This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: qmVKXUsD1cAzqIVL94QTO5PO6Zw1Y78hChRgujt8Njo= Subject key identifier: 51:F3:5C:06:2D:80:D6:9E:89:E9:1F:5B:B1:0F:74:C6:48:A7:79:DF Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6425064747A2729E276F74E16CDCC8D09079B3A3 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa Signing time: Fri 12 Dec 2025 09:15:27 +0000 ROA not before: Fri 12 Dec 2025 09:10:27 +0000 ROA not after: Fri 11 Dec 2026 09:15:27 +0000 asID: 197537 IP address blocks: 96.62.0.0/19 maxlen: 24 143.14.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:25:06:47:47:a2:72:9e:27:6f:74:e1:6c:dc:c8:d0:90:79:b3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 12 09:10:27 2025 GMT Not After : Dec 11 09:15:27 2026 GMT Subject: CN=51F35C062D80D69E89E91F5BB10F74C648A779DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:d7:82:38:dd:e2:35:1b:88:ba:db:82:9c: 8e:9e:a8:1c:a7:68:5f:b5:94:93:f4:d8:c6:70:37: 52:09:e2:88:a2:2a:90:ca:08:0c:b5:4a:f9:d5:b0: 7f:61:48:f0:fa:d2:02:d5:0d:7c:12:c7:13:cf:4b: 31:b1:ef:80:5f:50:50:e4:69:8e:08:29:cc:fe:7b: 33:c0:1a:d9:f5:4e:c9:12:ad:84:26:39:8b:09:40: 79:58:dd:79:04:68:07:83:2f:f2:8f:ff:bc:32:48: e3:05:28:79:49:b2:a2:f6:af:e1:e1:92:40:10:8e: 8e:29:13:b2:d8:26:e2:51:a8:df:58:f7:bb:57:72: d0:a6:ee:f5:11:0d:fd:c1:8a:32:7a:ee:02:51:4f: c4:ec:7e:a4:e4:2c:97:40:69:a5:87:f2:cd:56:c6: 71:c0:7e:b1:e8:6a:1d:d7:d6:a9:6b:8f:13:c8:00: 11:56:da:9b:7c:38:50:dd:f2:fe:46:63:34:0f:db: 2e:c4:bd:0c:19:f8:84:5b:68:b9:d1:c1:39:42:c1: 48:63:81:68:f8:7b:6f:48:48:27:94:82:f9:07:04: c9:cf:ce:42:6f:97:c3:80:3a:a1:e6:98:a6:f9:0c: e6:5a:83:bd:68:5e:50:a3:98:d8:d0:4c:bb:0f:4a: c0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:5C:06:2D:80:D6:9E:89:E9:1F:5B:B1:0F:74:C6:48:A7:79:DF X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.0.0/19 143.14.78.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:6e:3c:18:69:28:24:cc:6d:33:fe:91:d0:3d:c5:d8:7e:3f: 41:0f:46:3b:df:df:e7:35:f0:91:85:0f:57:d7:1e:13:58:f4: 6f:ec:3e:f5:18:d3:a0:3a:87:dc:75:81:ee:15:f2:f9:ca:30: a7:25:60:a2:c4:7a:9f:d9:6a:b2:2d:59:06:47:c2:ac:49:c5: cd:86:ce:81:19:f5:3b:cd:6e:05:5f:af:2d:fe:7c:0d:5b:d4: 42:9c:70:32:4d:43:e3:79:25:33:f5:0f:0b:cf:a2:a4:ac:fc: 0e:4b:8b:f0:e4:2e:58:a5:a2:7e:b0:fd:50:ce:74:81:9a:f0: bb:36:3a:65:ea:b1:ed:9a:f9:09:9f:b4:3d:ef:b5:fb:84:4d: a1:ae:51:70:9a:65:4c:f5:64:57:9a:bb:38:c3:42:0c:c4:64: 2a:01:59:01:9b:b6:48:89:f7:88:14:fa:0b:87:97:41:f2:9a: 5a:55:f2:f4:37:f5:41:1e:80:27:26:04:ae:50:00:af:8c:35: 7c:dd:79:e8:57:b7:16:52:0a:43:40:42:ea:0b:10:2f:d0:10: 28:8d:b4:69:fa:3e:b7:79:33:a9:62:ec:16:0b:de:77:1c:9d: 62:7e:b7:96:74:27:f4:b6:ca:58:b3:30:49:12:8c:45:e9:05: 0d:e6:82:17 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUZCUGR0eicp4nb3ThbNzI0JB5s6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTIwOTEwMjdaFw0yNjEyMTEwOTE1MjdaMDMxMTAvBgNV BAMTKDUxRjM1QzA2MkQ4MEQ2OUU4OUU5MUY1QkIxMEY3NEM2NDhBNzc5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiC9eCON3iNRuIutuCnI6eqByn aF+1lJP02MZwN1IJ4oiiKpDKCAy1SvnVsH9hSPD60gLVDXwSxxPPSzGx74BfUFDk aY4IKcz+ezPAGtn1TskSrYQmOYsJQHlY3XkEaAeDL/KP/7wySOMFKHlJsqL2r+Hh kkAQjo4pE7LYJuJRqN9Y97tXctCm7vURDf3BijJ67gJRT8TsfqTkLJdAaaWH8s1W xnHAfrHoah3X1qlrjxPIABFW2pt8OFDd8v5GYzQP2y7EvQwZ+IRbaLnRwTlCwUhj gWj4e29ISCeUgvkHBMnPzkJvl8OAOqHmmKb5DOZag71oXlCjmNjQTLsPSsAbAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUUfNcBi2A1p6J6R9bsQ90xkined8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk3NTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFYD4A AwQAjw5OMA0GCSqGSIb3DQEBCwUAA4IBAQAdbjwYaSgkzG0z/pHQPcXYfj9BD0Y7 39/nNfCRhQ9X1x4TWPRv7D71GNOgOofcdYHuFfL5yjCnJWCixHqf2WqyLVkGR8Ks ScXNhs6BGfU7zW4FX68t/nwNW9RCnHAyTUPjeSUz9Q8Lz6KkrPwOS4vw5C5YpaJ+ sP1QznSBmvC7Njpl6rHtmvkJn7Q977X7hE2hrlFwmmVM9WRXmrs4w0IMxGQqAVkB m7ZIifeIFPoLh5dB8ppaVfL0N/VBHoAnJgSuUACvjDV83XnoV7cWUgpDQELqCxAv 0BAojbRp+j63eTOpYuwWC953HJ1ifreWdCf0tspYszBJEoxF6QUN5oIX -----END CERTIFICATE-----Generated at Sat Dec 20 10:43:19 2025 by rpki-client