This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: nSLVa/+G5GMo5v6lKt6euhQPsZFdBd+CgIEFNgsc0QA= Subject key identifier: 5B:DA:37:E4:91:13:06:C8:26:42:61:B2:3C:3F:31:C0:17:4D:10:23 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 1F2AE014F8E9F087C33F7AD26F123DEF0B4B6AFF Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa Signing time: Fri 09 Jan 2026 09:58:07 +0000 ROA not before: Fri 09 Jan 2026 09:53:07 +0000 ROA not after: Fri 08 Jan 2027 09:58:07 +0000 asID: 63199 IP address blocks: 140.150.152.0/24 maxlen: 24 140.150.232.0/24 maxlen: 24 143.14.23.0/24 maxlen: 24 150.241.240.0/24 maxlen: 24 162.141.115.0/24 maxlen: 24 167.148.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2a:e0:14:f8:e9:f0:87:c3:3f:7a:d2:6f:12:3d:ef:0b:4b:6a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 9 09:53:07 2026 GMT Not After : Jan 8 09:58:07 2027 GMT Subject: CN=5BDA37E4911306C8264261B23C3F31C0174D1023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:fc:3d:87:61:cd:ac:69:fe:b5:69:e9:28: 39:8f:ac:48:36:02:aa:9c:10:9e:62:d1:3b:0b:84: 6c:80:dd:bc:21:2a:bb:43:ad:57:ec:1c:62:79:06: 4d:df:f6:58:af:af:f9:d3:08:9b:46:7a:a1:14:c6: 41:6c:6e:c9:a7:97:0f:c9:a8:2a:09:2e:c7:8f:09: 39:e5:39:77:a1:26:69:31:89:43:7c:3d:40:b8:1f: 87:33:3c:da:a4:af:3a:ef:b1:a6:7d:be:17:22:49: ae:c3:2e:c8:ba:d6:8c:0b:21:61:7c:b3:d5:7a:c5: b2:c9:b4:8e:9a:12:55:28:90:74:ae:bf:f3:6c:8e: c7:d6:31:8b:5c:ef:27:47:a4:63:94:94:9a:88:96: 2d:78:b1:38:e2:eb:9c:3d:7f:f7:45:44:19:ba:07: b9:0a:15:a3:2c:1a:b8:73:66:78:0b:d2:a1:fc:c3: ac:2f:9d:42:f9:be:a1:36:25:e2:f4:6b:5b:18:b6: 12:6c:bc:6e:59:7a:33:8f:61:61:28:ed:d2:bb:dc: 05:ac:b3:80:92:2b:13:b0:1e:d3:7a:36:8e:07:92: ee:65:1f:a2:41:7f:64:10:cb:7c:f8:d4:13:56:c4: 3f:a6:81:8c:52:fe:5d:22:76:a9:69:dc:ec:b2:2f: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DA:37:E4:91:13:06:C8:26:42:61:B2:3C:3F:31:C0:17:4D:10:23 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.152.0/24 140.150.232.0/24 143.14.23.0/24 150.241.240.0/24 162.141.115.0/24 167.148.206.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:d2:b5:4a:72:f4:a9:bc:00:16:7f:86:3b:7a:c3:c5:44:ee: ce:a8:ea:08:1f:ba:99:a0:2a:19:a9:31:8d:ee:7d:8b:fc:bb: ad:db:2e:81:1d:33:2d:a9:52:89:63:8b:40:77:62:c0:94:cc: 95:62:b9:d7:fc:0b:4d:c0:f0:25:06:07:05:4e:21:ac:e2:f7: 74:64:b7:fe:b1:21:62:48:2d:a7:01:54:ba:3e:44:b7:f5:04: ae:22:57:78:52:0c:c1:52:89:69:0c:26:34:4d:3f:0d:8a:b2: 04:7b:95:38:19:b2:ec:d3:0d:31:f3:9b:11:56:31:83:cd:5c: e4:9b:ab:53:6b:ff:e1:41:47:94:0c:c8:c7:50:a1:72:af:35: 6b:53:d6:a9:23:5e:02:9d:5c:73:01:a9:a5:89:15:b1:1f:bd: 3c:c7:b5:e9:0a:0a:5b:c9:24:fe:93:61:84:38:3e:e5:2c:66: 4d:f9:f3:e9:b2:78:7a:6e:7d:08:d8:c5:71:fd:19:87:ba:c8: 16:66:e3:90:cf:81:f0:20:94:9d:f0:55:89:0c:90:96:51:af: 49:65:43:51:c7:9d:33:27:64:f7:42:2f:2b:c1:7a:8a:41:7e: 76:93:b1:45:77:ab:77:3c:36:23:82:c9:fe:ba:8d:4f:9f:60: 04:04:c8:b0 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUHyrgFPjp8IfDP3rSbxI97wtLav8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDkwOTUzMDdaFw0yNzAxMDgwOTU4MDdaMDMxMTAvBgNV BAMTKDVCREEzN0U0OTExMzA2QzgyNjQyNjFCMjNDM0YzMUMwMTc0RDEwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84fw9h2HNrGn+tWnpKDmPrEg2 AqqcEJ5i0TsLhGyA3bwhKrtDrVfsHGJ5Bk3f9livr/nTCJtGeqEUxkFsbsmnlw/J qCoJLsePCTnlOXehJmkxiUN8PUC4H4czPNqkrzrvsaZ9vhciSa7DLsi61owLIWF8 s9V6xbLJtI6aElUokHSuv/NsjsfWMYtc7ydHpGOUlJqIli14sTji65w9f/dFRBm6 B7kKFaMsGrhzZngL0qH8w6wvnUL5vqE2JeL0a1sYthJsvG5ZejOPYWEo7dK73AWs s4CSKxOwHtN6No4Hku5lH6JBf2QQy3z41BNWxD+mgYxS/l0idqlp3OyyLwPrAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUW9o35JETBsgmQmGyPD8xwBdNECMwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBACMlpgD BACMlugDBACPDhcDBACW8fADBACijXMDBACnlM4wDQYJKoZIhvcNAQELBQADggEB AB/StUpy9Km8ABZ/hjt6w8VE7s6o6ggfupmgKhmpMY3ufYv8u63bLoEdMy2pUolj i0B3YsCUzJViudf8C03A8CUGBwVOIazi93Rkt/6xIWJILacBVLo+RLf1BK4iV3hS DMFSiWkMJjRNPw2KsgR7lTgZsuzTDTHzmxFWMYPNXOSbq1Nr/+FBR5QMyMdQoXKv NWtT1qkjXgKdXHMBqaWJFbEfvTzHtekKClvJJP6TYYQ4PuUsZk358+myeHpufQjY xXH9GYe6yBZm45DPgfAglJ3wVYkMkJZRr0llQ1HHnTMnZPdCLyvBeopBfnaTsUV3 q3c8NiOCyf66jU+fYAQEyLA= -----END CERTIFICATE-----Generated at Mon Jan 19 08:18:35 2026 by rpki-client