This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: aRETMjqo8dMaqvSesB8Jd/63X8UiXsKisHpGYRmP1cI=
Subject key identifier: 2B:E9:22:D5:00:0B:E1:F0:FE:A6:AA:04:A2:EE:17:CF:CF:A3:BE:8F
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 2417EA52A2BE3C3319BF7F5E9FD00E8646AE01D3
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS63199.roa
Signing time: Wed 04 Feb 2026 12:57:43 +0000
ROA not before: Wed 04 Feb 2026 12:52:43 +0000
ROA not after: Wed 03 Feb 2027 12:57:43 +0000
asID: 63199
IP address blocks: 188.119.69.0/24 maxlen: 24
194.93.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:17:ea:52:a2:be:3c:33:19:bf:7f:5e:9f:d0:0e:86:46:ae:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:43 2026 GMT
Not After : Feb 3 12:57:43 2027 GMT
Subject: CN=2BE922D5000BE1F0FEA6AA04A2EE17CFCFA3BE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:40:8d:fa:32:7d:20:b5:01:4a:8c:9e:2a:
0a:b8:63:d5:d5:20:31:63:6e:2d:9f:11:3a:6a:e3:
fc:b2:24:df:76:53:e9:38:34:f1:7f:eb:e7:0d:77:
f6:e3:7e:5b:0e:46:34:bd:7a:01:bd:8c:03:e5:b5:
13:77:57:c4:29:3b:5d:e8:85:be:b0:54:05:f5:44:
d1:05:96:d7:6b:0a:3f:19:3c:bb:30:00:1c:11:84:
2e:57:48:c3:dd:ca:72:10:0e:6c:01:0f:c0:b1:33:
42:23:8c:49:a8:f4:d4:86:6a:9b:55:ca:db:31:fc:
6b:66:fc:1a:c3:df:30:b4:2a:70:30:a0:9e:15:52:
81:1f:ad:a6:d1:83:3f:cc:42:37:9b:d7:6c:ef:f3:
96:8a:ce:bb:2b:da:ac:f6:71:c6:a9:76:8c:62:7b:
86:fa:0a:a0:83:49:5e:2b:2f:36:6d:b3:5d:29:fd:
97:27:f7:d6:d4:9e:f6:ee:86:84:a8:ba:27:34:e3:
18:c0:65:57:06:ee:61:ce:1a:fd:15:e8:89:a6:da:
67:fd:f4:58:79:ab:73:e2:16:9a:0b:98:91:f4:71:
65:df:e4:cd:3c:d5:7d:27:b4:9a:e6:3b:46:2b:a5:
be:5e:c2:04:52:a7:3f:e2:e0:96:b3:03:c4:7a:05:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:22:D5:00:0B:E1:F0:FE:A6:AA:04:A2:EE:17:CF:CF:A3:BE:8F
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.69.0/24
194.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3a:47:6b:a7:25:75:7a:b9:4c:26:03:87:b9:03:95:0d:88:
b0:3b:bd:35:c5:94:38:33:27:5f:56:46:b6:59:bc:92:55:e0:
f6:3b:9c:a3:69:c5:e3:30:5d:6d:ef:4f:d7:51:8a:37:26:d1:
50:97:6b:b2:ed:83:50:b5:5c:98:df:6e:c9:e9:2d:35:22:d0:
5c:1e:9f:e1:c8:97:73:cc:e8:35:d4:46:9d:15:32:62:15:83:
1f:5b:18:f4:87:15:67:c2:1b:d9:af:81:9f:3a:d5:87:43:f1:
87:5d:e2:dd:a9:17:d1:fb:08:5b:91:bf:92:87:3c:d2:fa:16:
e0:9e:46:99:68:8b:01:fc:44:dc:2b:71:b4:07:8e:26:f3:92:
d7:73:42:db:c4:67:1e:89:b7:e1:ec:8c:21:2e:ce:16:e3:1b:
82:dc:ad:1f:3b:87:60:41:5b:32:49:25:14:7f:25:af:c9:16:
ed:b6:1e:90:bc:3d:37:38:b6:d5:80:11:46:f7:46:75:4b:97:
47:dc:3e:5d:ef:f5:51:4d:82:ff:ca:46:a3:41:c4:62:1e:67:
18:d6:be:dc:3a:16:00:f6:d4:1a:a7:3a:58:8d:4a:d7:aa:8b:
12:86:15:50:f8:d5:62:0c:46:43:14:1e:a9:0d:ed:7b:13:7e:
d0:1a:a2:dc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJBfqUqK+PDMZv39en9AOhkauAdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDNaFw0yNzAyMDMxMjU3NDNaMDMxMTAvBgNV
BAMTKDJCRTkyMkQ1MDAwQkUxRjBGRUE2QUEwNEEyRUUxN0NGQ0ZBM0JFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj4kCN+jJ9ILUBSoyeKgq4Y9XV
IDFjbi2fETpq4/yyJN92U+k4NPF/6+cNd/bjflsORjS9egG9jAPltRN3V8QpO13o
hb6wVAX1RNEFltdrCj8ZPLswABwRhC5XSMPdynIQDmwBD8CxM0IjjEmo9NSGaptV
ytsx/Gtm/BrD3zC0KnAwoJ4VUoEfrabRgz/MQjeb12zv85aKzrsr2qz2ccapdoxi
e4b6CqCDSV4rLzZts10p/Zcn99bUnvbuhoSouic04xjAZVcG7mHOGv0V6Imm2mf9
9Fh5q3PiFpoLmJH0cWXf5M081X0ntJrmO0Yrpb5ewgRSpz/i4JazA8R6Bb5FAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUK+ki1QAL4fD+pqoEou4Xz8+jvo8wHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC8d0UD
BADCXT4wDQYJKoZIhvcNAQELBQADggEBAIE6R2unJXV6uUwmA4e5A5UNiLA7vTXF
lDgzJ19WRrZZvJJV4PY7nKNpxeMwXW3vT9dRijcm0VCXa7Ltg1C1XJjfbsnpLTUi
0Fwen+HIl3PM6DXURp0VMmIVgx9bGPSHFWfCG9mvgZ861YdD8Ydd4t2pF9H7CFuR
v5KHPNL6FuCeRploiwH8RNwrcbQHjibzktdzQtvEZx6Jt+HsjCEuzhbjG4LcrR87
h2BBWzJJJRR/Ja/JFu22HpC8PTc4ttWAEUb3RnVLl0fcPl3v9VFNgv/KRqNBxGIe
ZxjWvtw6FgD21BqnOliNSteqixKGFVD41WIMRkMUHqkN7XsTftAaotw=
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:24 2026 by rpki-client