This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS198016.roa File: AS198016.roa (raw, json) Hash identifier: TduWyA8RWFzcsEjZcQOiVL5d9KRao1qacRs3zHwO22E= Subject key identifier: 0A:0D:C2:20:0A:10:BE:73:87:43:50:D6:69:22:D8:05:3C:B6:FE:1E Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 7E57EFC685A51A28A302FAE038DA2D663F4143D2 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS198016.roa Signing time: Wed 17 Dec 2025 03:08:13 +0000 ROA not before: Wed 17 Dec 2025 03:03:13 +0000 ROA not after: Wed 16 Dec 2026 03:08:13 +0000 asID: 198016 IP address blocks: 2a0f:85c1:b47::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:57:ef:c6:85:a5:1a:28:a3:02:fa:e0:38:da:2d:66:3f:41:43:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:13 2025 GMT Not After : Dec 16 03:08:13 2026 GMT Subject: CN=0A0DC2200A10BE73874350D66922D8053CB6FE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:9e:80:65:cc:7b:4c:76:5c:a3:17:28:20: d8:c2:f1:90:c5:4e:85:97:3f:eb:59:47:a5:e3:85: ec:d4:10:cd:64:a0:14:d8:0c:fd:04:c2:8a:57:b1: bc:3a:f8:4d:6f:58:94:62:b3:ca:f3:6c:79:b0:2d: 5b:a9:0a:d3:d0:1e:77:25:fe:4d:5b:81:cd:c1:11: 27:cb:e4:96:d0:02:68:e4:68:2c:63:42:e5:d5:19: 0b:d7:4a:63:89:18:47:17:8d:a8:76:96:19:27:90: 8a:54:05:7f:c7:c3:3b:90:2b:c2:04:f2:f1:6d:e1: 2d:7e:99:72:c2:b5:02:1f:85:01:06:76:a7:79:17: b3:64:7e:46:31:c3:b3:2b:06:71:05:41:cf:f8:d4: c0:73:91:1b:dc:94:a2:ec:9a:eb:2b:a6:03:c8:5f: c7:a3:6a:09:78:15:df:f1:92:49:46:5c:29:c0:15: ca:f1:8d:b0:1a:c1:5c:42:5a:ca:b9:7c:79:2a:c1: 68:4a:7f:65:0a:50:49:71:47:ec:0a:6f:ab:43:cd: 47:98:1c:90:4f:da:70:f3:4a:97:95:d0:87:fa:83: ae:0c:ee:91:76:8e:58:c9:84:d8:96:f3:6e:38:db: 3e:6a:af:d2:5f:5f:af:0e:b8:38:b8:dd:7a:46:38: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:C2:20:0A:10:BE:73:87:43:50:D6:69:22:D8:05:3C:B6:FE:1E X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS198016.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b47::/48 Signature Algorithm: sha256WithRSAEncryption 62:a5:44:fd:ac:4a:ff:9f:57:07:a9:0b:0d:98:fe:ec:d0:f6: 1d:0f:f1:b6:84:a7:a2:9d:8f:f7:0e:17:29:69:54:28:28:e3: 7d:c5:2c:ea:e9:8b:61:db:50:ae:b4:ad:a8:b9:e3:8e:88:3e: 37:a7:e8:c5:a0:2f:4f:b0:6f:5f:42:54:b9:df:67:82:5c:67: e6:1e:65:54:2e:c5:a1:93:3c:21:e9:82:fa:ea:b2:5e:14:99: 72:25:99:85:cb:63:48:ef:a2:d5:19:54:37:a0:b4:c4:69:45: 9d:9e:fc:e2:ea:54:14:04:43:ee:82:39:9f:1b:ef:3c:6f:90: 4b:8c:f8:b5:81:de:01:1e:59:7c:c3:80:6a:75:09:fd:df:57: f6:3f:d7:e5:98:52:bf:c4:77:14:44:45:6b:9a:8e:1f:89:f4: 5f:74:52:40:b3:77:64:4f:d6:a1:df:c2:23:a9:c5:0e:33:55: b2:6a:a7:4f:da:d1:0e:a7:fb:9f:c2:38:73:78:3f:84:d1:aa: 76:5f:77:23:e8:29:6b:2a:ec:b5:ff:56:3a:e7:dc:9a:0f:ab: f5:ff:aa:d7:df:9e:37:c0:88:a7:03:56:16:be:4a:23:56:3f: 11:7b:07:58:12:85:cc:e6:b9:ca:ae:4e:1d:c9:d8:d1:74:ac: d5:2c:e1:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUflfvxoWlGiijAvrgONotZj9BQ9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTNaFw0yNjEyMTYwMzA4MTNaMDMxMTAvBgNV BAMTKDBBMERDMjIwMEExMEJFNzM4NzQzNTBENjY5MjJEODA1M0NCNkZFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnJ6AZcx7THZcoxcoINjC8ZDF ToWXP+tZR6XjhezUEM1koBTYDP0EwopXsbw6+E1vWJRis8rzbHmwLVupCtPQHncl /k1bgc3BESfL5JbQAmjkaCxjQuXVGQvXSmOJGEcXjah2lhknkIpUBX/HwzuQK8IE 8vFt4S1+mXLCtQIfhQEGdqd5F7NkfkYxw7MrBnEFQc/41MBzkRvclKLsmusrpgPI X8ejagl4Fd/xkklGXCnAFcrxjbAawVxCWsq5fHkqwWhKf2UKUElxR+wKb6tDzUeY HJBP2nDzSpeV0If6g64M7pF2jljJhNiW82442z5qr9JfX68OuDi43XpGOHdDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUCg3CIAoQvnOHQ1DWaSLYBTy2/h4wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMTk4MDE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtHMA0GCSqGSIb3DQEBCwUAA4IBAQBipUT9rEr/n1cHqQsNmP7s0PYdD/G2hKei nY/3DhcpaVQoKON9xSzq6Yth21CutK2oueOOiD43p+jFoC9PsG9fQlS532eCXGfm HmVULsWhkzwh6YL66rJeFJlyJZmFy2NI76LVGVQ3oLTEaUWdnvzi6lQUBEPugjmf G+88b5BLjPi1gd4BHll8w4BqdQn931f2P9flmFK/xHcUREVrmo4fifRfdFJAs3dk T9ah38IjqcUOM1WyaqdP2tEOp/ufwjhzeD+E0ap2X3cj6ClrKuy1/1Y659yaD6v1 /6rX3543wIinA1YWvkojVj8RewdYEoXM5rnKrk4dydjRdKzVLOFB -----END CERTIFICATE-----Generated at Sat Dec 20 15:09:09 2025 by rpki-client