This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: noDltKRU4SocINK7fVY10fipNyyMn6FYL4CSXfPqLOw= Subject key identifier: 9C:93:D4:B5:67:A2:15:8A:C9:65:DD:2E:AE:39:E8:F8:93:A1:2B:4F Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 0FDBA95932D88F3E9850899EABB89B25E16B9A58 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63199.roa Signing time: Fri 21 Nov 2025 05:54:19 +0000 ROA not before: Fri 21 Nov 2025 05:49:19 +0000 ROA not after: Fri 20 Nov 2026 05:54:19 +0000 asID: 63199 IP address blocks: 141.11.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 20:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:db:a9:59:32:d8:8f:3e:98:50:89:9e:ab:b8:9b:25:e1:6b:9a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Nov 21 05:49:19 2025 GMT Not After : Nov 20 05:54:19 2026 GMT Subject: CN=9C93D4B567A2158AC965DD2EAE39E8F893A12B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:58:63:0c:e1:05:90:ef:7d:f7:3d:a7:06: 62:d6:f0:55:11:e0:33:f7:70:00:b6:50:bd:4a:0b: e9:c4:0e:f6:d4:1c:53:2a:12:15:d7:cf:98:d0:32: ac:c8:85:c9:96:b7:41:26:52:dd:82:43:da:be:89: 85:75:9b:27:92:d2:84:a3:64:d0:76:00:36:d0:00: af:41:64:94:a3:c3:b4:b6:2c:c9:69:07:d4:30:7f: 58:ef:a4:b5:cd:f8:ca:66:98:a3:53:30:51:f1:c0: 24:ba:9b:b2:94:66:24:e6:60:83:ec:0c:aa:37:03: e5:4b:66:ad:80:c8:b2:31:ce:e0:f8:95:d2:50:36: 68:e5:f0:ea:7c:ae:92:1b:6f:61:5f:b8:69:52:63: 31:2e:88:5a:b1:7f:61:d7:f7:98:92:67:a1:4a:95: e3:cd:4c:d5:74:f1:a4:9e:ad:5b:66:7f:71:d4:7c: f0:c5:f6:73:d6:90:a3:75:96:c7:eb:a1:e5:67:0a: 1f:63:63:13:8b:cd:7f:4a:0c:04:8e:7a:16:62:28: 69:d4:83:dd:50:1f:bf:d3:1f:4d:2a:bd:d1:6a:97: 91:9c:bc:b0:39:88:13:93:81:9c:74:e7:72:62:9a: 71:2e:a7:20:28:98:6d:ab:29:32:ec:bf:85:9c:3b: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:D4:B5:67:A2:15:8A:C9:65:DD:2E:AE:39:E8:F8:93:A1:2B:4F X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.57.0/24 Signature Algorithm: sha256WithRSAEncryption c7:9d:bd:75:99:9d:41:b5:3a:9d:a1:48:39:46:3d:77:fe:4e: 22:58:b3:c4:8b:95:4e:09:ac:34:32:21:55:d1:f4:7e:e8:24: 1c:f5:c5:85:7a:cf:fb:14:69:c6:3c:6e:ae:98:19:1c:02:90: 4d:a6:9e:b3:e6:f0:26:2e:79:78:28:05:c2:4f:a3:23:bb:5b: 96:7b:9f:e2:6c:bd:40:13:29:af:7c:79:2c:d5:e5:d1:ae:13: 02:ae:97:e8:05:6c:28:51:f1:84:02:cc:d6:d6:cc:63:df:65: 74:08:f1:4b:ee:14:e1:cb:81:53:05:c2:85:e8:66:49:fe:7a: 30:06:c1:dc:36:23:0e:35:d4:77:aa:f2:ad:68:62:29:9c:7a: 03:51:f3:f1:1e:4b:b4:53:d4:62:ca:de:3c:9a:94:53:aa:8e: 85:ff:51:78:e5:6e:73:40:06:9e:fb:22:6a:2a:d4:d7:9c:cb: 02:4f:4d:af:88:fa:f0:c0:64:7e:5a:f5:9c:be:ae:8e:a5:f5: a4:76:a8:ef:34:28:5b:a3:3b:68:80:76:a4:01:6e:81:31:72: 6e:e0:fe:88:6b:7a:57:2a:10:62:99:22:ae:32:e8:9e:da:3c: a6:c1:c2:c8:01:4b:c0:19:fe:e8:7d:58:be:43:3f:f9:8b:35: 19:37:df:3a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUD9upWTLYjz6YUImeq7ibJeFrmlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTExMjEwNTQ5MTlaFw0yNjExMjAwNTU0MTlaMDMxMTAvBgNV BAMTKDlDOTNENEI1NjdBMjE1OEFDOTY1REQyRUFFMzlFOEY4OTNBMTJCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEFhjDOEFkO999z2nBmLW8FUR 4DP3cAC2UL1KC+nEDvbUHFMqEhXXz5jQMqzIhcmWt0EmUt2CQ9q+iYV1myeS0oSj ZNB2ADbQAK9BZJSjw7S2LMlpB9Qwf1jvpLXN+MpmmKNTMFHxwCS6m7KUZiTmYIPs DKo3A+VLZq2AyLIxzuD4ldJQNmjl8Op8rpIbb2FfuGlSYzEuiFqxf2HX95iSZ6FK lePNTNV08aSerVtmf3HUfPDF9nPWkKN1lsfroeVnCh9jYxOLzX9KDASOehZiKGnU g91QH7/TH00qvdFql5GcvLA5iBOTgZx053JimnEupyAomG2rKTLsv4WcO7upAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUnJPUtWeiFYrJZd0urjno+JOhK08wHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCzkw DQYJKoZIhvcNAQELBQADggEBAMedvXWZnUG1Op2hSDlGPXf+TiJYs8SLlU4JrDQy IVXR9H7oJBz1xYV6z/sUacY8bq6YGRwCkE2mnrPm8CYueXgoBcJPoyO7W5Z7n+Js vUATKa98eSzV5dGuEwKul+gFbChR8YQCzNbWzGPfZXQI8UvuFOHLgVMFwoXoZkn+ ejAGwdw2Iw411Heq8q1oYimcegNR8/EeS7RT1GLK3jyalFOqjoX/UXjlbnNABp77 Imoq1NecywJPTa+I+vDAZH5a9Zy+ro6l9aR2qO80KFujO2iAdqQBboExcm7g/ohr elcqEGKZIq4y6J7aPKbBwsgBS8AZ/uh9WL5DP/mLNRk33zo= -----END CERTIFICATE-----Generated at Fri Dec 5 12:23:27 2025 by rpki-client