This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214976.roa File: AS214976.roa (raw, json) Hash identifier: RomoKygmGPbIbnREoN2IFZ38XZB3BuFTwMLo928OABk= Subject key identifier: 2E:05:E2:A5:66:B6:BC:34:D8:D8:98:BE:55:B3:70:C4:5E:9E:22:BA Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 5F3B99519CDDB5498BF6DEB8DCA90236A84FD60C Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214976.roa Signing time: Thu 18 Dec 2025 11:43:27 +0000 ROA not before: Thu 18 Dec 2025 11:38:27 +0000 ROA not after: Thu 17 Dec 2026 11:43:27 +0000 asID: 214976 IP address blocks: 2a14:7580:ff9a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3b:99:51:9c:dd:b5:49:8b:f6:de:b8:dc:a9:02:36:a8:4f:d6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 18 11:38:27 2025 GMT Not After : Dec 17 11:43:27 2026 GMT Subject: CN=2E05E2A566B6BC34D8D898BE55B370C45E9E22BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:7d:83:ff:2b:88:e1:f6:6f:4c:47:d9:0c: 33:e8:7f:47:db:16:76:cf:60:16:fc:99:00:1f:35: 23:1c:d3:c6:7a:b0:39:83:5b:0c:de:a6:fc:5a:dc: d3:04:36:b2:4d:fe:f7:3d:44:c9:f4:e8:2b:47:79: 41:23:21:1b:24:a2:a5:9c:bf:95:0a:a9:a2:fd:6a: 3e:93:e4:20:3a:1b:d2:79:7d:c2:d0:f0:02:9a:5d: 64:72:f8:b9:55:d7:85:99:fc:c6:38:f7:7b:dd:47: e2:0b:5f:a6:3a:e1:7a:02:46:79:64:76:72:69:d3: 7a:4b:5f:7b:1c:36:b4:01:48:9d:08:5b:b0:a2:0b: 29:17:1c:2d:a0:8b:a4:af:47:14:7b:53:7f:d0:0a: 6c:75:d2:55:9b:86:01:08:3d:9b:30:22:ab:26:41: ab:5c:21:a5:0a:7b:a0:94:78:4f:4f:1c:c6:01:02: 1a:9e:45:38:32:fc:b1:26:b9:18:44:d1:dd:6c:5e: ea:e6:62:65:5f:14:a0:cd:ca:90:c8:72:e2:b8:dc: 74:71:bd:00:86:74:b5:e0:77:ea:3b:88:72:6e:68: 70:ec:73:b8:1e:c1:9a:77:13:be:05:e5:48:35:66: de:1b:a5:99:74:e4:3b:96:28:2b:45:e1:c3:54:6c: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:E2:A5:66:B6:BC:34:D8:D8:98:BE:55:B3:70:C4:5E:9E:22:BA X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff9a::/48 Signature Algorithm: sha256WithRSAEncryption 86:0b:37:66:34:23:1c:e1:af:74:4d:f1:24:8e:d6:b9:bc:dc: 47:38:d0:e3:b0:8d:68:1f:a1:18:04:68:a2:99:62:96:f9:c9: d9:58:c5:ec:4e:fa:b2:5c:93:34:6c:e9:ce:cf:44:cc:74:15: 4d:cb:6c:65:34:21:c9:97:71:44:df:63:b1:78:bf:47:5c:7c: 95:08:06:01:5b:a9:04:3a:4d:41:2f:b5:25:11:b4:7f:93:b6: c9:7e:9d:15:cd:ce:bf:98:c7:1c:e6:e6:ee:f8:10:37:c7:8b: 1d:ad:60:1b:13:19:c8:7b:70:e0:7e:41:87:12:e2:bf:08:11: ed:21:a4:20:2c:a4:c0:94:77:d2:4d:b9:41:da:09:f0:4e:27: 93:74:59:ca:46:61:f9:d3:ad:11:4f:ae:38:c1:fb:37:66:b8: c5:7f:92:06:f3:d2:9a:3f:12:a0:33:82:69:05:c5:89:17:73: 51:45:23:3d:29:49:3d:8e:9b:d5:22:f5:ac:0f:a5:60:5a:89: a8:b4:d5:c1:bc:c2:b7:e6:7a:0f:e8:0b:71:1d:3e:3c:61:b4: a4:78:e6:fa:18:54:c3:01:93:95:1c:7b:f9:91:b1:ae:bb:a8: 05:1c:f0:d1:4d:1d:b2:6d:a4:fc:0f:d2:13:e3:98:c1:cc:c8: 17:c6:87:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUXzuZUZzdtUmL9t643KkCNqhP1gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTgxMTM4MjdaFw0yNjEyMTcxMTQzMjdaMDMxMTAvBgNV BAMTKDJFMDVFMkE1NjZCNkJDMzREOEQ4OThCRTU1QjM3MEM0NUU5RTIyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXH32D/yuI4fZvTEfZDDPof0fb FnbPYBb8mQAfNSMc08Z6sDmDWwzepvxa3NMENrJN/vc9RMn06CtHeUEjIRskoqWc v5UKqaL9aj6T5CA6G9J5fcLQ8AKaXWRy+LlV14WZ/MY493vdR+ILX6Y64XoCRnlk dnJp03pLX3scNrQBSJ0IW7CiCykXHC2gi6SvRxR7U3/QCmx10lWbhgEIPZswIqsm QatcIaUKe6CUeE9PHMYBAhqeRTgy/LEmuRhE0d1sXurmYmVfFKDNypDIcuK43HRx vQCGdLXgd+o7iHJuaHDsc7gewZp3E74F5Ug1Zt4bpZl05DuWKCtF4cNUbKcDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQULgXipWa2vDTY2Ji+VbNwxF6eIrowHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0OTc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP+aMA0GCSqGSIb3DQEBCwUAA4IBAQCGCzdmNCMc4a90TfEkjta5vNxHONDjsI1o H6EYBGiimWKW+cnZWMXsTvqyXJM0bOnOz0TMdBVNy2xlNCHJl3FE32OxeL9HXHyV CAYBW6kEOk1BL7UlEbR/k7bJfp0Vzc6/mMcc5ubu+BA3x4sdrWAbExnIe3DgfkGH EuK/CBHtIaQgLKTAlHfSTblB2gnwTieTdFnKRmH5060RT644wfs3ZrjFf5IG89Ka PxKgM4JpBcWJF3NRRSM9KUk9jpvVIvWsD6VgWomotNXBvMK35noP6AtxHT48YbSk eOb6GFTDAZOVHHv5kbGuu6gFHPDRTR2ybaT8D9IT45jBzMgXxoch -----END CERTIFICATE-----Generated at Tue Dec 23 18:29:18 2025 by rpki-client