This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: m6shvA1gqVIFCnREYjdqyk0oinHl7XvWtaEIArgFBiY= Subject key identifier: 74:A1:E3:08:71:5D:90:DC:6B:AF:E5:81:04:D0:78:AC:43:38:0E:14 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 34A6CA5454049028B2ADA2D8ADFCC45B763F313C Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa Signing time: Sat 29 Nov 2025 06:02:03 +0000 ROA not before: Sat 29 Nov 2025 05:57:03 +0000 ROA not after: Sat 28 Nov 2026 06:02:03 +0000 asID: 25198 IP address blocks: 46.203.72.0/24 maxlen: 24 46.203.180.0/24 maxlen: 24 91.124.237.0/24 maxlen: 24 92.112.106.0/24 maxlen: 24 95.134.7.0/24 maxlen: 24 95.135.25.0/24 maxlen: 24 95.135.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a6:ca:54:54:04:90:28:b2:ad:a2:d8:ad:fc:c4:5b:76:3f:31:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 29 05:57:03 2025 GMT Not After : Nov 28 06:02:03 2026 GMT Subject: CN=74A1E308715D90DC6BAFE58104D078AC43380E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:70:ba:3d:56:46:5f:23:e5:0b:c5:bf:69: 99:15:91:6c:e2:4b:44:5e:f2:6a:27:5f:a9:86:e3: 2b:62:48:93:1e:f7:4f:82:fc:4e:77:bd:f0:bf:a9: 04:56:85:20:85:98:ac:06:b6:83:90:15:70:e1:86: eb:38:42:65:78:00:af:2f:2b:8a:7b:2b:2e:c2:2c: 40:f3:ac:40:16:bc:72:13:42:67:43:ce:df:c1:e7: 23:93:9b:be:57:2d:67:5c:9a:be:df:f9:87:c5:b1: 59:53:bf:5c:cb:15:72:30:41:00:4c:26:22:a2:39: 2e:39:24:5b:fb:d2:18:f0:ce:1c:80:00:79:f2:0e: 0f:0c:06:04:71:e8:c3:f6:52:1a:d4:c4:9d:df:af: 74:98:ba:12:41:dc:cd:56:55:77:c7:fb:92:21:2a: b3:32:ae:80:af:79:f9:47:c9:b4:ad:d6:3c:a9:1e: fb:f3:cc:a4:fd:1b:b2:df:6d:3c:21:bc:a3:fd:94: 35:c7:28:bb:b6:8e:e1:37:43:1d:f5:b2:e3:2e:53: 01:4c:15:5a:5e:8f:93:a5:2e:09:78:55:88:5b:86: 06:95:81:31:1b:94:e1:97:7a:d5:ad:f0:f6:71:10: 82:11:2c:b5:a9:73:5e:c5:51:9e:3f:d9:0f:0f:64: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:E3:08:71:5D:90:DC:6B:AF:E5:81:04:D0:78:AC:43:38:0E:14 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.72.0/24 46.203.180.0/24 91.124.237.0/24 92.112.106.0/24 95.134.7.0/24 95.135.25.0/24 95.135.58.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:96:15:da:10:db:10:c6:6f:99:90:85:29:63:a4:51:be:6a: 0b:d4:7d:43:fe:21:79:44:4e:54:d0:9b:ee:7e:27:29:44:dd: 34:08:33:c2:36:ea:f9:76:33:a9:aa:eb:02:71:5f:08:53:f5: e7:57:3a:99:18:ff:14:28:5b:03:95:25:52:ce:33:6a:79:7b: 65:78:df:00:1c:1c:4f:94:dd:9f:92:3f:50:79:bb:94:c5:43: ad:e6:e6:bd:21:67:98:cc:1d:be:3d:56:a5:15:ba:00:8c:98: ee:2d:62:95:76:8a:c7:5e:37:22:93:63:bc:18:b3:bc:cb:18: 45:3c:5b:13:ce:0a:ba:4d:2d:8a:9f:33:a8:f9:66:df:18:16: d8:42:b7:d5:a0:bf:0e:88:26:66:7a:35:30:4a:3e:04:e5:68: 1f:30:66:1a:fd:67:9f:cd:73:fb:be:d4:1c:04:57:42:af:dd: 54:c2:c2:96:ed:75:65:bc:ab:47:47:5f:a7:ab:b8:b9:36:f8: e5:0e:f6:62:62:00:ce:a8:fe:6e:d8:5c:31:5b:27:30:36:14: c9:84:2c:e4:66:65:9f:ab:5a:e4:4e:cb:18:fa:38:4f:81:b9: 8f:e8:69:7f:a4:d7:f0:1b:32:ae:ab:46:c4:67:7c:45:5b:31: 56:7e:0c:8c -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUNKbKVFQEkCiyraLYrfzEW3Y/MTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjkwNTU3MDNaFw0yNjExMjgwNjAyMDNaMDMxMTAvBgNV BAMTKDc0QTFFMzA4NzE1RDkwREM2QkFGRTU4MTA0RDA3OEFDNDMzODBFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqHC6PVZGXyPlC8W/aZkVkWzi S0Re8monX6mG4ytiSJMe90+C/E53vfC/qQRWhSCFmKwGtoOQFXDhhus4QmV4AK8v K4p7Ky7CLEDzrEAWvHITQmdDzt/B5yOTm75XLWdcmr7f+YfFsVlTv1zLFXIwQQBM JiKiOS45JFv70hjwzhyAAHnyDg8MBgRx6MP2UhrUxJ3fr3SYuhJB3M1WVXfH+5Ih KrMyroCveflHybSt1jypHvvzzKT9G7LfbTwhvKP9lDXHKLu2juE3Qx31suMuUwFM FVpej5OlLgl4VYhbhgaVgTEblOGXetWt8PZxEIIRLLWpc17FUZ4/2Q8PZF2nAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUdKHjCHFdkNxrr+WBBNB4rEM4DhQwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAAuy0gD BAAuy7QDBABbfO0DBABccGoDBABfhgcDBABfhxkDBABfhzowDQYJKoZIhvcNAQEL BQADggEBAB+WFdoQ2xDGb5mQhSljpFG+agvUfUP+IXlETlTQm+5+JylE3TQIM8I2 6vl2M6mq6wJxXwhT9edXOpkY/xQoWwOVJVLOM2p5e2V43wAcHE+U3Z+SP1B5u5TF Q63m5r0hZ5jMHb49VqUVugCMmO4tYpV2isdeNyKTY7wYs7zLGEU8WxPOCrpNLYqf M6j5Zt8YFthCt9Wgvw6IJmZ6NTBKPgTlaB8wZhr9Z5/Nc/u+1BwEV0Kv3VTCwpbt dWW8q0dHX6eruLk2+OUO9mJiAM6o/m7YXDFbJzA2FMmELORmZZ+rWuROyxj6OE+B uY/oaX+k1/AbMq6rRsRnfEVbMVZ+DIw= -----END CERTIFICATE-----Generated at Mon Dec 1 07:52:18 2025 by rpki-client