This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214344.roa File: AS214344.roa (raw, json) Hash identifier: 89TOeLYh3u3n0Ec66EYI7L/N/s0bpTBAi+ayEA0sVXs= Subject key identifier: 52:B2:ED:94:8B:AC:75:68:5E:17:63:52:F3:A8:B1:D2:92:BF:A1:C4 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 088B35E40C53BDC7CDDA6667C421A6D8E58DA94D Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214344.roa Signing time: Fri 19 Dec 2025 14:44:20 +0000 ROA not before: Fri 19 Dec 2025 14:39:20 +0000 ROA not after: Fri 18 Dec 2026 14:44:20 +0000 asID: 214344 IP address blocks: 2a14:7581:fc0::/48 maxlen: 48 2a14:7581:fc1::/48 maxlen: 48 2a14:7581:fc2::/48 maxlen: 48 2a14:7581:fc3::/48 maxlen: 48 2a14:7581:fc4::/48 maxlen: 48 2a14:7581:9900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8b:35:e4:0c:53:bd:c7:cd:da:66:67:c4:21:a6:d8:e5:8d:a9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 19 14:39:20 2025 GMT Not After : Dec 18 14:44:20 2026 GMT Subject: CN=52B2ED948BAC75685E176352F3A8B1D292BFA1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:f1:c0:39:0c:e7:4c:c6:2f:26:1c:5e:eb: 92:13:9e:ca:64:a7:6c:32:a7:2d:1f:fb:26:e0:cd: 89:59:a6:8f:16:ca:9f:9e:5f:aa:56:c0:9d:dd:05: 7a:38:a0:3c:33:02:d8:c4:f2:92:1e:88:8f:11:84: 64:7b:28:39:52:21:1a:f3:ed:ed:a6:0c:22:60:c7: 10:5f:f7:2e:46:d1:32:42:ff:14:81:f1:20:63:ad: 6f:17:17:2d:57:ef:f2:fa:15:9d:e4:47:0a:7a:81: 29:6b:0b:49:66:fd:25:ac:7b:60:77:fb:f7:5a:33: 0b:7d:0c:41:ca:68:73:c6:f4:b4:05:b5:58:ed:e6: 5d:d5:3a:b2:af:a8:9f:93:89:c4:67:90:bf:56:c2: 58:11:16:03:48:be:66:c3:6e:7f:a9:9f:b9:1a:6f: ba:b3:13:d6:54:7f:a6:ce:cb:8b:d4:ea:15:54:a6: 3c:ad:5b:ef:65:07:9e:60:ca:7d:e3:a5:84:d2:ab: 1e:59:01:c5:71:d0:09:d5:0a:14:54:cd:78:a3:7c: 18:de:81:6e:3c:19:a4:88:42:04:ec:8c:3f:8d:9a: 14:fb:ef:16:2c:e8:e3:ff:2d:b1:1c:51:0d:fd:f6: f8:7c:29:6f:95:0a:57:93:3a:f0:1c:bc:ec:12:b8: 8e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:ED:94:8B:AC:75:68:5E:17:63:52:F3:A8:B1:D2:92:BF:A1:C4 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:fc0::-2a14:7581:fc4:ffff:ffff:ffff:ffff:ffff 2a14:7581:9900::/40 Signature Algorithm: sha256WithRSAEncryption 74:e9:77:9a:f8:4b:4b:d2:1e:27:7d:81:07:1b:12:db:15:4d: ee:c3:b3:f5:59:73:3b:0f:20:c9:ae:5c:be:11:7f:b0:17:c6: 1b:df:2b:a6:23:98:28:d1:d6:88:ab:f8:c4:78:37:58:90:34: 80:50:0f:ca:82:74:9a:a0:04:5d:8a:8f:22:cd:75:a0:fe:80: b3:56:ac:ec:84:dc:12:ef:ff:4c:1b:79:f7:f7:92:01:ee:4b: bb:15:45:78:d6:8e:40:ec:df:d7:43:1c:14:26:ab:15:a3:18: 79:1f:47:a6:a7:85:23:94:65:48:ce:d3:bf:aa:82:a3:e2:22: 35:8e:aa:a4:23:25:c9:fc:4a:26:d6:45:e6:dd:57:18:f0:ad: b1:e8:87:56:70:57:66:c3:b4:04:9b:53:32:43:55:7f:79:eb: aa:32:67:e3:e2:58:8b:46:9f:80:3d:35:b8:84:55:bd:4c:7e: 8e:90:3f:ab:cb:3c:eb:df:47:b3:8a:f9:c5:11:e3:98:56:e1: 2e:ee:36:25:2f:b3:aa:7a:20:ea:af:f5:b3:0d:37:37:1a:90: 8d:b8:c5:dd:4e:64:99:15:bb:30:5e:da:d9:a8:4c:63:01:b6: 34:b2:38:fa:69:59:3a:57:58:a5:01:72:0c:b6:cb:46:e5:0e: dd:9d:2d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUCIs15AxTvcfN2mZnxCGm2OWNqU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTkxNDM5MjBaFw0yNjEyMTgxNDQ0MjBaMDMxMTAvBgNV BAMTKDUyQjJFRDk0OEJBQzc1Njg1RTE3NjM1MkYzQThCMUQyOTJCRkExQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRvHAOQznTMYvJhxe65ITnspk p2wypy0f+ybgzYlZpo8Wyp+eX6pWwJ3dBXo4oDwzAtjE8pIeiI8RhGR7KDlSIRrz 7e2mDCJgxxBf9y5G0TJC/xSB8SBjrW8XFy1X7/L6FZ3kRwp6gSlrC0lm/SWse2B3 +/daMwt9DEHKaHPG9LQFtVjt5l3VOrKvqJ+TicRnkL9WwlgRFgNIvmbDbn+pn7ka b7qzE9ZUf6bOy4vU6hVUpjytW+9lB55gyn3jpYTSqx5ZAcVx0AnVChRUzXijfBje gW48GaSIQgTsjD+NmhT77xYs6OP/LbEcUQ399vh8KW+VCleTOvAcvOwSuI7nAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUUrLtlIusdWheF2NS86ix0pK/ocQwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0MzQ0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcMBIDBwYq FHWBD8ADBwAqFHWBD8QDBgAqFHWBmTANBgkqhkiG9w0BAQsFAAOCAQEAdOl3mvhL S9IeJ32BBxsS2xVN7sOz9VlzOw8gya5cvhF/sBfGG98rpiOYKNHWiKv4xHg3WJA0 gFAPyoJ0mqAEXYqPIs11oP6As1as7ITcEu//TBt59/eSAe5LuxVFeNaOQOzf10Mc FCarFaMYeR9HpqeFI5RlSM7Tv6qCo+IiNY6qpCMlyfxKJtZF5t1XGPCtseiHVnBX ZsO0BJtTMkNVf3nrqjJn4+JYi0afgD01uIRVvUx+jpA/q8s8699Hs4r5xRHjmFbh Lu42JS+zqnog6q/1sw03NxqQjbjF3U5kmRW7MF7a2ahMYwG2NLI4+mlZOldYpQFy DLbLRuUO3Z0t7g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:43:47 2025 by rpki-client