This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: /E8DndTHcJ/EHq7YGmWrgfSSqvata9XrFkI3SJHwNYU= Subject key identifier: 1C:09:D8:2A:F9:BC:3A:C1:EC:CC:79:64:B8:FE:B0:49:7A:84:AA:44 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 652FE91C10ECEF0DE4431C5BB0C47C6CEA83230E Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa Signing time: Fri 09 Jan 2026 13:16:39 +0000 ROA not before: Fri 09 Jan 2026 13:11:39 +0000 ROA not after: Fri 08 Jan 2027 13:16:39 +0000 asID: 25198 IP address blocks: 46.203.180.0/24 maxlen: 24 92.112.106.0/24 maxlen: 24 92.113.56.0/24 maxlen: 24 92.113.59.0/24 maxlen: 24 92.113.63.0/24 maxlen: 24 92.113.208.0/24 maxlen: 24 95.135.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2f:e9:1c:10:ec:ef:0d:e4:43:1c:5b:b0:c4:7c:6c:ea:83:23:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 9 13:11:39 2026 GMT Not After : Jan 8 13:16:39 2027 GMT Subject: CN=1C09D82AF9BC3AC1ECCC7964B8FEB0497A84AA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:9e:21:f3:33:d1:d0:1d:fc:9d:af:85:d5: e6:e0:64:e4:14:92:2d:d0:06:63:f9:70:6f:a2:49: e7:8b:06:06:14:0f:1e:0e:4c:cf:0f:55:5c:e8:08: 07:b7:f8:f0:a8:a1:17:fc:d1:22:d4:05:a5:1c:1f: cc:59:23:8a:cd:f3:ac:b9:aa:a9:b8:99:b3:6e:cc: 9a:24:04:37:66:af:b5:9b:d1:e9:fe:b0:58:a3:5a: 24:73:f4:51:2a:dd:b8:c9:f8:44:5e:78:25:93:d9: c5:f5:69:9b:f9:f9:54:1e:84:47:41:32:e7:a9:06: 71:75:17:fc:52:66:d9:e3:32:85:b5:5a:4a:46:69: 1d:71:fd:27:79:83:86:c7:d6:61:7e:45:64:ef:ad: a0:8a:3e:c5:65:94:e9:98:dc:59:21:78:4f:01:6d: 95:b4:0c:43:c4:eb:57:33:90:b3:3e:ff:22:02:f6: a3:c7:1b:2f:70:a4:05:ee:e2:35:21:77:2b:cc:4f: 9a:3d:77:10:6c:8b:5e:37:6a:28:06:75:d4:61:0d: 8e:ba:22:63:a8:a4:60:6d:75:03:5c:fb:f2:f7:1a: 02:df:79:7c:da:e3:3c:e3:00:54:8c:ee:f5:7f:2d: b2:09:e9:05:fc:18:36:a5:f3:18:8a:19:a6:b7:f3: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:D8:2A:F9:BC:3A:C1:EC:CC:79:64:B8:FE:B0:49:7A:84:AA:44 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.180.0/24 92.112.106.0/24 92.113.56.0/24 92.113.59.0/24 92.113.63.0/24 92.113.208.0/24 95.135.164.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:27:f6:b1:80:59:95:77:9f:61:cc:33:ea:dc:86:d3:74:6f: 85:58:a7:0c:72:bb:c0:ff:95:4f:20:5d:ac:e6:43:f6:2b:cc: 39:60:d3:30:93:a4:07:2f:0d:7b:76:a3:1b:e2:3b:06:5b:23: fc:23:6a:be:fb:b8:6a:e9:17:ba:05:15:05:b9:8a:bb:64:a6: ff:1b:0a:16:88:69:f8:9f:88:97:2a:28:c0:25:10:ab:99:8b: 41:e8:b5:1b:ec:23:f0:9e:55:01:85:8e:51:8e:34:b7:cb:c6: d3:95:82:33:de:48:b7:3c:ee:7e:1a:1e:f4:c3:7c:c9:95:a4: 35:b1:fe:6b:5b:47:a8:64:84:cc:46:fd:dc:e6:4e:e0:45:fb: 40:3a:4a:9e:92:bc:9c:0b:3a:00:f8:7b:b4:c2:b4:03:e8:f8: 8a:2f:8e:f1:4c:d7:1c:c4:ab:41:93:a2:3f:f4:b2:78:dd:3f: a7:2b:fb:7c:f9:9d:4d:01:ee:77:94:35:ea:14:6c:f9:b3:7c: 03:de:08:85:eb:19:c8:49:ff:08:1f:56:7e:3f:13:dd:2c:bc: 7b:7e:6b:20:c0:e9:1d:6d:8e:fc:07:4f:ba:8e:1c:5a:a7:e1: 5c:58:b0:df:2d:f9:c2:79:c1:24:d0:f3:58:4d:1e:46:9e:d8: 57:b3:65:7a -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUZS/pHBDs7w3kQxxbsMR8bOqDIw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMDkxMzExMzlaFw0yNzAxMDgxMzE2MzlaMDMxMTAvBgNV BAMTKDFDMDlEODJBRjlCQzNBQzFFQ0NDNzk2NEI4RkVCMDQ5N0E4NEFBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojZ4h8zPR0B38na+F1ebgZOQU ki3QBmP5cG+iSeeLBgYUDx4OTM8PVVzoCAe3+PCooRf80SLUBaUcH8xZI4rN86y5 qqm4mbNuzJokBDdmr7Wb0en+sFijWiRz9FEq3bjJ+EReeCWT2cX1aZv5+VQehEdB MuepBnF1F/xSZtnjMoW1WkpGaR1x/Sd5g4bH1mF+RWTvraCKPsVllOmY3FkheE8B bZW0DEPE61czkLM+/yIC9qPHGy9wpAXu4jUhdyvMT5o9dxBsi143aigGddRhDY66 ImOopGBtdQNc+/L3GgLfeXza4zzjAFSM7vV/LbIJ6QX8GDal8xiKGaa387DpAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUHAnYKvm8OsHszHlkuP6wSXqEqkQwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAAuy7QD BABccGoDBABccTgDBABccTsDBABccT8DBABccdADBABfh6QwDQYJKoZIhvcNAQEL BQADggEBAI8n9rGAWZV3n2HMM+rchtN0b4VYpwxyu8D/lU8gXazmQ/YrzDlg0zCT pAcvDXt2oxviOwZbI/wjar77uGrpF7oFFQW5irtkpv8bChaIafifiJcqKMAlEKuZ i0HotRvsI/CeVQGFjlGONLfLxtOVgjPeSLc87n4aHvTDfMmVpDWx/mtbR6hkhMxG /dzmTuBF+0A6Sp6SvJwLOgD4e7TCtAPo+IovjvFM1xzEq0GToj/0snjdP6cr+3z5 nU0B7neUNeoUbPmzfAPeCIXrGchJ/wgfVn4/E90svHt+ayDA6R1tjvwHT7qOHFqn 4VxYsN8t+cJ5wSTQ81hNHkae2FezZXo= -----END CERTIFICATE-----Generated at Thu Jan 15 23:27:29 2026 by rpki-client