This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: SVButATmjl5WeXOqk/I+va5NH1OI1HjkPB++mMtF5e4= Subject key identifier: C8:37:3D:D0:18:54:42:D7:17:6A:F9:3D:54:68:83:71:F5:10:87:D3 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 747F4C7FAB0AA2A509414404F96DAA238EB24334 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa Signing time: Fri 23 Jan 2026 13:33:50 +0000 ROA not before: Fri 23 Jan 2026 13:28:50 +0000 ROA not after: Fri 22 Jan 2027 13:33:50 +0000 asID: 25198 IP address blocks: 46.203.180.0/24 maxlen: 24 92.112.106.0/24 maxlen: 24 92.113.45.0/24 maxlen: 24 92.113.56.0/24 maxlen: 24 92.113.57.0/24 maxlen: 24 92.113.59.0/24 maxlen: 24 92.113.63.0/24 maxlen: 24 92.113.187.0/24 maxlen: 24 92.113.208.0/24 maxlen: 24 95.135.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7f:4c:7f:ab:0a:a2:a5:09:41:44:04:f9:6d:aa:23:8e:b2:43:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 23 13:28:50 2026 GMT Not After : Jan 22 13:33:50 2027 GMT Subject: CN=C8373DD0185442D7176AF93D54688371F51087D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:89:1e:f3:dc:dc:7d:88:97:9b:c7:56:b6: 5d:c9:16:ae:98:89:b0:b4:b5:39:28:d2:51:59:f6: 75:c4:20:03:1a:29:b7:28:a9:03:3d:c3:82:1f:27: 27:07:63:bb:fc:aa:a6:19:f2:c6:cf:3c:91:07:f6: 49:9c:24:cf:ab:b2:f2:a3:82:b2:55:4b:2f:cd:a6: c0:c2:67:47:9f:fd:8f:71:e3:34:6e:ff:a5:bf:02: d4:50:54:49:6d:de:0d:ae:33:49:d6:ea:cf:07:2a: 36:c0:6f:4a:0f:d3:9c:c6:3f:fb:40:6e:6b:99:6f: e8:30:64:b0:3a:ee:e3:1d:b0:0d:7a:ef:e1:7e:7e: aa:e6:16:09:f8:72:1b:ef:09:95:7d:9a:94:ee:0d: 6a:f2:30:95:a3:26:71:5e:cb:fc:3a:b1:9a:e2:70: 98:a8:2c:5c:09:85:ef:3e:e6:bc:e7:7c:98:40:b6: 2b:93:ae:6e:18:f3:33:88:eb:f5:d3:2c:ac:eb:ac: 17:6a:1b:4f:54:82:34:64:2b:6d:1d:57:e4:b9:fd: ff:64:a3:a7:dc:41:f5:fb:c2:4b:49:94:3a:85:9a: 83:ed:12:0c:1c:8c:b6:e7:10:cc:07:65:49:12:1d: 32:a6:11:ae:82:4d:f8:fd:51:45:0e:0f:ed:99:1c: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:37:3D:D0:18:54:42:D7:17:6A:F9:3D:54:68:83:71:F5:10:87:D3 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.180.0/24 92.112.106.0/24 92.113.45.0/24 92.113.56.0/23 92.113.59.0/24 92.113.63.0/24 92.113.187.0/24 92.113.208.0/24 95.135.164.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e6:d1:f4:00:24:3d:13:bd:85:8d:a3:12:74:92:67:bf:58: 4b:3f:49:5c:b7:9a:44:2d:f3:61:19:ee:87:56:e1:5d:00:d9: e0:ac:da:19:bd:10:ac:c0:36:c6:a2:4f:f0:f1:d3:72:2b:2a: 45:eb:b3:4e:ea:16:9d:c5:df:7d:d4:5a:69:b8:96:a0:f0:b7: 56:51:61:c6:2f:bf:ff:8b:d2:71:6a:61:8b:14:9d:bf:f2:9e: 0f:d8:be:ac:af:59:63:6f:79:b5:73:86:69:1e:26:2b:d7:0d: 2d:95:aa:67:95:e2:a1:b2:17:6b:d3:23:ea:12:43:5d:82:b4: df:45:9c:76:0f:20:6d:14:5e:e3:59:e9:be:8a:77:28:1c:41: 01:90:2b:da:4b:aa:ed:f6:b9:33:ca:a7:e9:06:fd:d0:99:ba: 58:f9:25:10:bd:c6:05:ff:07:6f:ce:a2:94:83:6c:5b:38:04: 50:b2:fd:4f:65:8e:e1:73:70:01:85:f4:0d:81:62:20:e4:0d: 7e:a3:53:c4:95:09:1d:f0:7e:14:29:12:1a:3b:e3:da:be:24: 2a:16:75:fa:46:6a:29:3b:e7:9b:6d:81:32:e2:9d:44:77:bb: eb:b9:56:96:6d:cd:0b:81:60:bf:c2:73:c4:ca:65:26:45:74: e5:e9:80:f6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdH9Mf6sKoqUJQUQE+W2qI46yQzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMjMxMzI4NTBaFw0yNzAxMjIxMzMzNTBaMDMxMTAvBgNV BAMTKEM4MzczREQwMTg1NDQyRDcxNzZBRjkzRDU0Njg4MzcxRjUxMDg3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCda4ke89zcfYiXm8dWtl3JFq6Y ibC0tTko0lFZ9nXEIAMaKbcoqQM9w4IfJycHY7v8qqYZ8sbPPJEH9kmcJM+rsvKj grJVSy/NpsDCZ0ef/Y9x4zRu/6W/AtRQVElt3g2uM0nW6s8HKjbAb0oP05zGP/tA bmuZb+gwZLA67uMdsA167+F+fqrmFgn4chvvCZV9mpTuDWryMJWjJnFey/w6sZri cJioLFwJhe8+5rznfJhAtiuTrm4Y8zOI6/XTLKzrrBdqG09UgjRkK20dV+S5/f9k o6fcQfX7wktJlDqFmoPtEgwcjLbnEMwHZUkSHTKmEa6CTfj9UUUOD+2ZHHV1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUyDc90BhUQtcXavk9VGiDcfUQh9MwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjUxOTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBAAuy7QD BABccGoDBABccS0DBAFccTgDBABccTsDBABccT8DBABccbsDBABccdADBABfh6Qw DQYJKoZIhvcNAQELBQADggEBAFbm0fQAJD0TvYWNoxJ0kme/WEs/SVy3mkQt82EZ 7odW4V0A2eCs2hm9EKzANsaiT/Dx03IrKkXrs07qFp3F333UWmm4lqDwt1ZRYcYv v/+L0nFqYYsUnb/yng/YvqyvWWNvebVzhmkeJivXDS2VqmeV4qGyF2vTI+oSQ12C tN9FnHYPIG0UXuNZ6b6KdygcQQGQK9pLqu32uTPKp+kG/dCZulj5JRC9xgX/B2/O opSDbFs4BFCy/U9ljuFzcAGF9A2BYiDkDX6jU8SVCR3wfhQpEho749q+JCoWdfpG aik755ttgTLinUR3u+u5VpZtzQuBYL/Cc8TKZSZFdOXpgPY= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:35 2026 by rpki-client