This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: xE5YyaeKkZMd7jh5yTGJ/e6NlXI997A8Yg74ouBTNUM= Subject key identifier: EF:38:7B:83:DF:46:CC:FA:DC:1D:DE:56:95:25:19:51:3B:65:AE:DC Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 39E22E13F420710DF5DE318BFB20568903E8D725 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa Signing time: Fri 21 Nov 2025 11:02:13 +0000 ROA not before: Fri 21 Nov 2025 10:57:13 +0000 ROA not after: Fri 20 Nov 2026 11:02:13 +0000 asID: 25198 IP address blocks: 193.5.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e2:2e:13:f4:20:71:0d:f5:de:31:8b:fb:20:56:89:03:e8:d7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Nov 21 10:57:13 2025 GMT Not After : Nov 20 11:02:13 2026 GMT Subject: CN=EF387B83DF46CCFADC1DDE56952519513B65AEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:c2:0e:71:29:18:2b:49:b1:5e:a4:55:18: d0:47:1a:03:22:94:54:03:92:77:56:e2:55:37:a6: fc:ec:3b:77:88:2f:96:cc:fb:51:a4:1f:25:3f:05: 5f:a0:ed:2b:ea:df:b2:24:0c:f8:0a:f5:4a:dc:c2: 98:1c:76:1d:1e:8d:96:13:47:cc:c6:57:9a:36:0e: 0a:66:ad:76:39:6a:91:9d:1b:57:6b:2f:6d:55:58: a1:35:1d:2d:ec:80:22:6f:21:d5:4b:c0:c7:48:6e: 79:fc:ea:36:ca:b9:c7:a3:e5:be:2e:9f:8d:bf:be: 18:26:8e:70:64:8a:39:08:9c:93:77:4c:f2:da:05: 69:cc:3c:e4:b6:4c:0c:b0:65:85:10:a6:9c:43:a2: 32:d0:b5:1d:70:ef:58:eb:2d:5a:65:7e:3d:8c:49: 7a:1e:0d:fa:fd:13:43:3b:aa:69:b4:e8:cb:5f:d0: c8:4c:2f:8c:48:c9:53:72:c8:e4:4d:9b:72:69:9c: ca:cc:d1:7f:9a:17:ff:6f:cd:3d:9a:b4:43:36:27: cc:ad:72:b6:af:68:6f:e4:fd:24:49:83:bd:1b:87: 86:f8:47:9d:90:a9:28:ce:94:d3:24:7f:48:85:65: 5c:b8:4c:3a:cf:90:d0:c6:97:da:fc:d0:62:82:70: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:38:7B:83:DF:46:CC:FA:DC:1D:DE:56:95:25:19:51:3B:65:AE:DC X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.11.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d6:97:bd:db:45:5a:ac:75:97:30:a8:d8:2f:1f:b8:c7:ea: 76:73:6f:23:6e:6a:22:56:3f:11:e3:4f:3d:16:b8:35:af:72: 94:13:5c:ad:96:71:87:a6:2c:ed:e5:f3:1f:89:76:b7:dc:6a: 06:ee:85:05:5b:88:e9:d4:b8:4e:62:bb:96:bb:d2:76:93:97: c1:8f:a8:48:95:cd:c6:47:ad:1b:37:10:8d:22:59:c4:cf:41: d1:18:07:38:b5:9d:bf:38:1c:b1:b3:e1:80:18:53:60:64:b5: f7:ad:b9:d2:64:18:59:54:55:c3:fd:e7:8d:b7:24:56:53:a7: 7a:8b:e3:90:32:07:c8:48:3b:a8:68:5a:1f:c5:21:ea:4b:7e: 11:f7:17:31:40:fd:20:de:dd:98:38:97:90:55:44:fc:58:61: 7c:e1:72:c6:cb:af:e2:cb:51:1a:3a:58:d3:49:be:81:5d:17: f1:7b:15:7e:c2:3d:e3:a4:f4:3b:10:e3:0f:fd:63:2c:ab:31: 77:d5:c0:23:ff:5b:50:b2:ac:eb:ee:8f:8d:3b:9f:b9:e5:c2: 2e:4f:cf:a0:43:aa:a3:1b:e0:4f:73:38:e4:1e:29:76:8f:99: cf:19:aa:75:c8:42:76:4c:66:4f:0c:49:68:12:fa:54:c6:78: 3b:cb:17:99 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUOeIuE/QgcQ313jGL+yBWiQPo1yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTExMjExMDU3MTNaFw0yNjExMjAxMTAyMTNaMDMxMTAvBgNV BAMTKEVGMzg3QjgzREY0NkNDRkFEQzFEREU1Njk1MjUxOTUxM0I2NUFFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/H8IOcSkYK0mxXqRVGNBHGgMi lFQDkndW4lU3pvzsO3eIL5bM+1GkHyU/BV+g7Svq37IkDPgK9Urcwpgcdh0ejZYT R8zGV5o2DgpmrXY5apGdG1drL21VWKE1HS3sgCJvIdVLwMdIbnn86jbKucej5b4u n42/vhgmjnBkijkInJN3TPLaBWnMPOS2TAywZYUQppxDojLQtR1w71jrLVplfj2M SXoeDfr9E0M7qmm06Mtf0MhML4xIyVNyyORNm3JpnMrM0X+aF/9vzT2atEM2J8yt cravaG/k/SRJg70bh4b4R52QqSjOlNMkf0iFZVy4TDrPkNDGl9r80GKCcF2/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU7zh7g99GzPrcHd5WlSUZUTtlrtwwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBBQsw DQYJKoZIhvcNAQELBQADggEBAAXWl73bRVqsdZcwqNgvH7jH6nZzbyNuaiJWPxHj Tz0WuDWvcpQTXK2WcYemLO3l8x+JdrfcagbuhQVbiOnUuE5iu5a70naTl8GPqEiV zcZHrRs3EI0iWcTPQdEYBzi1nb84HLGz4YAYU2BktfetudJkGFlUVcP95423JFZT p3qL45AyB8hIO6hoWh/FIepLfhH3FzFA/SDe3Zg4l5BVRPxYYXzhcsbLr+LLURo6 WNNJvoFdF/F7FX7CPeOk9DsQ4w/9YyyrMXfVwCP/W1CyrOvuj407n7nlwi5Pz6BD qqMb4E9zOOQeKXaPmc8ZqnXIQnZMZk8MSWgS+lTGeDvLF5k= -----END CERTIFICATE-----Generated at Fri Dec 5 08:00:51 2025 by rpki-client