This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0= Subject key identifier: 86:4B:35:9D:D9:48:F0:F0:0B:19:9A:17:70:A2:AC:2A:7A:13:D1:F3 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 754911C7FF2FF41101934581D0F087BD88AD8BBD Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197537.roa Signing time: Fri 07 Nov 2025 06:58:28 +0000 ROA not before: Fri 07 Nov 2025 06:53:28 +0000 ROA not after: Fri 06 Nov 2026 06:58:28 +0000 asID: 197537 IP address blocks: 46.236.240.0/24 maxlen: 24 82.139.205.0/24 maxlen: 24 82.139.207.0/24 maxlen: 24 82.139.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:49:11:c7:ff:2f:f4:11:01:93:45:81:d0:f0:87:bd:88:ad:8b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 7 06:53:28 2025 GMT Not After : Nov 6 06:58:28 2026 GMT Subject: CN=864B359DD948F0F00B199A1770A2AC2A7A13D1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:19:90:ba:b3:c1:77:69:fa:19:0f:91:e1:da: 19:c3:f7:6c:57:e4:28:5c:e9:6f:f1:1e:06:8c:df: 36:df:71:80:d2:bc:6a:5f:a4:ca:be:a8:45:4a:88: 80:7a:af:48:a0:e2:4a:a8:0b:a9:00:2f:6a:dc:ae: 54:eb:ed:2c:0f:2e:1e:b8:fd:0c:28:00:a1:db:06: 9b:6b:d6:4e:d5:5d:ef:0d:51:2b:60:10:03:98:ef: a7:34:dc:ed:01:13:f5:47:b3:34:b7:e5:01:1e:e1: 3f:57:a5:d3:d0:b3:5f:d1:c2:60:60:d2:fc:04:79: 3e:f8:47:ef:6b:cc:a7:dc:8c:0c:31:b2:37:2a:11: f3:fe:ee:4a:24:47:df:34:e5:6a:cc:e9:5f:bd:29: 2d:21:81:58:d4:ba:b8:c2:27:cb:9f:8e:f9:85:5e: b6:64:fe:7d:a6:1b:5e:70:ed:4d:75:66:4a:82:46: 72:3f:18:2f:74:63:65:83:73:7f:11:22:db:9b:a7: f4:8e:e8:7c:88:e6:2f:7b:e7:df:35:59:b2:e1:39: ee:56:88:58:f1:69:30:01:ff:13:d3:87:ab:2d:40: 05:72:98:70:ae:8e:6b:cd:80:20:c6:94:8d:5a:2d: 1c:8a:30:48:39:e6:0a:03:ff:18:be:ce:aa:95:fa: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:35:9D:D9:48:F0:F0:0B:19:9A:17:70:A2:AC:2A:7A:13:D1:F3 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.240.0/24 82.139.205.0/24 82.139.207.0/24 82.139.226.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:9f:bc:a5:ec:0e:d1:ff:e2:a4:f6:26:bd:13:4c:18:5f:f5: 55:00:b4:39:fe:35:2b:4d:12:bf:18:a1:03:ac:5d:78:65:fc: 54:2e:ef:2c:bf:0d:58:ba:33:a4:a7:f1:28:a1:fa:53:ab:6e: 5a:94:6d:f3:22:b8:df:e7:d4:62:76:58:5c:fa:90:a9:dd:56: 3c:33:72:9f:2e:12:43:ca:a4:5d:ee:a3:91:7f:28:16:2b:86: cb:81:51:be:8d:11:4b:b8:5b:37:32:99:b0:ac:9c:d8:91:15: 20:0c:1e:8e:45:7b:c3:d3:29:fe:0a:7d:bb:0c:20:4b:24:f0: 32:08:8d:c8:7d:76:b7:8b:d9:6c:b5:d5:7a:53:6c:39:8c:1a: ca:9c:13:ed:24:5f:05:a6:52:6a:99:75:24:ef:1f:35:bb:a9: 27:77:98:e7:33:f7:1c:ee:30:bb:32:fc:d2:29:09:53:e2:1d: bc:5f:34:b4:42:67:43:5f:2e:1e:dc:ad:9c:f5:55:d9:ce:67: 50:4b:f8:6a:0d:7f:c5:a0:50:19:e4:4e:c2:79:36:5f:ba:75: 91:44:57:24:52:6d:17:4b:87:96:b5:fe:c0:b1:f0:b2:55:50: bb:4f:38:f4:19:ec:72:0e:e2:a6:6f:a7:f3:97:8d:d7:40:08: 15:f3:ec:b4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUdUkRx/8v9BEBk0WB0PCHvYiti70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMDcwNjUzMjhaFw0yNjExMDYwNjU4MjhaMDMxMTAvBgNV BAMTKDg2NEIzNTlERDk0OEYwRjAwQjE5OUExNzcwQTJBQzJBN0ExM0QxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJGZC6s8F3afoZD5Hh2hnD92xX 5Chc6W/xHgaM3zbfcYDSvGpfpMq+qEVKiIB6r0ig4kqoC6kAL2rcrlTr7SwPLh64 /QwoAKHbBptr1k7VXe8NUStgEAOY76c03O0BE/VHszS35QEe4T9XpdPQs1/RwmBg 0vwEeT74R+9rzKfcjAwxsjcqEfP+7kokR9805WrM6V+9KS0hgVjUurjCJ8ufjvmF XrZk/n2mG15w7U11ZkqCRnI/GC90Y2WDc38RItubp/SO6HyI5i975981WbLhOe5W iFjxaTAB/xPTh6stQAVymHCujmvNgCDGlI1aLRyKMEg55goD/xi+zqqV+hGLAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUhks1ndlI8PALGZoXcKKsKnoT0fMwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTk3NTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALuzw AwQAUovNAwQAUovPAwQAUoviMA0GCSqGSIb3DQEBCwUAA4IBAQCan7yl7A7R/+Kk 9ia9E0wYX/VVALQ5/jUrTRK/GKEDrF14ZfxULu8svw1YujOkp/EoofpTq25alG3z Irjf59Ridlhc+pCp3VY8M3KfLhJDyqRd7qORfygWK4bLgVG+jRFLuFs3MpmwrJzY kRUgDB6ORXvD0yn+Cn27DCBLJPAyCI3IfXa3i9lstdV6U2w5jBrKnBPtJF8FplJq mXUk7x81u6knd5jnM/cc7jC7MvzSKQlT4h28XzS0QmdDXy4e3K2c9VXZzmdQS/hq DX/FoFAZ5E7CeTZfunWRRFckUm0XS4eWtf7AsfCyVVC7Tzj0GexyDuKmb6fzl43X QAgV8+y0 -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:39 2025 by rpki-client