This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: FvVb2cGLr9P58j2LmTYr+pmEv/okWzQ8pvU7Apnw+6Q= Subject key identifier: 86:C0:F0:1C:1B:19:4D:F2:C1:FE:60:E8:7C:77:00:51:30:9B:EE:6B Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 2383DDE33B56D3EC702469040CC96D23AE8EA268 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS63199.roa Signing time: Thu 08 Jan 2026 09:21:44 +0000 ROA not before: Thu 08 Jan 2026 09:16:44 +0000 ROA not after: Thu 07 Jan 2027 09:21:44 +0000 asID: 63199 IP address blocks: 82.139.206.0/24 maxlen: 24 212.60.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:83:dd:e3:3b:56:d3:ec:70:24:69:04:0c:c9:6d:23:ae:8e:a2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 8 09:16:44 2026 GMT Not After : Jan 7 09:21:44 2027 GMT Subject: CN=86C0F01C1B194DF2C1FE60E87C770051309BEE6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:41:b0:a5:9a:d3:bc:15:91:6b:fb:ee:8b: 67:57:1a:0f:2a:3c:a5:71:ae:6b:b5:0a:80:c7:35: c5:43:6c:c9:c5:73:56:01:62:f9:4b:0e:56:9f:f8: b9:80:43:4c:1b:b6:65:bc:82:9e:51:c4:ce:28:4e: d8:2f:1d:62:e2:81:9f:2b:ec:fa:52:2e:a0:88:ea: bf:b2:31:e2:6d:65:47:4f:65:cc:d1:29:24:b6:96: 57:fc:2c:72:c5:70:b1:0d:79:ee:90:13:b8:85:72: f0:99:9a:2e:7f:24:6b:46:59:57:8e:e6:84:f5:27: 4d:ae:a7:50:24:71:b2:1a:d2:bc:f8:fe:3c:c3:1d: 94:2e:60:83:a9:d4:bd:bd:d1:fe:e9:33:33:9b:7a: 84:6c:1a:16:20:3e:a6:b7:7b:29:20:1f:3e:ec:ed: 40:0d:74:29:3b:20:45:53:19:25:f7:e8:d0:50:f1: d6:4c:a1:60:dd:96:c6:e3:76:f5:f7:9f:97:56:35: 84:d3:c7:86:b6:87:91:d0:fb:68:f9:d2:57:69:83: 58:4e:2b:b6:b1:6d:86:e6:23:c4:44:12:49:95:f2: a9:e0:f4:03:dd:30:4f:ca:96:1f:04:d4:07:99:e6: b5:48:e7:60:9f:2e:cf:b4:aa:ca:c5:98:bd:ac:93: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C0:F0:1C:1B:19:4D:F2:C1:FE:60:E8:7C:77:00:51:30:9B:EE:6B X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.206.0/24 212.60.157.0/24 Signature Algorithm: sha256WithRSAEncryption 58:07:40:de:56:1d:48:2e:88:44:2b:af:95:57:a6:0c:39:c8: 72:f3:ee:8b:cf:01:9a:28:cb:5e:e8:3c:21:58:df:8a:03:12: 39:7d:96:fb:b0:2d:b8:55:ba:24:f0:a9:98:53:17:a4:58:44: ae:7f:b1:d5:ba:e0:00:f2:4a:d4:34:68:4b:11:11:6f:c6:e8: 35:ff:2b:b5:e8:25:7b:82:e5:4d:5f:2f:37:03:2f:21:17:79: 78:dc:2f:d3:b9:c3:87:45:bc:74:8a:ea:19:63:9e:21:21:85: 6e:80:2f:c8:67:76:0c:73:5a:af:a1:0c:fd:85:e2:b7:58:81: f6:f8:2e:58:ab:56:60:48:cc:7f:86:fd:d5:be:8b:7c:c2:97: e6:ba:b0:80:fe:42:31:55:43:08:4a:fb:48:e1:10:89:87:68: f5:b4:e0:80:24:b1:6c:3b:2e:0b:81:3c:97:39:89:91:f4:4d: 00:76:be:9a:a4:60:c2:a6:0b:e1:a6:ea:23:f9:52:64:a4:8e: 27:d2:a0:ff:5e:14:1c:c1:01:88:ce:cc:be:08:19:91:73:ad: a6:6b:a1:c9:d0:fa:05:e9:1f:71:9d:0d:e0:37:32:56:76:b6: 49:9b:49:39:74:93:55:4f:86:98:24:be:79:d4:c5:8e:c7:9d: fb:e7:e9:49 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUI4Pd4ztW0+xwJGkEDMltI66OomgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMDgwOTE2NDRaFw0yNzAxMDcwOTIxNDRaMDMxMTAvBgNV BAMTKDg2QzBGMDFDMUIxOTRERjJDMUZFNjBFODdDNzcwMDUxMzA5QkVFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JUGwpZrTvBWRa/vui2dXGg8q PKVxrmu1CoDHNcVDbMnFc1YBYvlLDlaf+LmAQ0wbtmW8gp5RxM4oTtgvHWLigZ8r 7PpSLqCI6r+yMeJtZUdPZczRKSS2llf8LHLFcLENee6QE7iFcvCZmi5/JGtGWVeO 5oT1J02up1AkcbIa0rz4/jzDHZQuYIOp1L290f7pMzObeoRsGhYgPqa3eykgHz7s 7UANdCk7IEVTGSX36NBQ8dZMoWDdlsbjdvX3n5dWNYTTx4a2h5HQ+2j50ldpg1hO K7axbYbmI8REEkmV8qng9APdME/Klh8E1AeZ5rVI52CfLs+0qsrFmL2sk0kVAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUhsDwHBsZTfLB/mDofHcAUTCb7mswHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSi84D BADUPJ0wDQYJKoZIhvcNAQELBQADggEBAFgHQN5WHUguiEQrr5VXpgw5yHLz7ovP AZooy17oPCFY34oDEjl9lvuwLbhVuiTwqZhTF6RYRK5/sdW64ADyStQ0aEsREW/G 6DX/K7XoJXuC5U1fLzcDLyEXeXjcL9O5w4dFvHSK6hljniEhhW6AL8hndgxzWq+h DP2F4rdYgfb4LlirVmBIzH+G/dW+i3zCl+a6sID+QjFVQwhK+0jhEImHaPW04IAk sWw7LguBPJc5iZH0TQB2vpqkYMKmC+Gm6iP5UmSkjifSoP9eFBzBAYjOzL4IGZFz raZrocnQ+gXpH3GdDeA3MlZ2tkmbSTl0k1VPhpgkvnnUxY7Hnfvn6Uk= -----END CERTIFICATE-----Generated at Wed Jan 21 01:10:04 2026 by rpki-client