This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199524.roa File: AS199524.roa (raw, json) Hash identifier: vHaQfInIi+x8Fj3OhEDP17K5LdhFI6vwVH1pFDsZas0= Subject key identifier: 68:95:3E:7E:2A:E1:5E:7D:95:27:F9:74:EC:34:89:C3:6A:B8:CA:C4 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6C3AF06CAD2D8D5450D66B6CE231236B7777671C Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199524.roa Signing time: Fri 12 Dec 2025 18:29:54 +0000 ROA not before: Fri 12 Dec 2025 18:24:54 +0000 ROA not after: Fri 11 Dec 2026 18:29:54 +0000 asID: 199524 IP address blocks: 92.113.92.0/24 maxlen: 24 95.135.0.0/24 maxlen: 24 95.135.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3a:f0:6c:ad:2d:8d:54:50:d6:6b:6c:e2:31:23:6b:77:77:67:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 12 18:24:54 2025 GMT Not After : Dec 11 18:29:54 2026 GMT Subject: CN=68953E7E2AE15E7D9527F974EC3489C36AB8CAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:4b:93:2f:e3:05:6c:c9:35:7d:82:f7:20: 10:ba:1c:b6:f3:2c:d5:a0:40:4b:5e:00:f1:ce:b9: a3:8e:f4:85:cd:11:1b:a0:7f:a3:b7:c8:6d:7b:d0: 71:e0:87:63:7b:c3:6a:80:fa:01:79:2d:ad:16:e8: 26:fa:e6:ed:68:cf:66:31:03:35:b9:40:85:b3:8d: ee:d6:80:31:50:64:97:b4:9b:8b:1f:5e:38:8f:ca: 43:8d:3e:5a:c9:33:32:32:b6:c3:08:35:32:70:13: 6e:32:b5:31:4a:93:a3:35:11:59:a7:ef:99:58:50: ec:04:67:ed:6c:60:79:de:91:0b:95:ba:83:97:cc: 53:a0:6f:d2:ce:6e:b8:5e:60:09:45:31:c4:ac:31: 5f:3c:13:be:88:7e:a9:4b:36:39:07:f2:a2:cd:ff: c5:ad:82:72:35:de:a8:93:d0:36:d3:70:e4:dc:6d: 49:d3:66:a9:93:41:51:7c:a5:81:d1:36:97:fb:fd: b7:9c:07:8d:d5:91:52:5f:0e:2f:9c:b0:94:d2:e3: de:99:da:2c:69:bf:5e:d9:df:e6:e0:c7:cd:fd:80: 25:77:63:37:6d:ce:0a:f4:a7:8a:42:57:4d:3a:c9: 3e:d4:2a:b0:a7:13:9c:d8:6c:cb:27:de:51:82:c5: 96:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:3E:7E:2A:E1:5E:7D:95:27:F9:74:EC:34:89:C3:6A:B8:CA:C4 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.113.92.0/24 95.135.0.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:dd:8c:d6:d5:5c:d6:90:3e:6f:9b:5b:de:60:ed:2e:47:38: ac:2c:3a:16:6e:05:f6:c6:b2:27:b4:5a:27:fd:7f:05:2f:f2: 35:1a:48:f4:92:91:8e:de:a3:ba:04:c7:82:f6:74:de:8a:6a: ee:c2:03:ba:14:12:de:e2:0b:e1:de:4e:a2:ae:d1:35:69:40: ba:13:3d:45:79:c5:88:4b:ae:a9:82:0d:e6:ff:0c:f3:f7:44: 03:7b:72:c6:5f:c6:2e:97:5c:54:39:7a:a3:99:4e:3f:12:e8: ad:ed:6f:1f:95:dc:f5:03:87:ca:6c:35:14:c3:6d:1d:a6:12: b7:82:98:37:b3:15:ca:c2:5f:96:a1:9b:d7:52:68:41:a0:99: a8:88:68:ae:7d:05:0f:c8:79:70:93:da:65:80:a5:52:68:80: 76:07:44:9e:db:64:61:f8:f3:ac:08:65:1d:dd:b4:ca:20:45: 21:2b:a9:7d:6f:c6:50:8f:6e:cb:85:bf:01:a7:b3:0e:71:1e: 78:5d:40:d0:49:db:39:36:c0:14:2b:9a:ca:4e:3d:96:5e:f9: 74:83:1a:55:e1:d3:87:13:01:c3:80:c3:bb:9a:89:6e:f8:81: 6e:5b:66:50:b7:62:8e:39:13:aa:fd:72:4d:f0:34:58:71:e6: 78:76:0c:1d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUbDrwbK0tjVRQ1mts4jEja3d3ZxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTIxODI0NTRaFw0yNjEyMTExODI5NTRaMDMxMTAvBgNV BAMTKDY4OTUzRTdFMkFFMTVFN0Q5NTI3Rjk3NEVDMzQ4OUMzNkFCOENBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7kuTL+MFbMk1fYL3IBC6HLbz LNWgQEteAPHOuaOO9IXNERugf6O3yG170HHgh2N7w2qA+gF5La0W6Cb65u1oz2Yx AzW5QIWzje7WgDFQZJe0m4sfXjiPykONPlrJMzIytsMINTJwE24ytTFKk6M1EVmn 75lYUOwEZ+1sYHnekQuVuoOXzFOgb9LObrheYAlFMcSsMV88E76IfqlLNjkH8qLN /8WtgnI13qiT0DbTcOTcbUnTZqmTQVF8pYHRNpf7/becB43VkVJfDi+csJTS496Z 2ixpv17Z3+bgx839gCV3Yzdtzgr0p4pCV006yT7UKrCnE5zYbMsn3lGCxZadAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUaJU+firhXn2VJ/l07DSJw2q4ysQwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk5NTI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXHFc AwQBX4cAMA0GCSqGSIb3DQEBCwUAA4IBAQCO3YzW1VzWkD5vm1veYO0uRzisLDoW bgX2xrIntFon/X8FL/I1Gkj0kpGO3qO6BMeC9nTeimruwgO6FBLe4gvh3k6irtE1 aUC6Ez1FecWIS66pgg3m/wzz90QDe3LGX8Yul1xUOXqjmU4/Euit7W8fldz1A4fK bDUUw20dphK3gpg3sxXKwl+WoZvXUmhBoJmoiGiufQUPyHlwk9plgKVSaIB2B0Se 22Rh+POsCGUd3bTKIEUhK6l9b8ZQj27Lhb8Bp7MOcR54XUDQSds5NsAUK5rKTj2W Xvl0gxpV4dOHEwHDgMO7molu+IFuW2ZQt2KOOROq/XJN8DRYceZ4dgwd -----END CERTIFICATE-----Generated at Fri Dec 19 14:23:07 2025 by rpki-client