This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
File: AS199856.roa (raw, json)
Hash identifier: adxXJnHK9qH9bYeZiRp/r2OhSqCtEi2xcqUoNHSC8zs=
Subject key identifier: 82:F6:A8:22:D9:29:02:13:C8:B4:D6:0E:17:3D:80:C1:97:7A:C3:48
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3BBB589008F01A43BEA5400C4916A978A4B72453
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
Signing time: Fri 05 Dec 2025 13:55:14 +0000
ROA not before: Fri 05 Dec 2025 13:50:14 +0000
ROA not after: Fri 04 Dec 2026 13:55:14 +0000
asID: 199856
IP address blocks: 176.105.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bb:58:90:08:f0:1a:43:be:a5:40:0c:49:16:a9:78:a4:b7:24:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 5 13:50:14 2025 GMT
Not After : Dec 4 13:55:14 2026 GMT
Subject: CN=82F6A822D9290213C8B4D60E173D80C1977AC348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:af:64:46:68:e1:be:ea:26:59:94:7c:76:
73:29:14:25:df:13:08:45:c2:7b:b3:67:27:2e:ad:
e3:1e:d1:77:bf:fd:9f:e7:46:49:8e:2b:04:b1:b0:
db:f6:b2:68:eb:46:24:cd:b4:35:dc:5a:e6:91:35:
77:9a:06:70:81:10:e6:94:f6:82:fa:40:87:8d:e8:
fb:dc:d4:51:73:15:64:35:1d:a7:2a:29:87:2d:31:
0e:fb:df:64:b0:86:26:c9:77:b0:16:7f:62:1c:52:
42:28:a7:4d:4c:af:a7:32:80:cf:44:c8:39:34:71:
55:96:63:0a:4d:9c:4b:ef:bc:0f:e3:af:53:be:f9:
61:3a:81:56:46:5a:3b:a7:a9:16:06:87:de:76:7f:
03:9d:c9:83:07:23:86:45:42:77:41:5f:de:e7:17:
30:e7:b5:b7:0a:58:db:1b:00:95:84:c6:a1:ad:70:
c9:c6:02:a7:14:91:97:7a:a0:1b:aa:7f:0f:30:1f:
b3:8d:eb:a3:7b:58:59:db:b8:fa:c1:30:26:e0:ac:
7c:a2:bc:63:70:b8:e3:52:85:64:26:86:85:fa:fa:
c7:9f:d8:c2:55:8d:8d:05:40:c4:f5:4d:2a:e8:c0:
4c:82:ce:68:95:ff:b1:7b:1a:8d:40:98:6c:7d:25:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:A8:22:D9:29:02:13:C8:B4:D6:0E:17:3D:80:C1:97:7A:C3:48
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8e:c7:9c:f1:f0:37:96:bc:e4:cd:23:28:bb:02:d8:3d:8d:
d5:0e:51:07:d7:e8:c4:9f:90:a0:8a:59:9b:84:db:73:b8:e5:
7d:79:c8:c8:a6:3b:a7:f4:a8:c2:60:7b:bd:8c:80:25:ff:1d:
53:f7:ad:e2:12:ab:3f:01:eb:04:df:6d:ae:ad:11:66:6b:77:
81:6f:86:76:cc:38:44:34:e1:88:e0:39:d6:a9:e7:3b:54:31:
75:3d:1a:ee:b2:17:79:ac:02:c4:10:c3:79:de:62:79:1a:18:
ef:2e:23:08:e1:3f:12:2f:1d:5a:54:a7:c3:14:48:76:75:8d:
b8:db:eb:ac:82:09:67:29:8e:64:61:0e:b9:4d:99:03:0f:1b:
78:e7:b2:b7:f5:d4:1e:f3:4f:4b:cd:b4:d2:e6:d1:04:c2:fd:
a5:a6:0a:3b:fc:08:4b:02:0e:4a:46:20:a1:e3:04:9d:90:b6:
c5:55:48:ce:4c:04:b3:51:fb:30:4f:8e:5a:c2:8f:35:0d:39:
38:85:82:08:05:a1:c8:8b:fc:25:c8:5d:78:95:5e:3e:ce:f1:
e8:8d:82:c9:ec:aa:b2:da:b8:34:17:fe:af:ad:a6:cf:f2:cd:
70:b9:fc:9f:45:2a:63:b9:05:d1:1a:aa:7d:2e:67:30:75:b5:
18:72:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:33:57 2025 by rpki-client