This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: mKuZLq8Pbv39DC17gNWcqX0PS6gOHCVq8ddV5p89MUU= Subject key identifier: 36:AB:D1:69:D2:5E:C2:02:82:A3:8B:AE:29:66:8C:02:D5:4F:74:66 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 58AC6F98C998F435774B73BC963437728FA6633B Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS25198.roa Signing time: Sun 07 Dec 2025 04:11:35 +0000 ROA not before: Sun 07 Dec 2025 04:06:35 +0000 ROA not after: Sun 06 Dec 2026 04:11:35 +0000 asID: 25198 IP address blocks: 193.32.187.0/24 maxlen: 24 194.93.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ac:6f:98:c9:98:f4:35:77:4b:73:bc:96:34:37:72:8f:a6:63:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 7 04:06:35 2025 GMT Not After : Dec 6 04:11:35 2026 GMT Subject: CN=36ABD169D25EC20282A38BAE29668C02D54F7466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:be:39:c2:4a:e1:8d:dd:bf:6e:c5:aa:09: 3a:af:41:a7:c0:72:4b:1a:e5:f8:d3:76:af:44:cb: a5:62:25:dc:7c:17:e5:e5:40:3d:ac:22:4c:d9:c7: 89:f1:6f:1c:90:bd:80:60:7d:8a:6e:2e:91:c3:c6: bb:7f:8e:fc:f2:ab:74:c9:8e:36:df:00:a1:d7:b6: dc:9f:2a:f3:69:63:a6:87:a5:a5:e9:a2:9d:1b:fe: 5e:c0:37:67:9c:8f:c8:d9:1e:76:62:3b:48:ea:b9: 14:14:01:a9:4b:5e:c4:2c:02:e2:8c:32:1a:e3:a6: 9e:57:b9:2b:93:e1:48:bd:8e:9e:94:51:7b:10:28: e6:86:da:a8:24:4c:5b:36:5a:f0:95:bc:0a:35:2d: 05:ce:25:81:34:53:d9:7e:43:b5:f1:33:49:65:a9: a4:f6:c3:6e:ad:50:bf:54:67:22:35:d4:35:86:f6: cc:dc:02:e9:ef:8c:5b:b6:a9:70:f6:b1:a6:65:ad: 21:96:5e:92:3f:12:d8:a9:18:ca:63:a9:30:d0:0c: 04:d2:fa:03:48:26:c0:22:7f:6d:f4:27:4b:87:c1: 12:f3:68:10:9b:c3:17:be:69:03:0d:30:af:c9:e1: ec:15:5c:eb:46:2f:65:7f:70:81:7c:78:d5:71:89: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AB:D1:69:D2:5E:C2:02:82:A3:8B:AE:29:66:8C:02:D5:4F:74:66 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.187.0/24 194.93.50.0/24 Signature Algorithm: sha256WithRSAEncryption 73:53:18:18:f8:b3:c8:26:a8:5e:a4:50:65:98:7c:13:c4:30: a5:fb:9c:3a:a7:03:02:c8:68:a0:29:9e:2b:51:a0:dd:f6:05: 9b:64:8f:0c:c1:4d:4c:e6:94:a3:a2:36:c2:55:67:ff:cf:dd: 53:f7:30:b6:a0:bf:eb:e7:13:8b:0c:27:35:8b:22:02:e3:30: 28:a3:a2:bb:d2:40:9e:e2:f9:73:44:74:b4:e6:4e:5b:8b:f3: 56:46:c1:52:7c:3e:f9:7e:2b:5d:c2:b2:81:ca:7c:94:f1:52: b1:7f:09:f4:77:60:cb:8b:9c:49:6c:5b:26:c7:31:ee:eb:f1: da:ed:62:29:0d:a3:0f:69:f0:c9:d8:47:5b:27:6d:20:95:6f: b3:02:ea:d9:f6:be:57:7c:cf:50:23:25:5f:ab:e1:3b:cb:1e: c3:ae:c6:04:45:b3:3b:67:f4:e4:44:e2:1d:c9:2d:61:20:70: 82:fd:8b:fb:63:5e:d1:bf:f4:6b:90:52:94:76:7b:85:84:d4: d0:dd:3f:b9:17:99:76:d6:7b:7e:a2:1a:c9:f1:be:7f:27:f0: c6:b5:54:aa:f3:41:8d:ec:72:18:92:97:21:a6:5a:5e:95:ec: 9e:7a:1e:37:93:70:0f:67:7a:f0:5d:67:c7:7c:80:ec:1a:22: 1c:65:94:12 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWKxvmMmY9DV3S3O8ljQ3co+mYzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMDcwNDA2MzVaFw0yNjEyMDYwNDExMzVaMDMxMTAvBgNV BAMTKDM2QUJEMTY5RDI1RUMyMDI4MkEzOEJBRTI5NjY4QzAyRDU0Rjc0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrb45wkrhjd2/bsWqCTqvQafA cksa5fjTdq9Ey6ViJdx8F+XlQD2sIkzZx4nxbxyQvYBgfYpuLpHDxrt/jvzyq3TJ jjbfAKHXttyfKvNpY6aHpaXpop0b/l7AN2ecj8jZHnZiO0jquRQUAalLXsQsAuKM Mhrjpp5XuSuT4Ui9jp6UUXsQKOaG2qgkTFs2WvCVvAo1LQXOJYE0U9l+Q7XxM0ll qaT2w26tUL9UZyI11DWG9szcAunvjFu2qXD2saZlrSGWXpI/EtipGMpjqTDQDATS +gNIJsAif230J0uHwRLzaBCbwxe+aQMNMK/J4ewVXOtGL2V/cIF8eNVxiXppAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUNqvRadJewgKCo4uuKWaMAtVPdGYwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADBILsD BADCXTIwDQYJKoZIhvcNAQELBQADggEBAHNTGBj4s8gmqF6kUGWYfBPEMKX7nDqn AwLIaKApnitRoN32BZtkjwzBTUzmlKOiNsJVZ//P3VP3MLagv+vnE4sMJzWLIgLj MCijorvSQJ7i+XNEdLTmTluL81ZGwVJ8Pvl+K13CsoHKfJTxUrF/CfR3YMuLnEls WybHMe7r8drtYikNow9p8MnYR1snbSCVb7MC6tn2vld8z1AjJV+r4TvLHsOuxgRF sztn9ORE4h3JLWEgcIL9i/tjXtG/9GuQUpR2e4WE1NDdP7kXmXbWe36iGsnxvn8n 8Ma1VKrzQY3schiSlyGmWl6V7J56HjeTcA9nevBdZ8d8gOwaIhxllBI= -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:25 2025 by rpki-client