This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: 7jaFctEDj5ILavqfi5/8i+FjgqdrLGD2Pp62s4Owc9o= Subject key identifier: 81:55:6A:45:93:E2:85:C6:02:F9:41:05:EF:AD:D8:1E:EB:DC:CE:F9 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 3998B94A820F0B6F82F312DBA58122CA821CC38C Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa Signing time: Thu 18 Dec 2025 07:58:37 +0000 ROA not before: Thu 18 Dec 2025 07:53:37 +0000 ROA not after: Thu 17 Dec 2026 07:58:37 +0000 asID: 2914 IP address blocks: 46.202.53.0/24 maxlen: 24 46.203.176.0/24 maxlen: 24 46.203.197.0/24 maxlen: 24 46.203.205.0/24 maxlen: 24 46.203.223.0/24 maxlen: 24 46.203.225.0/24 maxlen: 24 91.124.20.0/22 maxlen: 22 92.112.240.0/24 maxlen: 24 92.112.241.0/24 maxlen: 24 92.112.242.0/24 maxlen: 24 92.112.243.0/24 maxlen: 24 92.112.244.0/24 maxlen: 24 92.112.245.0/24 maxlen: 24 92.112.246.0/24 maxlen: 24 92.112.247.0/24 maxlen: 24 95.134.83.0/24 maxlen: 24 95.134.148.0/24 maxlen: 24 95.134.150.0/24 maxlen: 24 95.134.168.0/23 maxlen: 24 95.134.170.0/23 maxlen: 24 95.134.172.0/23 maxlen: 24 95.134.174.0/24 maxlen: 24 95.135.194.0/24 maxlen: 24 95.135.223.0/24 maxlen: 24 178.92.16.0/22 maxlen: 24 178.92.36.0/22 maxlen: 24 178.92.226.0/24 maxlen: 24 178.92.235.0/24 maxlen: 24 178.92.237.0/24 maxlen: 24 178.92.251.0/24 maxlen: 24 178.93.0.0/22 maxlen: 24 178.93.37.0/24 maxlen: 24 178.94.0.0/24 maxlen: 24 178.94.4.0/24 maxlen: 24 178.94.6.0/24 maxlen: 24 178.94.7.0/24 maxlen: 24 178.94.21.0/24 maxlen: 24 178.94.27.0/24 maxlen: 24 178.94.32.0/24 maxlen: 24 178.94.66.0/24 maxlen: 24 178.94.73.0/24 maxlen: 24 178.94.77.0/24 maxlen: 24 178.94.79.0/24 maxlen: 24 178.94.103.0/24 maxlen: 24 178.94.110.0/24 maxlen: 24 178.94.120.0/24 maxlen: 24 178.94.189.0/24 maxlen: 24 178.94.210.0/24 maxlen: 24 178.94.212.0/24 maxlen: 24 178.94.220.0/24 maxlen: 24 178.94.223.0/24 maxlen: 24 178.94.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:98:b9:4a:82:0f:0b:6f:82:f3:12:db:a5:81:22:ca:82:1c:c3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 18 07:53:37 2025 GMT Not After : Dec 17 07:58:37 2026 GMT Subject: CN=81556A4593E285C602F94105EFADD81EEBDCCEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:99:69:81:69:cf:58:71:f1:da:27:18:3c:73: 39:b1:f8:d7:e0:d4:12:cb:38:79:2c:ae:dd:ed:aa: 35:a2:63:ca:49:ad:23:34:01:34:1a:66:84:81:5e: 94:61:0c:fb:d5:f0:ac:11:15:17:b7:0c:ff:43:6b: 3e:62:75:71:e8:b9:b7:b7:14:9c:3d:30:36:1c:21: de:76:13:d7:83:37:c1:89:c3:e5:65:48:c0:a2:ce: 30:a2:4e:f3:28:71:d1:3d:be:c9:93:0b:bf:0d:45: db:24:97:b7:8a:c1:be:e6:28:8f:3c:96:8a:5d:57: 1a:1b:1f:92:41:48:1f:41:1c:ef:74:71:7c:d4:be: 43:8d:3f:ff:64:a1:05:5e:46:7b:51:85:a0:b1:29: 20:03:fc:88:d2:2b:56:6e:27:b6:33:f5:78:b5:32: d1:16:8c:3a:aa:30:d2:fe:ef:23:8d:41:ba:b2:9f: b5:e0:27:cd:02:77:c9:40:7b:1d:3d:34:e3:a3:80: 78:df:3b:6d:35:97:d0:5d:c1:d8:5a:9e:f0:63:78: 05:5e:27:d9:fe:3b:2a:cb:90:4e:4d:90:94:1a:82: 09:6d:cf:d1:ff:6d:06:65:0f:07:a3:a4:9f:f2:a3: c8:4e:89:98:c0:c8:01:c7:80:60:97:94:01:81:70: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:55:6A:45:93:E2:85:C6:02:F9:41:05:EF:AD:D8:1E:EB:DC:CE:F9 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.53.0/24 46.203.176.0/24 46.203.197.0/24 46.203.205.0/24 46.203.223.0/24 46.203.225.0/24 91.124.20.0/22 92.112.240.0/21 95.134.83.0/24 95.134.148.0/24 95.134.150.0/24 95.134.168.0-95.134.174.255 95.135.194.0/24 95.135.223.0/24 178.92.16.0/22 178.92.36.0/22 178.92.226.0/24 178.92.235.0/24 178.92.237.0/24 178.92.251.0/24 178.93.0.0/22 178.93.37.0/24 178.94.0.0/24 178.94.4.0/24 178.94.6.0/23 178.94.21.0/24 178.94.27.0/24 178.94.32.0/24 178.94.66.0/24 178.94.73.0/24 178.94.77.0/24 178.94.79.0/24 178.94.103.0/24 178.94.110.0/24 178.94.120.0/24 178.94.189.0/24 178.94.210.0/24 178.94.212.0/24 178.94.220.0/24 178.94.223.0/24 178.94.254.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:cd:02:11:96:f2:53:ee:1a:5f:89:fa:54:71:79:f1:52:09: e1:cc:5e:9d:0e:57:03:9b:14:d3:2a:b6:a6:19:33:1c:c5:78: 29:ce:a8:89:76:0d:07:d7:34:b7:33:94:1d:56:65:65:9f:8c: a6:a1:48:3d:36:59:b1:a7:01:d1:ef:40:fe:c9:7b:f2:dd:63: 7e:5d:24:5f:3c:68:04:30:1f:9c:50:e5:ee:d2:9b:1a:79:2c: 5c:db:cb:fe:43:26:bc:14:43:b3:f2:62:ac:59:46:4b:5e:ac: f1:37:63:46:2d:c4:22:6b:72:71:e9:78:ed:13:b4:c7:82:19: 51:0c:7a:ee:e5:82:17:5d:8e:86:25:1b:bb:24:51:8b:71:58: 7c:b7:e9:c6:62:f7:93:aa:bd:65:ee:a0:b1:eb:a8:ce:63:82: 09:99:6b:3f:89:7f:7e:94:47:89:d6:3d:38:0e:11:89:95:33: d2:b6:0f:ef:76:dc:4a:39:e1:8e:20:60:83:5c:2a:f6:37:21: 6e:64:a9:5f:29:d9:4e:05:97:d0:9f:88:63:2c:3b:85:e7:de: bf:5a:65:32:d1:cd:97:8f:f2:75:22:9d:b0:b0:2c:17:26:66: da:ce:58:bb:64:f3:b7:ae:2b:80:6a:17:0e:9f:95:51:b9:57: 8b:26:40:41 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIUOZi5SoIPC2+C8xLbpYEiyoIcw4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTgwNzUzMzdaFw0yNjEyMTcwNzU4MzdaMDMxMTAvBgNV BAMTKDgxNTU2QTQ1OTNFMjg1QzYwMkY5NDEwNUVGQUREODFFRUJEQ0NFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzmWmBac9YcfHaJxg8czmx+Nfg 1BLLOHksrt3tqjWiY8pJrSM0ATQaZoSBXpRhDPvV8KwRFRe3DP9Daz5idXHoube3 FJw9MDYcId52E9eDN8GJw+VlSMCizjCiTvMocdE9vsmTC78NRdskl7eKwb7mKI88 lopdVxobH5JBSB9BHO90cXzUvkONP/9koQVeRntRhaCxKSAD/IjSK1ZuJ7Yz9Xi1 MtEWjDqqMNL+7yONQbqyn7XgJ80Cd8lAex09NOOjgHjfO201l9BdwdhanvBjeAVe J9n+OyrLkE5NkJQaggltz9H/bQZlDwejpJ/yo8hOiZjAyAHHgGCXlAGBcGFNAgMB AAGjggMJMIIDBTAdBgNVHQ4EFgQUgVVqRZPihcYC+UEF763YHuvczvkwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAR4GCCsGAQUFBwEHAQH/BIIBDTCCAQkwggEFBAIAATCB /gMEAC7KNQMEAC7LsAMEAC7LxQMEAC7LzQMEAC7L3wMEAC7L4QMEAlt8FAMEA1xw 8AMEAF+GUwMEAF+GlAMEAF+GljAMAwQDX4aoAwQAX4auAwQAX4fCAwQAX4ffAwQC slwQAwQCslwkAwQAslziAwQAslzrAwQAslztAwQAslz7AwQCsl0AAwQAsl0lAwQA sl4AAwQAsl4EAwQBsl4GAwQAsl4VAwQAsl4bAwQAsl4gAwQAsl5CAwQAsl5JAwQA sl5NAwQAsl5PAwQAsl5nAwQAsl5uAwQAsl54AwQAsl69AwQAsl7SAwQAsl7UAwQA sl7cAwQAsl7fAwQAsl7+MA0GCSqGSIb3DQEBCwUAA4IBAQAvzQIRlvJT7hpfifpU cXnxUgnhzF6dDlcDmxTTKramGTMcxXgpzqiJdg0H1zS3M5QdVmVln4ymoUg9Nlmx pwHR70D+yXvy3WN+XSRfPGgEMB+cUOXu0psaeSxc28v+Qya8FEOz8mKsWUZLXqzx N2NGLcQia3Jx6XjtE7THghlRDHru5YIXXY6GJRu7JFGLcVh8t+nGYveTqr1l7qCx 66jOY4IJmWs/iX9+lEeJ1j04DhGJlTPStg/vdtxKOeGOIGCDXCr2NyFuZKlfKdlO BZfQn4hjLDuF596/WmUy0c2Xj/J1Ip2wsCwXJmbazli7ZPO3riuAahcOn5VRuVeL JkBB -----END CERTIFICATE-----Generated at Sat Dec 20 12:33:54 2025 by rpki-client