This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: b9MbLvUtyHaXut0tFiOSnxwmHL55kUIsxxQ3IoWLeZw= Subject key identifier: 6D:FC:1C:40:77:D0:91:31:6A:AD:CB:DC:5C:37:92:2E:99:5D:4E:D7 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 751412814DB27C547BA202CB74EE68134CFD9DDC Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa Signing time: Fri 28 Nov 2025 08:50:24 +0000 ROA not before: Fri 28 Nov 2025 08:45:24 +0000 ROA not after: Fri 27 Nov 2026 08:50:24 +0000 asID: 25198 IP address blocks: 46.236.252.0/24 maxlen: 24 46.236.254.0/24 maxlen: 24 46.236.255.0/24 maxlen: 24 82.139.194.0/24 maxlen: 24 82.139.233.0/24 maxlen: 24 82.139.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:14:12:81:4d:b2:7c:54:7b:a2:02:cb:74:ee:68:13:4c:fd:9d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 28 08:45:24 2025 GMT Not After : Nov 27 08:50:24 2026 GMT Subject: CN=6DFC1C4077D091316AADCBDC5C37922E995D4ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:ce:04:86:a1:05:f0:8b:02:d0:bc:c8:f1: 09:88:33:81:f5:48:3a:f8:76:b5:1e:0c:09:a8:3e: b5:dc:37:ef:a7:8f:9d:93:2e:79:1a:a5:59:45:c7: 3c:09:c6:dd:81:2c:96:67:16:e4:58:a8:8a:64:51: 85:43:a0:83:1c:94:de:f4:46:db:a2:81:3f:13:31: cc:3d:34:c2:0e:ae:a7:6c:a2:c8:92:e6:43:be:4d: 4c:3f:ec:84:44:10:d2:2e:0c:8c:f9:09:7b:88:bb: 77:04:4e:ec:5c:f2:71:5e:1e:9f:72:c3:8f:ce:73: 11:2d:4b:b3:67:49:9f:7c:4f:b8:2a:18:c6:26:4d: 7e:5a:6a:86:3f:59:18:1d:eb:32:98:8d:e1:03:92: a8:1d:e6:74:e5:a5:02:e0:f1:c7:3c:35:52:c7:f3: e0:f3:f0:a3:c6:ba:8b:6e:77:61:96:2f:07:1b:80: ec:3f:a4:48:5c:58:f4:a6:d7:b6:38:a7:59:8e:f0: 27:fe:7b:52:31:50:a3:e1:f2:f4:b8:fa:ae:7a:e9: 63:60:6d:a4:2c:08:eb:33:17:6d:df:93:a9:e0:51: 18:de:bd:96:2e:10:cb:aa:cb:97:e6:9c:91:15:9f: b1:aa:41:f3:67:b4:ef:57:e2:27:ce:7f:a1:50:eb: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FC:1C:40:77:D0:91:31:6A:AD:CB:DC:5C:37:92:2E:99:5D:4E:D7 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.252.0/24 46.236.254.0/23 82.139.194.0/24 82.139.233.0/24 82.139.248.0/24 Signature Algorithm: sha256WithRSAEncryption 31:13:4d:47:eb:15:d0:2a:11:2a:63:f9:18:0b:69:ab:d8:2a: 8c:2c:30:d7:13:3c:1e:67:90:0d:02:33:8a:96:47:ba:ae:37: e2:d2:0b:05:71:35:ff:e2:dc:c6:a7:c9:a2:4c:e9:cd:4d:1c: 61:13:a8:59:a1:2e:54:3b:0b:a4:47:cf:a3:22:35:62:1e:b1: a7:5e:a5:85:e2:79:3a:15:8f:2b:6a:a6:8a:be:78:18:66:6b: 57:8c:23:c3:18:65:8c:d7:c9:b7:2d:a0:82:5b:00:0c:82:f8: 2e:31:da:ca:13:d3:ac:f4:cc:d3:2e:5c:9c:19:86:95:28:2b: b7:23:57:32:e6:36:67:ea:79:0c:bb:38:97:d4:c7:27:65:81: f4:b5:f3:d7:20:58:7f:5b:7e:6c:f3:94:aa:dd:f3:bd:e4:49: 69:78:d9:fd:e3:ed:48:b8:24:e7:92:9e:6a:2f:ab:e4:7b:b0: 43:12:b0:4d:78:28:1d:28:3d:2b:37:40:db:ca:9c:49:eb:27: 17:f9:35:06:aa:03:4f:17:d5:25:a4:94:38:c7:ff:be:84:c4: 89:3f:2a:1f:f6:fd:cb:80:cc:44:58:70:de:fe:9d:4b:4c:3a: 04:8a:08:28:62:1e:89:59:2f:cb:45:d9:aa:f5:2f:8d:3c:af: 62:41:3b:00 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUdRQSgU2yfFR7ogLLdO5oE0z9ndwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMjgwODQ1MjRaFw0yNjExMjcwODUwMjRaMDMxMTAvBgNV BAMTKDZERkMxQzQwNzdEMDkxMzE2QUFEQ0JEQzVDMzc5MjJFOTk1RDRFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ec4EhqEF8IsC0LzI8QmIM4H1 SDr4drUeDAmoPrXcN++nj52TLnkapVlFxzwJxt2BLJZnFuRYqIpkUYVDoIMclN70 RtuigT8TMcw9NMIOrqdsosiS5kO+TUw/7IREENIuDIz5CXuIu3cETuxc8nFeHp9y w4/OcxEtS7NnSZ98T7gqGMYmTX5aaoY/WRgd6zKYjeEDkqgd5nTlpQLg8cc8NVLH 8+Dz8KPGuotud2GWLwcbgOw/pEhcWPSm17Y4p1mO8Cf+e1IxUKPh8vS4+q566WNg baQsCOszF23fk6ngURjevZYuEMuqy5fmnJEVn7GqQfNntO9X4ifOf6FQ6xthAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUbfwcQHfQkTFqrcvcXDeSLpldTtcwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAu7PwD BAEu7P4DBABSi8IDBABSi+kDBABSi/gwDQYJKoZIhvcNAQELBQADggEBADETTUfr FdAqESpj+RgLaavYKowsMNcTPB5nkA0CM4qWR7quN+LSCwVxNf/i3ManyaJM6c1N HGETqFmhLlQ7C6RHz6MiNWIesadepYXieToVjytqpoq+eBhma1eMI8MYZYzXybct oIJbAAyC+C4x2soT06z0zNMuXJwZhpUoK7cjVzLmNmfqeQy7OJfUxydlgfS189cg WH9bfmzzlKrd873kSWl42f3j7Ui4JOeSnmovq+R7sEMSsE14KB0oPSs3QNvKnEnr Jxf5NQaqA08X1SWklDjH/76ExIk/Kh/2/cuAzERYcN7+nUtMOgSKCChiHolZL8tF 2ar1L408r2JBOwA= -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:59 2025 by rpki-client