This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: bkzAhVDIZUNw6hhplNXCvFQltpz6oE23Rwa27f6ldPk= Subject key identifier: A8:6A:16:92:86:61:75:49:2E:BF:14:64:C9:62:3A:52:18:36:91:B4 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 2AE778C3698D4840C270765EB559F3D37700B866 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS63199.roa Signing time: Wed 21 Jan 2026 07:29:38 +0000 ROA not before: Wed 21 Jan 2026 07:24:38 +0000 ROA not after: Wed 20 Jan 2027 07:29:38 +0000 asID: 63199 IP address blocks: 212.60.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e7:78:c3:69:8d:48:40:c2:70:76:5e:b5:59:f3:d3:77:00:b8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 21 07:24:38 2026 GMT Not After : Jan 20 07:29:38 2027 GMT Subject: CN=A86A1692866175492EBF1464C9623A52183691B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:82:b3:57:dd:58:21:ea:b4:b2:c2:47:21: d1:7e:ad:5c:ce:8c:d0:3c:0e:f0:e4:78:be:27:d2: 78:b7:3f:af:09:77:08:e8:52:d4:52:04:c9:e8:ea: 50:0d:c7:75:f1:67:0b:f4:54:6b:47:3f:0e:d6:92: b5:e7:1c:9c:aa:ae:2f:c5:f1:46:44:26:1e:f4:7c: ec:06:74:99:2d:e8:ef:2f:42:4b:96:10:90:f4:bc: 31:ab:cc:36:51:86:cb:5b:83:c2:f7:ae:eb:67:ee: 0d:5c:45:e1:2b:a5:56:df:f1:88:d5:ec:78:82:41: e7:da:06:6f:46:4d:fa:fd:e8:0e:8b:6c:72:2f:3b: c3:66:df:6c:d9:0d:93:de:2d:5d:5c:c3:25:7a:18: 46:c2:3e:48:1d:45:d8:9d:69:00:fb:66:19:ad:83: 6e:a1:0e:29:a7:55:71:c0:2f:4e:e1:4c:0c:1f:f1: a5:53:1c:60:2d:b1:20:77:82:15:02:22:b1:fb:15: 54:ab:bb:23:7d:f6:af:d4:35:30:d2:89:92:91:55: 1b:85:2e:98:e2:89:77:7c:4f:34:15:01:57:1b:0f: a0:0c:96:2a:54:bd:49:f7:28:6f:3c:8f:c8:fd:ba: 3a:af:c4:07:2a:1f:a4:be:39:a2:40:31:33:9e:fd: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6A:16:92:86:61:75:49:2E:BF:14:64:C9:62:3A:52:18:36:91:B4 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.60.157.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c2:de:cd:be:23:45:d2:96:d0:5a:1d:7b:88:d6:32:a1:d6: 69:db:f4:1a:5d:44:d7:18:36:3b:eb:16:fe:6a:f9:67:cc:66: 43:fd:b7:ec:8e:8e:66:ba:19:30:f6:86:d4:42:8e:4e:a0:17: 0e:9e:1d:f4:6c:dc:c2:9c:e8:99:69:13:86:27:ca:0c:bc:2a: cb:fd:a7:e1:00:d9:34:67:a5:fe:29:be:9a:83:b3:a9:7a:e2: 58:5b:16:87:3a:14:75:b6:3c:a9:f9:83:13:1f:ec:cb:f6:eb: 81:be:bb:bb:d4:18:35:16:ee:06:b9:9e:a0:db:96:1d:b5:91: 05:94:3a:0a:86:86:d4:89:60:9d:dc:fc:f6:1b:1a:37:f4:f2: cf:64:ec:ac:77:14:f4:25:1e:08:82:ea:c4:3b:4e:da:27:0a: 09:23:cd:b0:15:9c:43:06:ef:cd:3b:6d:2b:b7:d9:d8:4f:14: 1f:ef:a9:35:6f:de:37:56:9c:3a:e1:a1:97:fc:63:09:41:d3: 60:7c:84:4a:e8:39:25:da:da:2c:e1:3a:2a:d1:15:d0:73:13: 87:12:0b:dd:cc:4b:b3:5e:9c:4f:a5:03:17:90:16:eb:a8:50: 57:80:4d:f8:ab:fd:d9:83:a5:9b:79:7e:92:ef:19:00:5e:e4: da:f0:f2:09 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUKud4w2mNSEDCcHZetVnz03cAuGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMjEwNzI0MzhaFw0yNzAxMjAwNzI5MzhaMDMxMTAvBgNV BAMTKEE4NkExNjkyODY2MTc1NDkyRUJGMTQ2NEM5NjIzQTUyMTgzNjkxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZYKzV91YIeq0ssJHIdF+rVzO jNA8DvDkeL4n0ni3P68JdwjoUtRSBMno6lANx3XxZwv0VGtHPw7WkrXnHJyqri/F 8UZEJh70fOwGdJkt6O8vQkuWEJD0vDGrzDZRhstbg8L3rutn7g1cReErpVbf8YjV 7HiCQefaBm9GTfr96A6LbHIvO8Nm32zZDZPeLV1cwyV6GEbCPkgdRdidaQD7Zhmt g26hDimnVXHAL07hTAwf8aVTHGAtsSB3ghUCIrH7FVSruyN99q/UNTDSiZKRVRuF LpjiiXd8TzQVAVcbD6AMlipUvUn3KG88j8j9ujqvxAcqH6S+OaJAMTOe/dtdAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUqGoWkoZhdUkuvxRkyWI6Uhg2kbQwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUPJ0w DQYJKoZIhvcNAQELBQADggEBAH7C3s2+I0XSltBaHXuI1jKh1mnb9BpdRNcYNjvr Fv5q+WfMZkP9t+yOjma6GTD2htRCjk6gFw6eHfRs3MKc6JlpE4Ynygy8Ksv9p+EA 2TRnpf4pvpqDs6l64lhbFoc6FHW2PKn5gxMf7Mv264G+u7vUGDUW7ga5nqDblh21 kQWUOgqGhtSJYJ3c/PYbGjf08s9k7Kx3FPQlHgiC6sQ7TtonCgkjzbAVnEMG7807 bSu32dhPFB/vqTVv3jdWnDrhoZf8YwlB02B8hEroOSXa2izhOirRFdBzE4cSC93M S7NenE+lAxeQFuuoUFeATfir/dmDpZt5fpLvGQBe5Nrw8gk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:37 2026 by rpki-client