This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS62425.roa
File: AS62425.roa (raw, json)
Hash identifier: zdID8Ub1Bl+aNUQLKDNg48X+o34J7awB70mVIlLgIv4=
Subject key identifier: 7F:B9:7E:ED:B7:17:5A:3F:2B:58:A6:BC:A1:15:4D:E0:55:1C:83:DF
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 2BE08401AF461D2874BDDA2BD2822F1A88221AAB
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS62425.roa
Signing time: Wed 04 Feb 2026 12:57:50 +0000
ROA not before: Wed 04 Feb 2026 12:52:50 +0000
ROA not after: Wed 03 Feb 2027 12:57:50 +0000
asID: 62425
IP address blocks: 185.231.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e0:84:01:af:46:1d:28:74:bd:da:2b:d2:82:2f:1a:88:22:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:50 2026 GMT
Not After : Feb 3 12:57:50 2027 GMT
Subject: CN=7FB97EEDB7175A3F2B58A6BCA1154DE0551C83DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:c2:02:74:3d:da:cd:dd:44:a1:ec:49:0e:
49:b4:90:89:f1:df:65:6f:aa:98:1e:87:1c:bc:56:
0d:3f:13:c3:27:3b:71:01:bb:4f:a2:95:df:9b:00:
e3:6f:f7:c1:ab:9a:b8:54:fe:a3:2c:16:85:2e:5e:
e9:56:95:09:d4:c9:ce:dd:2e:eb:09:b8:75:11:80:
a8:51:6e:7d:e8:de:cb:e3:0c:af:ab:eb:9f:ea:c7:
12:2e:bd:96:b1:69:4c:48:de:39:76:9f:0c:98:33:
34:a7:7e:81:92:01:d5:5a:89:7a:b4:c1:03:46:8b:
6c:aa:ed:65:55:d7:c8:af:2b:d1:c1:2e:9c:d4:c0:
44:48:b3:a0:0e:11:d0:cd:05:47:41:04:aa:69:24:
c6:45:76:4b:cd:a9:bd:87:2a:36:0c:6e:75:dd:d4:
bd:05:d9:2d:e0:62:ce:04:37:31:86:86:b6:ae:2c:
38:bc:ba:69:8d:39:39:7d:93:2f:20:0d:0e:a4:4a:
9e:24:1b:c4:12:8b:69:71:3c:4c:93:a3:a1:3e:99:
58:51:69:f4:c3:03:94:4f:ac:20:7d:92:28:61:b7:
80:18:4c:05:f5:f4:d3:24:9f:e4:63:88:09:a6:90:
b0:44:b2:81:d4:3a:a7:52:8f:ef:c4:8b:29:df:0f:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:7E:ED:B7:17:5A:3F:2B:58:A6:BC:A1:15:4D:E0:55:1C:83:DF
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS62425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:7b:b0:3a:db:7a:27:cf:eb:bb:0f:12:ce:ef:7f:0e:f0:7d:
85:b9:57:2a:75:77:10:d6:fc:9a:0c:b3:c6:c1:b4:90:d9:3a:
86:98:54:c9:e4:b5:df:28:6f:8c:a5:57:14:b6:7f:1c:b6:82:
30:52:2c:e9:55:47:28:27:1c:47:cb:93:7b:3c:5b:e2:21:b9:
ef:4e:4a:a5:21:f8:14:bc:d7:f5:28:a1:70:6d:5c:8c:d3:d9:
b4:bb:ab:ef:aa:14:51:a7:77:69:08:6d:24:72:ca:c2:7f:71:
a8:c8:cb:6a:e9:bf:67:11:13:44:76:7b:87:a8:2b:a8:61:f2:
f6:f3:c0:76:52:19:d2:3f:59:70:35:a8:4c:3b:4d:8e:36:9c:
e4:f0:06:5d:d9:92:0e:f3:80:8a:34:2f:d5:73:54:e6:18:24:
92:b8:fe:21:18:41:21:01:d1:1c:79:83:f1:fa:e2:97:84:9f:
c3:c0:b0:82:40:45:0f:da:0b:5c:51:ed:03:bd:e2:c9:90:de:
ea:56:45:14:08:fe:1f:ae:96:86:ee:d6:5a:89:55:34:1f:5b:
78:60:e1:5c:4a:c5:32:05:c7:f7:26:4d:66:9a:ea:07:e2:e8:
d3:5d:8c:a6:58:0b:25:4e:1a:0a:9f:b8:55:68:f7:99:30:1a:
3e:56:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:27 2026 by rpki-client