This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: jSE04ngejYlX8BFJv7RRd3HN/Hraf+AnUTtzSRTMMk4= Subject key identifier: 7D:81:EF:15:FF:9C:C3:27:31:CF:A5:3A:7F:1E:74:40:FF:67:38:1E Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 579AE723F6D85F5E568C8065CFDE89F0EB1BD730 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa Signing time: Sat 29 Nov 2025 11:12:09 +0000 ROA not before: Sat 29 Nov 2025 11:07:09 +0000 ROA not after: Sat 28 Nov 2026 11:12:09 +0000 asID: 63199 IP address blocks: 140.150.232.0/24 maxlen: 24 140.233.177.0/24 maxlen: 24 143.14.23.0/24 maxlen: 24 148.135.171.0/24 maxlen: 24 150.241.240.0/24 maxlen: 24 162.141.115.0/24 maxlen: 24 167.148.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9a:e7:23:f6:d8:5f:5e:56:8c:80:65:cf:de:89:f0:eb:1b:d7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 29 11:07:09 2025 GMT Not After : Nov 28 11:12:09 2026 GMT Subject: CN=7D81EF15FF9CC32731CFA53A7F1E7440FF67381E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f1:3d:59:bd:25:cc:30:f7:c6:0d:c3:ef:a3: 62:86:0d:b0:82:51:1a:18:cd:5a:9d:fb:fe:87:ff: 58:36:fc:af:96:67:02:92:c6:78:64:c3:71:b7:d5: 4b:0c:b2:bc:21:be:9c:bc:62:14:59:17:a0:33:15: 01:d9:83:f2:d7:37:14:a2:4b:99:e5:ba:3b:60:1a: 8e:0d:98:0c:c7:d7:11:2f:53:42:b8:9c:ac:13:ee: aa:58:bf:ee:9f:d3:60:ea:c7:98:38:8f:88:7d:a6: 9f:fb:11:2c:36:d6:7a:38:1b:1e:3b:6b:a9:51:f0: 55:ef:76:c9:99:8f:d3:66:32:67:e2:8f:30:84:c2: d0:2e:eb:11:5f:5d:ab:ec:c7:32:2c:36:38:e6:a7: 97:91:6b:a7:02:3e:ed:f7:b6:c8:3d:40:31:c1:fa: b5:b5:bc:08:07:56:d9:46:7f:ba:33:4c:92:b8:f0: cf:1e:a8:2a:df:4b:5f:f5:74:ea:ff:67:72:db:99: 30:af:7c:db:58:ba:7e:2e:b2:69:4e:6b:55:d8:4a: 79:4c:65:61:ba:de:06:d6:ee:fc:53:98:70:4b:c8: c9:d9:c4:44:99:09:17:4a:16:20:91:4a:c2:68:95: c1:f9:4d:e9:51:50:1a:6e:bf:9a:72:84:0b:13:88: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:81:EF:15:FF:9C:C3:27:31:CF:A5:3A:7F:1E:74:40:FF:67:38:1E X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.232.0/24 140.233.177.0/24 143.14.23.0/24 148.135.171.0/24 150.241.240.0/24 162.141.115.0/24 167.148.206.0/24 Signature Algorithm: sha256WithRSAEncryption 91:72:a7:18:2f:b7:47:24:55:44:23:a0:21:a9:60:96:e4:dd: 6b:ea:21:26:18:bd:7c:2c:39:2c:04:30:16:0d:83:fd:f0:e7: fa:3c:31:6a:43:dc:8d:63:99:cd:1d:b4:22:dd:d7:7f:c7:9f: c3:86:26:07:d6:d5:d0:3f:70:87:cc:43:cc:5d:b3:01:95:62: 20:c1:01:8c:2a:38:a9:fd:47:89:bf:89:a2:23:4f:3c:1d:eb: ba:59:a5:7f:dd:48:8d:31:68:56:29:b7:c5:4c:77:ab:0b:87: f2:1f:a4:ec:34:a4:68:40:4a:6a:e6:12:4c:b6:90:6b:fa:1e: ab:20:34:a1:f8:f1:0a:49:94:41:71:be:d6:01:9c:67:28:4e: 84:6d:ef:d9:29:6a:2e:9b:90:fa:50:2f:d4:02:cb:85:68:49: 13:dd:f5:6b:ac:87:27:3a:31:4f:56:42:59:e8:c1:e0:d2:de: f1:45:cf:b7:9a:00:50:79:dd:9d:d9:6b:92:a9:64:a7:0a:7e: a0:74:b2:2a:74:3a:39:aa:31:9a:42:cb:e5:1a:51:07:ed:64: 08:8c:0b:26:c1:5b:3c:35:f0:de:b1:03:6b:f0:35:c0:51:2e: 0b:38:c0:dc:6e:bf:e0:99:5f:7e:58:0e:55:51:43:d4:b3:24: f4:f2:3b:6b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUV5rnI/bYX15WjIBlz96J8Osb1zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjkxMTA3MDlaFw0yNjExMjgxMTEyMDlaMDMxMTAvBgNV BAMTKDdEODFFRjE1RkY5Q0MzMjczMUNGQTUzQTdGMUU3NDQwRkY2NzM4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv8T1ZvSXMMPfGDcPvo2KGDbCC URoYzVqd+/6H/1g2/K+WZwKSxnhkw3G31UsMsrwhvpy8YhRZF6AzFQHZg/LXNxSi S5nlujtgGo4NmAzH1xEvU0K4nKwT7qpYv+6f02Dqx5g4j4h9pp/7ESw21no4Gx47 a6lR8FXvdsmZj9NmMmfijzCEwtAu6xFfXavsxzIsNjjmp5eRa6cCPu33tsg9QDHB +rW1vAgHVtlGf7ozTJK48M8eqCrfS1/1dOr/Z3LbmTCvfNtYun4usmlOa1XYSnlM ZWG63gbW7vxTmHBLyMnZxESZCRdKFiCRSsJolcH5TelRUBpuv5pyhAsTiNVhAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUfYHvFf+cwycxz6U6fx50QP9nOB4wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBACMlugD BACM6bEDBACPDhcDBACUh6sDBACW8fADBACijXMDBACnlM4wDQYJKoZIhvcNAQEL BQADggEBAJFypxgvt0ckVUQjoCGpYJbk3WvqISYYvXwsOSwEMBYNg/3w5/o8MWpD 3I1jmc0dtCLd13/Hn8OGJgfW1dA/cIfMQ8xdswGVYiDBAYwqOKn9R4m/iaIjTzwd 67pZpX/dSI0xaFYpt8VMd6sLh/IfpOw0pGhASmrmEky2kGv6HqsgNKH48QpJlEFx vtYBnGcoToRt79kpai6bkPpQL9QCy4VoSRPd9Wushyc6MU9WQlnoweDS3vFFz7ea AFB53Z3Za5KpZKcKfqB0sip0OjmqMZpCy+UaUQftZAiMCybBWzw18N6xA2vwNcBR Lgs4wNxuv+CZX35YDlVRQ9SzJPTyO2s= -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:12 2025 by rpki-client