This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS63199.roa File: AS63199.roa (raw, json) Hash identifier: NP5oObJXcQb5xmDZ3P6xLgohjMImimpZ34imhqRk1FI= Subject key identifier: 8E:35:42:F4:0E:FD:F8:F1:54:79:57:45:89:4E:47:08:C2:04:EA:C4 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 2761A90DF9BC09B67F3ED910A825D1AAD02263B1 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS63199.roa Signing time: Sun 30 Nov 2025 08:30:24 +0000 ROA not before: Sun 30 Nov 2025 08:25:24 +0000 ROA not after: Sun 29 Nov 2026 08:30:24 +0000 asID: 63199 IP address blocks: 143.20.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:61:a9:0d:f9:bc:09:b6:7f:3e:d9:10:a8:25:d1:aa:d0:22:63:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 30 08:25:24 2025 GMT Not After : Nov 29 08:30:24 2026 GMT Subject: CN=8E3542F40EFDF8F154795745894E4708C204EAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:4b:8f:f6:8f:bf:90:27:1b:33:aa:77:be: 2e:e3:a3:f6:bf:37:ae:30:21:1c:4c:02:1d:f1:50: b5:c8:e7:38:24:06:c1:5f:53:6c:ab:a4:b5:4e:49: e1:0c:ca:5c:02:47:50:a9:0e:cc:9b:49:ea:5b:1d: b5:2b:bb:e9:af:0b:6c:8d:8f:c1:e7:23:e5:1e:b4: b5:8f:6a:1c:f5:9e:c9:0b:e2:fc:59:d7:1b:35:1a: b2:d1:3e:80:e6:8e:ef:31:32:9d:17:f0:53:14:0a: 70:d4:9c:dc:48:46:4c:1d:8f:1b:c2:96:7c:b4:a9: 36:17:a4:b9:77:14:91:f1:ed:66:28:84:f2:84:4e: bf:f7:47:11:9f:b1:dc:83:3f:34:bb:ea:ee:7d:bb: 3d:2d:08:d8:93:ad:e0:df:7d:6e:56:68:25:9e:ed: e6:fd:57:07:86:94:cf:7e:75:18:b0:41:a9:9a:34: 2c:77:fb:4c:18:6e:e3:bc:16:57:40:84:6c:ff:f5: 0e:cb:f6:6b:a3:cf:c6:c1:50:28:84:33:72:d4:9c: 57:cc:32:36:b3:f1:9d:d0:e3:8a:86:e2:b6:9c:0e: ad:ff:7d:5a:4a:f7:a0:e1:d5:97:a7:cb:87:0e:f7: 56:d6:24:f1:35:d3:52:d4:0f:cc:d4:57:d2:98:35: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:35:42:F4:0E:FD:F8:F1:54:79:57:45:89:4E:47:08:C2:04:EA:C4 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS63199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.65.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:d6:2c:14:26:e7:0e:89:04:72:6e:d3:e5:aa:9f:60:7e:ba: 24:fc:2f:56:d3:43:52:cc:8c:be:90:1a:6f:19:14:dd:4a:b2: 87:e4:c7:b6:81:c9:64:c7:5d:89:02:31:24:e2:58:02:57:ff: 03:84:a8:6a:56:65:86:18:45:68:88:a9:2d:cf:8f:d8:b7:ae: 5d:fd:e2:69:de:a1:3b:b8:32:2b:9b:7d:a3:21:dd:eb:cb:aa: c0:82:be:a4:06:14:43:35:fa:53:f1:33:9d:db:39:08:b0:d9: 6e:32:59:65:05:b1:17:3b:f6:dc:69:6c:85:1f:91:2a:fb:9b: 82:fe:7f:de:2c:be:08:40:fb:e3:4c:0a:db:d8:35:c3:93:a8: 00:b4:19:b0:f3:33:01:bc:fd:93:c1:eb:d5:4c:22:b8:99:dc: 18:f9:95:15:16:9b:92:0d:50:60:c1:8e:4f:49:8b:a8:81:2a: cc:03:d9:58:60:c6:cd:8f:10:80:f0:e8:0d:e4:c2:ee:ac:ac: 34:bc:20:0b:2c:63:a9:bc:cf:ca:ab:48:44:25:4a:b4:4d:be: 70:78:c0:93:eb:a9:5e:78:04:73:65:db:38:fb:5f:9d:ec:d4: b1:a7:16:06:0f:fc:0d:6c:42:dc:c5:05:8d:97:bc:e6:a7:3e: 00:36:3b:85 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUJ2GpDfm8CbZ/PtkQqCXRqtAiY7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMzAwODI1MjRaFw0yNjExMjkwODMwMjRaMDMxMTAvBgNV BAMTKDhFMzU0MkY0MEVGREY4RjE1NDc5NTc0NTg5NEU0NzA4QzIwNEVBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafkuP9o+/kCcbM6p3vi7jo/a/ N64wIRxMAh3xULXI5zgkBsFfU2yrpLVOSeEMylwCR1CpDsybSepbHbUru+mvC2yN j8HnI+UetLWPahz1nskL4vxZ1xs1GrLRPoDmju8xMp0X8FMUCnDUnNxIRkwdjxvC lny0qTYXpLl3FJHx7WYohPKETr/3RxGfsdyDPzS76u59uz0tCNiTreDffW5WaCWe 7eb9VweGlM9+dRiwQamaNCx3+0wYbuO8FldAhGz/9Q7L9mujz8bBUCiEM3LUnFfM Mjaz8Z3Q44qG4racDq3/fVpK96Dh1Zeny4cO91bWJPE101LUD8zUV9KYNS8/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUjjVC9A79+PFUeVdFiU5HCMIE6sQwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFEEw DQYJKoZIhvcNAQELBQADggEBAF7WLBQm5w6JBHJu0+Wqn2B+uiT8L1bTQ1LMjL6Q Gm8ZFN1Ksofkx7aByWTHXYkCMSTiWAJX/wOEqGpWZYYYRWiIqS3Pj9i3rl394mne oTu4MiubfaMh3evLqsCCvqQGFEM1+lPxM53bOQiw2W4yWWUFsRc79txpbIUfkSr7 m4L+f94svghA++NMCtvYNcOTqAC0GbDzMwG8/ZPB69VMIriZ3Bj5lRUWm5INUGDB jk9Ji6iBKswD2Vhgxs2PEIDw6A3kwu6srDS8IAssY6m8z8qrSEQlSrRNvnB4wJPr qV54BHNl2zj7X53s1LGnFgYP/A1sQtzFBY2XvOanPgA2O4U= -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:54 2025 by rpki-client