This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: wLtRiCdP5/D3iFlcLbmEwf5VK3as2qmjPpRZxmCEChU= Subject key identifier: ED:00:DD:A7:61:EB:6D:90:F1:BC:77:3F:AF:F3:C0:C8:3E:7E:11:2D Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 2C6C8BAC1080158A3FCE35290C61409F1EADE39D Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa Signing time: Sun 07 Dec 2025 04:11:18 +0000 ROA not before: Sun 07 Dec 2025 04:06:18 +0000 ROA not after: Sun 06 Dec 2026 04:11:18 +0000 asID: 25198 IP address blocks: 140.150.156.0/24 maxlen: 24 143.14.71.0/24 maxlen: 24 143.14.75.0/24 maxlen: 24 143.14.133.0/24 maxlen: 24 143.14.193.0/24 maxlen: 24 148.135.171.0/24 maxlen: 24 148.135.175.0/24 maxlen: 24 148.135.198.0/24 maxlen: 24 150.241.240.0/24 maxlen: 24 150.241.242.0/24 maxlen: 24 155.117.1.0/24 maxlen: 24 155.117.254.0/24 maxlen: 24 162.141.48.0/24 maxlen: 24 162.141.152.0/24 maxlen: 24 162.141.160.0/24 maxlen: 24 162.141.166.0/24 maxlen: 24 167.148.42.0/24 maxlen: 24 167.148.105.0/24 maxlen: 24 167.148.175.0/24 maxlen: 24 168.222.3.0/24 maxlen: 24 168.222.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6c:8b:ac:10:80:15:8a:3f:ce:35:29:0c:61:40:9f:1e:ad:e3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 7 04:06:18 2025 GMT Not After : Dec 6 04:11:18 2026 GMT Subject: CN=ED00DDA761EB6D90F1BC773FAFF3C0C83E7E112D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:a8:46:27:cd:4c:4f:f4:cb:72:59:d2:2f: 32:1e:2b:18:a5:5c:e2:5c:1d:22:cd:ae:45:bf:cb: 18:32:78:a8:91:0d:fa:4d:a8:8b:11:e5:c2:2c:a7: 4d:7a:45:55:86:b6:15:64:57:44:4f:89:5f:00:26: 51:1d:ce:0b:1c:08:6b:dc:72:3f:32:75:51:16:b5: c6:36:21:6b:86:c7:79:1d:d7:e7:b1:4c:8e:03:d8: fc:14:44:d1:95:0c:a3:d0:38:8e:ca:76:e8:50:d9: a8:99:f5:ae:d5:41:94:14:bd:9f:18:24:ee:56:47: 57:0e:43:86:65:1b:99:c7:21:b7:8b:40:59:ca:1a: b6:a1:c9:bc:7f:4b:2a:d6:6f:44:ed:08:aa:3c:b0: 6b:db:cb:03:ef:09:ab:4c:42:e0:11:1b:18:a8:0b: 54:bd:99:94:8e:d4:38:86:d1:ef:1b:99:89:fe:47: af:41:ff:85:cc:2c:c0:ed:87:b0:a5:17:88:62:e6: 15:1b:0f:18:b7:d0:84:8d:24:85:75:a8:6f:6a:c4: 67:6d:43:81:5f:24:8e:dc:e1:a7:f8:65:ed:41:39: 78:f9:e8:0d:17:bf:f7:44:cf:b0:7f:ff:74:b5:7a: 9d:4c:ea:09:a7:7e:fe:1d:7e:93:cd:29:16:8d:47: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:00:DD:A7:61:EB:6D:90:F1:BC:77:3F:AF:F3:C0:C8:3E:7E:11:2D X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.156.0/24 143.14.71.0/24 143.14.75.0/24 143.14.133.0/24 143.14.193.0/24 148.135.171.0/24 148.135.175.0/24 148.135.198.0/24 150.241.240.0/24 150.241.242.0/24 155.117.1.0/24 155.117.254.0/24 162.141.48.0/24 162.141.152.0/24 162.141.160.0/24 162.141.166.0/24 167.148.42.0/24 167.148.105.0/24 167.148.175.0/24 168.222.3.0/24 168.222.63.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a7:78:fa:db:5a:ac:23:ff:08:7d:59:21:8c:e9:a0:63:70: e8:14:e4:2e:a1:e5:2f:e7:1d:ab:f0:a8:a2:f3:5c:48:64:bb: 5c:c6:13:2d:13:c1:e7:c5:97:27:92:ac:6c:c7:bd:07:30:30: 53:db:15:f4:bb:bd:e0:d2:fa:fc:2b:70:ab:15:7d:6e:aa:81: 12:c9:40:7e:b5:ef:0b:33:df:e7:12:40:00:ce:73:e2:27:7d: cf:8b:6d:30:0b:81:aa:f8:2a:ff:78:db:b7:6f:bd:c2:70:85: 61:b5:19:6e:40:9e:20:bb:e7:2e:6a:6b:cb:5f:e9:4b:64:b1: 7d:e1:d3:56:84:16:4d:c1:7f:1e:ba:56:8b:1f:40:be:18:25: a3:e5:92:56:fc:b1:b2:4e:43:82:a3:1d:f5:98:73:61:92:f2: 12:2c:47:63:91:53:e4:6b:a0:6d:6f:af:4d:17:8b:4e:65:14: 5c:1f:02:9f:da:c3:68:35:bf:6a:b9:54:3b:0a:7c:d5:06:a4: c4:09:51:52:7e:f4:ec:07:a7:53:da:a5:75:bb:76:59:bd:db: f6:d3:bd:2b:86:e5:29:02:56:23:32:08:57:8b:df:0e:89:7e: 7a:47:36:a5:ee:de:12:3e:2b:92:3a:17:0a:01:f1:6c:95:a1: e7:a0:3b:54 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULGyLrBCAFYo/zjUpDGFAnx6t450wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDcwNDA2MThaFw0yNjEyMDYwNDExMThaMDMxMTAvBgNV BAMTKEVEMDBEREE3NjFFQjZEOTBGMUJDNzczRkFGRjNDMEM4M0U3RTExMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppqhGJ81MT/TLclnSLzIeKxil XOJcHSLNrkW/yxgyeKiRDfpNqIsR5cIsp016RVWGthVkV0RPiV8AJlEdzgscCGvc cj8ydVEWtcY2IWuGx3kd1+exTI4D2PwURNGVDKPQOI7KduhQ2aiZ9a7VQZQUvZ8Y JO5WR1cOQ4ZlG5nHIbeLQFnKGrahybx/SyrWb0TtCKo8sGvbywPvCatMQuARGxio C1S9mZSO1DiG0e8bmYn+R69B/4XMLMDth7ClF4hi5hUbDxi30ISNJIV1qG9qxGdt Q4FfJI7c4af4Ze1BOXj56A0Xv/dEz7B//3S1ep1M6gmnfv4dfpPNKRaNR7zDAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7QDdp2HrbZDxvHc/r/PAyD5+ES0wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgZoGCCsGAQUFBwEHAQH/BIGKMIGHMIGEBAIAATB+AwQA jJacAwQAjw5HAwQAjw5LAwQAjw6FAwQAjw7BAwQAlIerAwQAlIevAwQAlIfGAwQA lvHwAwQAlvHyAwQAm3UBAwQAm3X+AwQAoo0wAwQAoo2YAwQAoo2gAwQAoo2mAwQA p5QqAwQAp5RpAwQAp5SvAwQAqN4DAwQAqN4/MA0GCSqGSIb3DQEBCwUAA4IBAQAN p3j621qsI/8IfVkhjOmgY3DoFOQuoeUv5x2r8Kii81xIZLtcxhMtE8HnxZcnkqxs x70HMDBT2xX0u73g0vr8K3CrFX1uqoESyUB+te8LM9/nEkAAznPiJ33Pi20wC4Gq +Cr/eNu3b73CcIVhtRluQJ4gu+cuamvLX+lLZLF94dNWhBZNwX8eulaLH0C+GCWj 5ZJW/LGyTkOCox31mHNhkvISLEdjkVPka6Btb69NF4tOZRRcHwKf2sNoNb9quVQ7 CnzVBqTECVFSfvTsB6dT2qV1u3ZZvdv2070rhuUpAlYjMghXi98OiX56Rzal7t4S PiuSOhcKAfFslaHnoDtU -----END CERTIFICATE-----Generated at Sun Dec 7 11:09:26 2025 by rpki-client