This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199183.roa File: AS199183.roa (raw, json) Hash identifier: UpGKmjnDZv9pQPmlB+8135kXulx4aAGOl9B8kK7wLxU= Subject key identifier: 12:F0:5D:E9:16:4C:10:F5:53:71:22:7F:E1:92:4A:B0:06:4D:FB:25 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 38736E3CDAB6442FA4A5A02D517D00DB237356CA Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199183.roa Signing time: Wed 10 Dec 2025 22:55:52 +0000 ROA not before: Wed 10 Dec 2025 22:50:52 +0000 ROA not after: Wed 09 Dec 2026 22:55:52 +0000 asID: 199183 IP address blocks: 2a14:7581:ff4::/48 maxlen: 48 2a14:7581:9f50::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:73:6e:3c:da:b6:44:2f:a4:a5:a0:2d:51:7d:00:db:23:73:56:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 10 22:50:52 2025 GMT Not After : Dec 9 22:55:52 2026 GMT Subject: CN=12F05DE9164C10F55371227FE1924AB0064DFB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:69:d5:cf:c4:38:6c:75:be:68:39:4a:47: ad:7c:6d:37:8a:ba:e5:43:4e:9b:15:1c:74:5a:4f: 3f:fb:f6:e8:63:be:62:7e:b1:88:8f:46:9b:91:58: b0:f8:31:b9:f6:28:ad:1c:a8:2f:5d:f3:80:ce:a4: e7:2f:73:73:b6:e3:76:3e:9f:7d:b2:ac:d8:5a:d2: f8:2e:dd:b5:ad:78:c7:5f:75:33:2d:9a:ea:3e:0a: db:58:6e:6a:cf:a6:bc:fb:f3:9c:69:94:fa:1b:51: 33:77:d5:43:e3:f9:d4:0b:76:4e:d4:54:28:2f:1e: 44:7e:1f:29:28:20:c5:49:8a:bc:a4:01:a7:ae:66: 35:a3:ee:db:0a:06:fa:f4:bc:96:7e:77:81:2c:ee: 10:95:9e:01:82:f3:68:e5:6a:b4:78:d8:8d:ce:a3: f8:23:2d:b2:95:be:12:8d:09:4e:cd:0c:73:c7:15: fa:6b:1a:7d:92:0f:ae:5e:18:66:35:0f:71:12:aa: b5:06:e2:a2:5a:c9:ac:e1:e1:78:32:9b:57:2c:11: c1:af:5f:17:b9:fc:c2:aa:0b:bd:00:ad:d6:54:0e: 1b:c8:c8:bf:2e:be:2d:b1:b6:ef:bb:d4:89:c6:3f: c8:4d:dc:2a:e2:96:c1:2d:c0:cf:e0:bc:ec:df:d9: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:5D:E9:16:4C:10:F5:53:71:22:7F:E1:92:4A:B0:06:4D:FB:25 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199183.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:ff4::/48 2a14:7581:9f50::/44 Signature Algorithm: sha256WithRSAEncryption 81:28:58:50:de:0f:b7:5d:fb:17:22:0d:67:33:42:57:94:74: a8:9a:fb:15:e4:f8:73:9a:f3:75:53:df:70:49:da:37:78:cd: 20:c6:3b:90:39:70:b7:d7:77:c8:3d:51:ef:e3:7a:e7:b1:10: 45:24:dd:6f:ee:00:34:23:7d:01:7b:91:d9:ba:6b:5e:06:52: 07:a7:26:6c:aa:c8:e2:d9:c8:30:4f:1a:00:d0:64:34:00:37: 50:51:8c:15:c0:07:ea:0a:13:64:48:45:c0:f5:6e:c2:82:1f: fd:b6:42:c4:b5:df:f3:11:73:35:ef:8c:d7:82:1b:e3:9c:b6: 50:3e:2b:94:34:4a:b8:dc:99:cb:4d:51:c5:0d:17:f0:26:1a: 81:b6:63:e6:25:ca:ca:2e:d9:5f:9f:aa:7a:e7:b4:f5:aa:e2: 36:a9:75:9c:33:8d:cc:5f:63:09:9a:b4:44:e5:99:90:66:3a: 2a:7f:7f:5e:88:3a:49:26:cd:61:2a:e8:25:f4:b0:df:ef:cd: 4a:74:41:1a:7e:fb:eb:f1:83:a8:25:61:45:cb:66:46:2b:87: 08:bd:ae:0c:67:df:1a:09:06:b6:2b:95:b0:b3:36:a1:66:76: 7a:96:3a:a6:9f:69:bf:c3:13:42:6e:82:1b:6c:e8:0c:83:c5: 52:cb:18:83 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUOHNuPNq2RC+kpaAtUX0A2yNzVsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTAyMjUwNTJaFw0yNjEyMDkyMjU1NTJaMDMxMTAvBgNV BAMTKDEyRjA1REU5MTY0QzEwRjU1MzcxMjI3RkUxOTI0QUIwMDY0REZCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLmnVz8Q4bHW+aDlKR618bTeK uuVDTpsVHHRaTz/79uhjvmJ+sYiPRpuRWLD4Mbn2KK0cqC9d84DOpOcvc3O243Y+ n32yrNha0vgu3bWteMdfdTMtmuo+CttYbmrPprz785xplPobUTN31UPj+dQLdk7U VCgvHkR+HykoIMVJirykAaeuZjWj7tsKBvr0vJZ+d4Es7hCVngGC82jlarR42I3O o/gjLbKVvhKNCU7NDHPHFfprGn2SD65eGGY1D3ESqrUG4qJayazh4Xgym1csEcGv Xxe5/MKqC70ArdZUDhvIyL8uvi2xtu+71InGP8hN3CrilsEtwM/gvOzf2XwPAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUEvBd6RZMEPVTcSJ/4ZJKsAZN+yUwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTk5MTgzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhR1 gQ/0AwcEKhR1gZ9QMA0GCSqGSIb3DQEBCwUAA4IBAQCBKFhQ3g+3XfsXIg1nM0JX lHSomvsV5PhzmvN1U99wSdo3eM0gxjuQOXC313fIPVHv43rnsRBFJN1v7gA0I30B e5HZumteBlIHpyZsqsji2cgwTxoA0GQ0ADdQUYwVwAfqChNkSEXA9W7Cgh/9tkLE td/zEXM174zXghvjnLZQPiuUNEq43JnLTVHFDRfwJhqBtmPmJcrKLtlfn6p657T1 quI2qXWcM43MX2MJmrRE5ZmQZjoqf39eiDpJJs1hKugl9LDf781KdEEafvvr8YOo JWFFy2ZGK4cIva4MZ98aCQa2K5WwszahZnZ6ljqmn2m/wxNCboIbbOgMg8VSyxiD -----END CERTIFICATE-----Generated at Sat Dec 13 06:57:52 2025 by rpki-client