This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: s1u063vO3qVp7hya7AuUNrlzSYS7Ns0Gls9cYTilaN8= Subject key identifier: CF:B7:07:AB:E8:2B:1A:B6:66:33:B8:D0:95:E0:66:14:1F:5B:C9:CA Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 6B0A838E1D2BF77414C6D41595D9EA56F14935BB Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS25198.roa Signing time: Wed 04 Feb 2026 12:57:38 +0000 ROA not before: Wed 04 Feb 2026 12:52:38 +0000 ROA not after: Wed 03 Feb 2027 12:57:38 +0000 asID: 25198 IP address blocks: 83.171.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0a:83:8e:1d:2b:f7:74:14:c6:d4:15:95:d9:ea:56:f1:49:35:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:38 2026 GMT Not After : Feb 3 12:57:38 2027 GMT Subject: CN=CFB707ABE82B1AB66633B8D095E066141F5BC9CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:87:51:86:66:54:0e:a8:49:07:32:1e:95: f5:6a:e2:51:ce:fe:cb:e8:72:47:b1:d3:6d:c2:5b: 49:b1:d7:81:40:25:ac:51:73:16:fe:c9:a2:c0:7f: 80:82:8e:d1:60:72:61:fc:20:8f:8a:94:04:9b:dd: e6:10:86:17:e8:a9:39:5d:85:5f:49:9c:17:d9:27: 96:37:6e:22:df:7a:11:ce:c2:5e:2f:9d:a7:55:ac: bf:98:7c:99:c6:76:1c:f9:7f:b9:36:51:43:b3:84: 5c:27:34:81:6c:a6:e7:0c:f6:b3:a0:0e:a4:66:7a: 86:61:1e:bf:3d:c5:46:4c:a2:4e:1c:a2:f7:82:2f: 56:53:40:dc:e1:39:f7:fa:93:97:9f:e6:ae:a3:ef: 64:50:5d:03:ea:4d:ca:fe:a6:b9:2b:9a:ef:1c:c7: 15:8b:60:8a:a7:e7:92:6f:85:fe:c6:c1:65:66:88: 66:a7:b2:27:74:1c:e4:bb:e3:7a:13:33:df:0f:fa: 6b:a1:2e:ca:38:13:2f:cf:dd:6b:d7:0e:44:e4:96: 4c:e6:22:18:ac:6a:a6:f5:6d:9e:84:70:b4:1f:04: 67:38:69:20:2f:e6:e7:53:4c:93:79:05:9f:e5:01: 7b:70:38:b5:7a:d9:82:96:6a:25:43:f2:d6:4e:4d: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:07:AB:E8:2B:1A:B6:66:33:B8:D0:95:E0:66:14:1F:5B:C9:CA X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.245.0/24 Signature Algorithm: sha256WithRSAEncryption 10:17:7b:34:fb:00:cf:9a:c0:32:d4:4e:10:df:95:8b:d8:19: 97:cc:d6:f1:37:31:8d:42:63:6a:fa:7e:c4:e1:be:e8:a7:bd: 46:a7:c1:2d:33:cb:08:51:f0:b4:2a:51:16:61:66:de:0c:05: 09:b3:f5:07:26:2b:a2:18:1e:d2:95:b6:3b:c0:da:b1:dd:d7: 11:6e:13:83:cc:9c:3d:61:a9:63:2e:87:f0:ed:41:ff:05:cc: c7:ff:61:41:05:65:9c:2b:2b:dd:dd:8b:50:ac:a9:50:e0:75: 68:5f:a0:91:06:20:7d:db:0c:c6:5f:b5:42:af:a8:f1:11:e2: ee:c3:08:a3:53:eb:1a:ad:1d:b8:34:8e:cc:db:53:b1:89:a4: d0:b1:a4:b8:76:e6:c5:ac:ad:f1:b3:09:a1:b9:f0:0b:93:65: 63:e5:5b:bf:95:d0:0a:5e:ef:f7:8d:ae:ba:ca:41:6b:23:0e: 9f:47:32:f6:a6:6d:d8:71:aa:b6:69:39:eb:ba:63:bd:5c:09: 7d:89:46:e0:95:3d:ee:30:75:25:d1:5c:d9:f3:dd:e4:df:7f: b4:87:cb:b9:bb:48:fa:ca:13:ec:0c:a8:ce:b1:89:89:d0:62: 8b:e6:ae:96:a4:a3:1a:4b:80:42:1c:36:14:19:a5:85:2f:7d: 69:43:e1:1e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUawqDjh0r93QUxtQVldnqVvFJNbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzhaFw0yNzAyMDMxMjU3MzhaMDMxMTAvBgNV BAMTKENGQjcwN0FCRTgyQjFBQjY2NjMzQjhEMDk1RTA2NjE0MUY1QkM5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVIdRhmZUDqhJBzIelfVq4lHO /svockex023CW0mx14FAJaxRcxb+yaLAf4CCjtFgcmH8II+KlASb3eYQhhfoqTld hV9JnBfZJ5Y3biLfehHOwl4vnadVrL+YfJnGdhz5f7k2UUOzhFwnNIFspucM9rOg DqRmeoZhHr89xUZMok4coveCL1ZTQNzhOff6k5ef5q6j72RQXQPqTcr+prkrmu8c xxWLYIqn55Jvhf7GwWVmiGansid0HOS743oTM98P+muhLso4Ey/P3WvXDkTklkzm Ihisaqb1bZ6EcLQfBGc4aSAv5udTTJN5BZ/lAXtwOLV62YKWaiVD8tZOTUGDAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUz7cHq+grGrZmM7jQleBmFB9bycowHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTq/Uw DQYJKoZIhvcNAQELBQADggEBABAXezT7AM+awDLUThDflYvYGZfM1vE3MY1CY2r6 fsThvuinvUanwS0zywhR8LQqURZhZt4MBQmz9QcmK6IYHtKVtjvA2rHd1xFuE4PM nD1hqWMuh/DtQf8FzMf/YUEFZZwrK93di1CsqVDgdWhfoJEGIH3bDMZftUKvqPER 4u7DCKNT6xqtHbg0jszbU7GJpNCxpLh25sWsrfGzCaG58AuTZWPlW7+V0Ape7/eN rrrKQWsjDp9HMvambdhxqrZpOeu6Y71cCX2JRuCVPe4wdSXRXNnz3eTff7SHy7m7 SPrKE+wMqM6xiYnQYovmrpakoxpLgEIcNhQZpYUvfWlD4R4= -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:29 2026 by rpki-client