This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa File: AS214566.roa (raw, json) Hash identifier: 5iXUlEmGeDgaPKEipSDrHEdIgG5CEgB5oVnhkM6Q8m4= Subject key identifier: E4:35:FF:EC:1D:F4:9C:2C:34:2E:C4:09:87:03:CC:4D:B8:32:07:E6 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 7636D7335CA805ECF3DDA729538CB7D564783CA4 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa Signing time: Wed 10 Dec 2025 02:14:12 +0000 ROA not before: Wed 10 Dec 2025 02:09:12 +0000 ROA not after: Wed 09 Dec 2026 02:14:12 +0000 asID: 214566 IP address blocks: 2a0f:85c1:82f::/48 maxlen: 48 2a0f:85c1:d20::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:36:d7:33:5c:a8:05:ec:f3:dd:a7:29:53:8c:b7:d5:64:78:3c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 10 02:09:12 2025 GMT Not After : Dec 9 02:14:12 2026 GMT Subject: CN=E435FFEC1DF49C2C342EC4098703CC4DB83207E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:fe:90:b3:48:ab:ed:4b:24:9d:1f:bf:45: 70:1d:7c:61:03:30:c8:66:bf:0a:a4:3b:d2:cf:5f: 7d:c9:06:16:15:ab:06:96:75:df:4f:6b:86:4a:2e: 7b:2d:ed:bf:35:04:74:f4:47:f4:21:87:55:dc:09: 44:7f:bf:0e:ac:0c:96:bb:8f:e3:1b:3a:77:ad:97: 7e:30:da:aa:85:4a:fb:5f:0a:f0:4f:01:5f:23:21: db:6f:55:e5:2f:b3:ea:37:66:2a:c1:5c:b6:bc:97: ac:f9:87:6e:cb:df:24:61:7f:bb:2a:15:9e:31:ea: 04:3e:e6:59:6c:fe:75:4b:34:9a:ed:26:89:89:92: 34:c7:75:a0:c0:86:48:90:ed:dc:12:34:d2:d9:c2: 10:3a:f2:a1:42:6b:74:7e:06:1c:91:c3:60:87:92: 11:cf:2a:7a:fa:bf:e9:b3:0e:02:4d:0b:68:2e:fb: 12:b3:16:61:65:5a:8b:0d:65:4b:4c:f5:b9:29:6b: 0d:a4:3a:76:d1:5e:5d:74:ae:f2:ba:ec:95:ee:1c: fb:e1:fb:26:aa:5a:31:03:b5:9d:51:19:34:4e:aa: 5e:dc:fa:08:dd:84:0a:c8:78:61:14:8a:db:8c:d2: e2:f3:12:bb:ee:54:73:40:b7:af:e0:77:bb:fc:a5: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:35:FF:EC:1D:F4:9C:2C:34:2E:C4:09:87:03:CC:4D:B8:32:07:E6 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:82f::/48 2a0f:85c1:d20::/44 Signature Algorithm: sha256WithRSAEncryption 0d:fd:66:47:ec:28:25:21:05:55:ea:1a:a9:53:3e:4f:c0:85: f7:f0:9b:6c:d2:24:a3:59:2c:29:7f:c0:5c:be:9f:f6:43:1c: 8a:ef:27:a6:a0:2c:c6:fc:a4:7b:e5:dd:21:36:bc:3c:17:f2: 6e:1e:88:52:df:a7:01:be:07:75:2e:a4:4c:cc:1e:2a:1a:cc: d1:9b:7e:c4:9a:0c:08:f9:bd:ea:80:91:80:7d:ee:59:0c:5c: ec:df:ee:ed:71:58:cb:11:0f:2d:59:28:05:0c:ea:fb:87:4d: 32:89:d6:f8:af:b6:e0:86:cd:fa:9b:dd:9b:c7:03:ba:c5:72: a5:b7:2d:39:fc:88:fa:d5:fc:27:f2:a2:17:98:cc:d7:f4:d5: cb:f9:19:5d:76:66:ca:22:4a:79:5f:a2:5e:d3:a5:62:99:56: b4:8f:a1:39:54:1f:3c:2f:1c:d3:b6:43:c2:9b:08:7d:22:1a: 1b:ae:b9:33:6f:94:a1:9e:bf:7f:81:10:06:36:ad:57:25:bf: 89:c2:e6:1d:e5:8d:aa:92:e4:23:4b:4e:6d:da:7d:4e:4d:75: 7f:cb:74:cd:9a:e6:ed:2c:3e:ca:72:2a:fe:19:90:48:b6:fc: ab:3a:4b:4e:02:39:18:99:ad:92:75:79:13:ef:a9:f5:e1:85: 84:a4:74:0c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUdjbXM1yoBezz3acpU4y31WR4PKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTAwMjA5MTJaFw0yNjEyMDkwMjE0MTJaMDMxMTAvBgNV BAMTKEU0MzVGRkVDMURGNDlDMkMzNDJFQzQwOTg3MDNDQzREQjgzMjA3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxv6Qs0ir7UsknR+/RXAdfGED MMhmvwqkO9LPX33JBhYVqwaWdd9Pa4ZKLnst7b81BHT0R/Qhh1XcCUR/vw6sDJa7 j+MbOnetl34w2qqFSvtfCvBPAV8jIdtvVeUvs+o3ZirBXLa8l6z5h27L3yRhf7sq FZ4x6gQ+5lls/nVLNJrtJomJkjTHdaDAhkiQ7dwSNNLZwhA68qFCa3R+BhyRw2CH khHPKnr6v+mzDgJNC2gu+xKzFmFlWosNZUtM9bkpaw2kOnbRXl10rvK67JXuHPvh +yaqWjEDtZ1RGTROql7c+gjdhArIeGEUituM0uLzErvuVHNAt6/gd7v8pRAvAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU5DX/7B30nCw0LsQJhwPMTbgyB+YwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTY2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F wQgvAwcEKg+FwQ0gMA0GCSqGSIb3DQEBCwUAA4IBAQAN/WZH7CglIQVV6hqpUz5P wIX38Jts0iSjWSwpf8Bcvp/2QxyK7yemoCzG/KR75d0hNrw8F/JuHohS36cBvgd1 LqRMzB4qGszRm37EmgwI+b3qgJGAfe5ZDFzs3+7tcVjLEQ8tWSgFDOr7h00yidb4 r7bghs36m92bxwO6xXKlty05/Ij61fwn8qIXmMzX9NXL+RlddmbKIkp5X6Je06Vi mVa0j6E5VB88LxzTtkPCmwh9Ihobrrkzb5Shnr9/gRAGNq1XJb+JwuYd5Y2qkuQj S05t2n1OTXV/y3TNmubtLD7Kcir+GZBItvyrOktOAjkYma2SdXkT76n14YWEpHQM -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:11 2025 by rpki-client