd:a1:04:f2:50:b1:8b:30:41:c0: e7:8d:d2:3f:e9:8b:06:1c:30:c1:36:82:b3:a8:c2: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:E4:37:39:1D:EB:58:60:B8:6D:4F:43:A0:BB:70:60:F1:60:53 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b4c::/48 Signature Algorithm: sha256WithRSAEncryption ef:0d:44:3b:c3:56:d8:3b:85:7c:18:09:ca:ad:d3:c6:97:9e: 7c:8a:02:ca:63:4f:aa:df:8c:22:83:ff:f1:f7:eb:ef:00:40: b6:d0:21:10:89:e7:4f:f9:a8:bb:75:92:bb:98:79:f8:18:20: f3:4b:a0:81:b7:16:e1:5d:2b:45:2b:03:62:fe:56:6a:5f:36: 53:9e:85:af:1a:e3:2f:23:d8:f7:bc:0b:60:2c:af:e3:b8:b5: 2a:77:66:37:25:4c:8d:fa:e5:cd:03:63:77:49:e7:89:41:5c: 52:33:06:f9:c9:28:b7:7b:cb:33:65:60:3c:bc:ab:a6:9f:08: e3:8b:eb:52:31:c2:cf:0d:e8:68:f8:eb:23:50:22:13:63:4c: d1:5d:bf:19:86:06:dc:6a:ce:b4:f0:cc:c3:5d:bf:90:80:ab: 1d:ea:8e:5b:d0:1c:55:2c:76:df:b4:af:01:f5:38:1b:32:48: dc:87:d5:27:50:0a:ee:5a:ac:a8:22:83:94:14:66:15:f7:b3: 94:1e:b1:73:8b:74:91:41:3f:4e:46:4f:0e:df:17:17:53:20: 4d:af:d6:8b:3e:d2:5e:ad:c3:36:86:80:04:52:ae:86:32:5a: 24:34:6e:e1:4d:0f:00:9d:06:2e:95:b2:4e:fe:ce:6a:9e:e2: e9:fb:88:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUa88A7c6rNkx3c49ELZt7+DI3Yj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTRaFw0yNjEyMTYwMzA4MTRaMDMxMTAvBgNV BAMTKDNDNjdFNDM3MzkxREVCNTg2MEI4NkQ0RjQzQTBCQjcwNjBGMTYwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKQd7db1vyW+UYFMv+rj/LKOh RMc8uc9Tg1/mcFOPFBHKbB/+jcddRpR/XknOlCqzCHy+KE66ZwS8LaYLtVutCVuo PSZ3tF+YkjD8DexPjxrojnq+yKNaQjjUiJ6/y0410SpAwoLGsiJEfPt6QJl/7DNT OOQt6HEDLIHsm/dtO0tGh2cIInMCnGPCiyOJtawqsEb/YfOpO5sFshl7yl6pSh2Z LMJXn/C1d7P/b3JOOu7Zc4WTjLEJQ4GbPQ9ztltnL7XHTA44YmxP9JFM5QsvYJax aPNDxf3W/LFcrW1rU3hMxU473aEE8lCxizBBwOeN0j/piwYcMME2grOowjbHAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUPGfkNzkd61hguG1PQ6C7cGDxYFMwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0MTI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtMMA0GCSqGSIb3DQEBCwUAA4IBAQDvDUQ7w1bYO4V8GAnKrdPGl558igLKY0+q 34wig//x9+vvAEC20CEQiedP+ai7dZK7mHn4GCDzS6CBtxbhXStFKwNi/lZqXzZT noWvGuMvI9j3vAtgLK/juLUqd2Y3JUyN+uXNA2N3SeeJQVxSMwb5ySi3e8szZWA8 vKumnwjji+tSMcLPDeho+OsjUCITY0zRXb8Zhgbcas608MzDXb+QgKsd6o5b0BxV LHbftK8B9TgbMkjch9UnUAruWqyoIoOUFGYV97OUHrFzi3SRQT9ORk8O3xcXUyBN r9aLPtJercM2hoAEUq6GMlokNG7hTQ8AnQYulbJO/s5qnuLp+4iE -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:42 2025 by rpki-client