This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa File: AS198651.roa (raw, json) Hash identifier: sdagYoIfBQJ70jrx8cmbOzNLdiCRkPekC00O1o5rPn0= Subject key identifier: 66:2F:0B:65:13:99:F1:38:49:FF:74:9F:CB:21:06:B6:0D:5E:CB:4D Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 13C1C041AAB40B8F169A37F212A416771E5AE197 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 198651 IP address blocks: 185.172.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c1:c0:41:aa:b4:0b:8f:16:9a:37:f2:12:a4:16:77:1e:5a:e1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=662F0B651399F13849FF749FCB2106B60D5ECB4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:a4:0f:60:0c:e8:2a:0b:6a:06:57:64:9c: 2d:6d:37:f0:1f:aa:72:9b:98:eb:cd:92:85:a5:d5: d7:2f:fd:8c:1f:05:2d:5c:5b:02:28:cf:1c:8a:b8: ec:2a:1d:1e:68:3d:77:32:af:f9:7e:4e:70:85:f1: 9c:b4:83:76:6b:68:9a:b8:ea:1e:32:0c:cd:2e:b3: 58:0d:b4:b9:6e:df:21:c0:fc:0e:36:ab:f2:a2:0a: 5d:1c:e7:83:18:38:c9:ef:52:33:03:1e:e2:5d:84: b6:4a:43:f4:69:5e:af:75:b0:62:86:7c:ce:8e:a2: 9f:e7:7a:77:9d:a8:08:eb:05:2b:99:cd:ad:04:26: 6d:f2:76:20:fc:33:52:d2:39:c9:df:a8:b5:97:20: ec:aa:e7:e5:64:97:cf:66:4f:c9:53:54:0a:f4:af: d0:b2:9b:36:47:a5:98:f0:71:82:17:3e:60:7c:c9: fd:69:18:3d:09:74:a1:a2:06:dd:7a:d8:12:99:df: 16:0a:d3:0c:61:60:40:c6:d3:4d:2d:c8:2d:a7:a0: 19:ef:3c:7b:3a:77:d1:56:dc:f0:d5:ff:d9:03:b8: 96:8d:ae:c8:0c:e5:6a:45:1f:d0:b2:78:1b:82:ee: 2e:dc:86:0e:e1:2c:91:69:9c:2f:fd:a6:a7:aa:87: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:0B:65:13:99:F1:38:49:FF:74:9F:CB:21:06:B6:0D:5E:CB:4D X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.65.0/24 Signature Algorithm: sha256WithRSAEncryption ab:6f:14:85:6e:3c:5b:22:73:32:91:89:70:6d:92:df:61:08: 69:91:0f:11:a0:98:41:a8:b7:c9:ff:ea:1d:77:57:a1:6c:83: 17:28:8e:de:76:99:dd:6d:f9:b4:88:ff:b8:f5:86:44:b5:1d: 23:d4:ea:40:30:df:14:0e:af:ba:3f:50:e6:23:92:10:84:74: 5d:2a:2a:35:b4:0c:5a:ce:9f:05:33:fd:12:e2:d6:bf:38:ed: 85:d7:d1:1b:91:a6:84:f0:41:6a:85:7f:61:55:99:a0:b6:c3: 5d:45:06:48:05:90:09:fe:0c:91:60:29:81:81:a8:fc:cf:53: 32:ac:dc:69:9c:a4:dd:04:a0:de:36:46:83:f9:74:64:eb:b2: c1:66:df:45:83:3c:68:b4:34:2a:e5:c4:a9:ef:5a:f8:10:b1: 35:c8:21:4f:7c:2b:3d:0b:cf:ff:57:39:fa:0b:67:87:bb:ca: 28:6f:b1:60:42:51:8b:69:56:07:81:bd:12:55:d8:09:fc:f3: 1e:9a:3a:39:7a:55:d6:7a:3c:30:45:af:72:ed:a9:a3:72:49: 1d:d0:1f:87:a8:10:06:90:c8:06:08:b8:b3:56:5f:65:58:9a: f4:af:2e:40:b6:f7:5a:51:84:96:7e:8f:d5:f8:4c:a5:55:de: 44:9a:6a:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUE8HAQaq0C48WmjfyEqQWdx5a4ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKDY2MkYwQjY1MTM5OUYxMzg0OUZGNzQ5RkNCMjEwNkI2MEQ1RUNCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntKQPYAzoKgtqBldknC1tN/Af qnKbmOvNkoWl1dcv/YwfBS1cWwIozxyKuOwqHR5oPXcyr/l+TnCF8Zy0g3ZraJq4 6h4yDM0us1gNtLlu3yHA/A42q/KiCl0c54MYOMnvUjMDHuJdhLZKQ/RpXq91sGKG fM6Oop/nenedqAjrBSuZza0EJm3ydiD8M1LSOcnfqLWXIOyq5+Vkl89mT8lTVAr0 r9CymzZHpZjwcYIXPmB8yf1pGD0JdKGiBt162BKZ3xYK0wxhYEDG000tyC2noBnv PHs6d9FW3PDV/9kDuJaNrsgM5WpFH9CyeBuC7i7chg7hLJFpnC/9pqeqh8X5AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZi8LZROZ8ThJ/3SfyyEGtg1ey00wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk4NjUxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaxB MA0GCSqGSIb3DQEBCwUAA4IBAQCrbxSFbjxbInMykYlwbZLfYQhpkQ8RoJhBqLfJ /+odd1ehbIMXKI7edpndbfm0iP+49YZEtR0j1OpAMN8UDq+6P1DmI5IQhHRdKio1 tAxazp8FM/0S4ta/OO2F19EbkaaE8EFqhX9hVZmgtsNdRQZIBZAJ/gyRYCmBgaj8 z1MyrNxpnKTdBKDeNkaD+XRk67LBZt9FgzxotDQq5cSp71r4ELE1yCFPfCs9C8// Vzn6C2eHu8oob7FgQlGLaVYHgb0SVdgJ/PMemjo5elXWejwwRa9y7amjckkd0B+H qBAGkMgGCLizVl9lWJr0ry5AtvdaUYSWfo/V+EylVd5Emmru -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:43 2025 by rpki-client