This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: fUzUdeAhxbvJ/kHVeJ/JIyPWWI1DdnEIta+2vySpSO8= Subject key identifier: B2:1E:70:F6:47:86:72:61:48:44:65:69:EA:F9:B7:24:46:BC:62:72 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 169A3F970CEE0396D4516A91416BF6944B8EE464 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa Signing time: Fri 16 Jan 2026 08:31:05 +0000 ROA not before: Fri 16 Jan 2026 08:26:05 +0000 ROA not after: Fri 15 Jan 2027 08:31:05 +0000 asID: 25198 IP address blocks: 46.236.192.0/24 maxlen: 24 46.236.216.0/24 maxlen: 24 46.236.254.0/24 maxlen: 24 46.236.255.0/24 maxlen: 24 82.139.194.0/24 maxlen: 24 82.139.220.0/24 maxlen: 24 82.139.233.0/24 maxlen: 24 82.139.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9a:3f:97:0c:ee:03:96:d4:51:6a:91:41:6b:f6:94:4b:8e:e4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 16 08:26:05 2026 GMT Not After : Jan 15 08:31:05 2027 GMT Subject: CN=B21E70F64786726148446569EAF9B72446BC6272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:2c:5a:ec:ea:36:e1:35:b9:1b:00:70:a6: d1:16:08:d1:9c:c8:d9:f6:58:bd:2d:69:68:19:d7: f0:6d:df:7a:ec:23:59:43:2d:2d:8d:5d:b3:d3:f3: 6c:15:ae:a2:68:ed:67:4a:5d:62:54:aa:d9:a7:d5: a7:da:31:0e:2f:1c:b6:e4:d8:7e:4d:2c:78:22:64: 73:81:4c:01:41:34:86:11:51:dc:52:5d:26:2c:ff: af:27:97:c1:34:71:45:d0:e6:ce:c4:8d:50:45:d7: fb:02:20:32:60:6e:49:e8:89:0e:dc:1c:26:01:66: ee:b6:52:23:ac:27:44:c3:da:44:03:68:83:19:a5: e3:c4:29:81:bc:20:2d:96:4b:92:06:0c:54:bc:fc: 7a:2b:4c:5c:12:0b:7f:db:19:c8:a7:a8:d2:dd:fa: 42:23:ce:a8:32:75:32:f6:da:f2:c6:ca:c2:f5:bd: 84:15:37:1a:33:4f:7b:51:cf:88:d0:11:fb:2f:d7: 8e:ef:32:7b:a8:91:6c:ba:b5:98:8d:34:f2:ca:15: 3a:5e:13:30:0d:31:40:56:a0:0b:65:47:7d:d4:84: 02:b9:4d:b5:34:f9:dd:ac:e4:21:34:aa:dc:70:00: ef:5b:48:8d:0c:9b:c2:0e:a8:34:4e:ba:19:37:1e: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:70:F6:47:86:72:61:48:44:65:69:EA:F9:B7:24:46:BC:62:72 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.192.0/24 46.236.216.0/24 46.236.254.0/23 82.139.194.0/24 82.139.220.0/24 82.139.233.0/24 82.139.248.0/24 Signature Algorithm: sha256WithRSAEncryption 61:e0:c7:45:92:25:59:d9:7c:1f:35:4c:40:60:62:41:90:63: 57:0d:38:aa:71:9a:f4:81:84:ba:6f:25:42:68:df:bd:28:2c: ad:87:02:11:fc:f8:a3:30:c8:77:c2:65:f5:35:a6:1c:3a:ca: 99:66:20:33:72:66:4b:30:a3:37:d6:3b:1d:5b:37:e2:13:ac: 91:ce:93:66:94:3c:01:fd:ff:68:1a:8b:2e:48:17:b2:87:b8: 64:af:5e:96:32:12:a4:20:e0:e1:91:d7:f8:74:a7:57:96:c3: 8c:91:66:39:5c:ab:64:6f:20:be:4e:ed:30:27:4d:2e:3f:e3: 2f:0c:e8:31:cb:c3:e4:21:10:aa:09:c2:db:62:80:97:65:bb: 16:52:5a:00:35:d4:75:ba:82:52:0c:3f:eb:f4:37:3b:af:cf: 2f:9f:33:2b:8f:2a:ab:9f:f9:c2:39:d7:11:3d:39:b9:e5:f3: e1:3c:f0:2b:8a:4d:19:6d:a3:a6:f6:39:3c:67:b8:81:fd:f2: ed:07:67:a0:cd:b9:d3:75:15:e9:60:58:a1:8b:20:38:17:79: dd:5b:50:cf:fc:a9:20:25:39:8f:76:3b:f9:c5:66:12:71:20: 6a:5f:e5:a0:a4:ef:7c:ec:7a:93:78:50:88:3f:ab:0d:52:7b: 3f:06:74:c3 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUFpo/lwzuA5bUUWqRQWv2lEuO5GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMTYwODI2MDVaFw0yNzAxMTUwODMxMDVaMDMxMTAvBgNV BAMTKEIyMUU3MEY2NDc4NjcyNjE0ODQ0NjU2OUVBRjlCNzI0NDZCQzYyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPCxa7Oo24TW5GwBwptEWCNGc yNn2WL0taWgZ1/Bt33rsI1lDLS2NXbPT82wVrqJo7WdKXWJUqtmn1afaMQ4vHLbk 2H5NLHgiZHOBTAFBNIYRUdxSXSYs/68nl8E0cUXQ5s7EjVBF1/sCIDJgbknoiQ7c HCYBZu62UiOsJ0TD2kQDaIMZpePEKYG8IC2WS5IGDFS8/HorTFwSC3/bGcinqNLd +kIjzqgydTL22vLGysL1vYQVNxozT3tRz4jQEfsv147vMnuokWy6tZiNNPLKFTpe EzANMUBWoAtlR33UhAK5TbU0+d2s5CE0qtxwAO9bSI0Mm8IOqDROuhk3HhJjAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUsh5w9keGcmFIRGVp6vm3JEa8YnIwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAAu7MAD BAAu7NgDBAEu7P4DBABSi8IDBABSi9wDBABSi+kDBABSi/gwDQYJKoZIhvcNAQEL BQADggEBAGHgx0WSJVnZfB81TEBgYkGQY1cNOKpxmvSBhLpvJUJo370oLK2HAhH8 +KMwyHfCZfU1phw6yplmIDNyZkswozfWOx1bN+ITrJHOk2aUPAH9/2gaiy5IF7KH uGSvXpYyEqQg4OGR1/h0p1eWw4yRZjlcq2RvIL5O7TAnTS4/4y8M6DHLw+QhEKoJ wttigJdluxZSWgA11HW6glIMP+v0Nzuvzy+fMyuPKquf+cI51xE9Obnl8+E88CuK TRlto6b2OTxnuIH98u0HZ6DNudN1FelgWKGLIDgXed1bUM/8qSAlOY92O/nFZhJx IGpf5aCk73zsepN4UIg/qw1Sez8GdMM= -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:57 2026 by rpki-client