This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: YpNWbnpzr70Q3clxDOAiPeykY8tioM2CVcDWJvBZAv8=
Subject key identifier: 11:9E:20:CE:C7:F3:22:F0:2B:34:E1:C2:78:A4:D2:E6:85:C9:4C:1F
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 0C5C2527FEE8FB688BE6FAAB446D6B1167B83ACA
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
Signing time: Mon 17 Nov 2025 09:49:07 +0000
ROA not before: Mon 17 Nov 2025 09:44:07 +0000
ROA not after: Mon 16 Nov 2026 09:49:07 +0000
asID: 63199
IP address blocks: 188.119.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5c:25:27:fe:e8:fb:68:8b:e6:fa:ab:44:6d:6b:11:67:b8:3a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Nov 17 09:44:07 2025 GMT
Not After : Nov 16 09:49:07 2026 GMT
Subject: CN=119E20CEC7F322F02B34E1C278A4D2E685C94C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:a4:8a:1c:fb:65:2d:9b:b9:42:d9:0b:52:
d9:03:a7:ed:53:ca:e5:17:78:b7:95:50:14:7f:4e:
3d:75:b2:83:b3:ec:22:2d:ce:87:46:45:24:b8:9d:
3a:ef:5c:11:c6:10:13:45:3b:e8:c9:70:3a:2f:6e:
1a:1e:3f:6c:6f:a3:78:ce:59:af:0c:29:43:a7:8d:
72:71:be:0b:1a:0f:48:ff:ce:43:a0:63:cb:7e:f2:
a5:6c:91:c5:56:2e:d3:ad:d6:bb:04:4d:06:e4:70:
ef:b0:3c:1a:ab:1e:1c:c4:b6:88:ec:3e:66:7e:33:
47:f7:99:d1:13:da:e6:94:68:42:0c:1a:56:cd:33:
d4:26:85:e2:9c:3d:a3:78:7e:7c:ab:04:51:d5:7e:
d3:9c:37:89:8e:ff:ef:f7:ee:44:db:1a:f3:e6:fa:
5e:24:e9:d5:0f:c8:6d:ba:f6:93:fa:b9:71:b1:9d:
d8:c9:9f:3e:09:39:b7:d4:c3:41:8c:ae:73:e8:0c:
19:04:38:f6:eb:8c:26:1b:48:b3:e0:7b:4e:37:36:
15:bd:8e:af:72:72:ee:a6:b1:5c:bd:14:99:9d:4f:
77:ce:a2:d7:50:10:1c:74:3f:2d:b2:95:5b:1a:2a:
1e:45:18:9f:96:a9:c7:9f:5a:31:66:c4:8c:bc:4f:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:20:CE:C7:F3:22:F0:2B:34:E1:C2:78:A4:D2:E6:85:C9:4C:1F
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.69.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c8:83:57:f3:c3:5d:fa:a5:f3:d6:d1:31:cc:54:73:48:84:
1c:ab:d9:3b:7c:e2:87:5a:f7:0d:49:d3:83:b0:03:8e:e7:3e:
1e:11:ca:be:62:b3:50:28:c4:83:df:40:1f:e5:71:f5:5b:44:
0d:7d:ed:43:36:97:08:5f:c4:40:39:1c:b8:ae:52:90:78:3f:
fa:da:36:2e:3d:84:62:53:41:12:86:ed:8e:2d:33:35:99:dd:
97:bc:3b:50:65:83:08:2a:1f:1a:b8:11:77:c7:ef:2a:46:9c:
45:fb:78:4f:69:82:e6:fc:f3:2b:d6:36:3b:1b:c9:80:06:93:
64:26:e7:eb:3f:e0:6d:b0:9b:0b:32:0e:5c:60:e2:e0:5c:2c:
ed:42:5e:ee:e1:91:e6:ea:ef:c0:0c:cf:2f:4c:ed:09:63:95:
50:fc:13:ba:48:f1:de:93:a9:22:09:42:9b:b1:fa:11:35:c6:
e5:0f:e7:aa:e7:8e:d9:31:95:1c:6f:27:2b:5e:95:87:ba:f8:
02:65:e5:e1:57:cd:2e:f6:02:a0:d6:5c:57:4b:a6:59:86:2e:
da:79:4c:de:4f:52:4f:b2:2e:05:1b:64:a2:c3:b6:91:8f:58:
3e:65:a1:20:85:92:f8:6c:2e:05:74:54:be:03:85:3b:f5:08:
59:67:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 10:44:47 2025 by rpki-client