This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa File: AS174.roa (raw, json) Hash identifier: gSp0Qhfbko2L/Uwwa69PRUe0heBn9jeFBc7NNsYK+IQ= Subject key identifier: 93:1A:76:DC:18:4D:24:0F:AE:8A:55:D2:0C:89:F5:51:56:85:96:CA Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 382EEB8586528C40850C3657EA923730BE339399 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa Signing time: Wed 26 Nov 2025 18:21:17 +0000 ROA not before: Wed 26 Nov 2025 18:16:17 +0000 ROA not after: Wed 25 Nov 2026 18:21:17 +0000 asID: 174 IP address blocks: 212.60.145.0/24 maxlen: 24 212.60.146.0/24 maxlen: 24 212.60.148.0/24 maxlen: 24 212.60.150.0/24 maxlen: 24 212.60.152.0/24 maxlen: 24 212.60.154.0/24 maxlen: 24 212.60.156.0/24 maxlen: 24 212.60.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2e:eb:85:86:52:8c:40:85:0c:36:57:ea:92:37:30:be:33:93:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 26 18:16:17 2025 GMT Not After : Nov 25 18:21:17 2026 GMT Subject: CN=931A76DC184D240FAE8A55D20C89F551568596CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fd:7e:d9:13:91:b8:d7:c2:9c:e3:44:21:58: c5:8f:89:6d:0d:12:e9:a7:cf:d5:10:5f:48:94:c1: ef:f6:df:06:e9:18:a7:50:46:a7:c2:28:c4:b8:ca: ff:cc:65:d3:de:bd:fb:90:6b:0c:34:31:ee:05:7a: a9:57:77:d2:d1:6f:0c:62:1b:e8:63:e9:71:56:24: 00:6c:9e:01:e2:9b:4b:cd:f7:c5:57:4c:aa:62:6c: 5c:a1:af:f2:cf:52:7d:ca:00:83:ce:7e:5e:00:0f: 88:6a:9a:6d:54:70:fd:36:b1:f1:85:d0:a0:53:e3: 50:df:1a:f0:e6:c4:77:30:47:59:c8:a3:80:a3:6c: 27:30:84:69:04:56:fd:56:a9:b5:71:4a:9e:b5:e0: 1d:30:9b:81:39:97:f0:0f:c0:97:c4:ad:e7:90:01: 85:3e:7c:9d:68:b3:a6:e0:fa:92:de:a7:40:eb:66: d3:50:bf:6d:ea:39:ff:0e:85:69:1e:c9:00:66:03: a1:b2:2f:5f:50:75:f5:48:e9:7f:a1:93:72:ed:65: d8:68:50:11:29:7a:c2:98:d9:8c:42:42:e4:b2:ca: 9b:4b:f2:83:a8:b8:66:01:b3:dc:c5:04:34:6c:48: a5:15:50:27:ce:83:c7:19:7b:33:55:89:95:39:48: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1A:76:DC:18:4D:24:0F:AE:8A:55:D2:0C:89:F5:51:56:85:96:CA X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.60.145.0-212.60.146.255 212.60.148.0/24 212.60.150.0/24 212.60.152.0/24 212.60.154.0/24 212.60.156.0/24 212.60.158.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:f7:c0:71:33:ef:c1:f5:df:85:58:2f:2e:af:f7:71:c7:b7: 54:5f:02:f6:9b:35:7f:51:a7:d1:e5:28:0c:b5:a9:b0:f9:0f: 38:bb:d6:11:d4:26:c2:3c:88:d4:77:2b:6c:79:34:9d:8a:ff: b7:b0:83:c5:13:42:51:5c:94:f5:27:d1:03:7b:9e:5e:1c:36: 02:b9:4b:2c:78:ca:d1:ff:84:e3:d4:db:e5:ca:6f:64:2d:31: b2:82:35:d9:28:39:03:4d:70:05:f4:30:8f:8d:bd:62:27:38: 83:78:16:8b:47:1e:74:24:0f:78:e4:b1:d5:22:d7:d7:23:e3: 64:3a:c4:12:be:ba:6a:4b:96:1c:0b:09:ad:2d:f9:18:22:0d: 6d:34:ce:1c:87:93:21:d5:40:48:67:ba:d1:a3:02:2e:70:7d: 97:35:19:59:85:87:59:ba:f8:60:3c:48:d1:bb:b0:71:52:fa: 24:65:e3:53:27:fa:64:cf:d3:2a:e6:ad:b9:f4:02:1b:c5:72: 88:b4:73:84:75:e5:e8:81:69:b0:98:b0:95:67:e6:ca:b3:72: c4:90:4d:83:29:51:2a:42:14:4c:76:8f:46:97:11:d1:24:1e: 1e:2e:81:75:43:9f:95:4e:fe:6d:9d:83:dc:48:03:02:fb:52: d5:90:51:7f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUOC7rhYZSjECFDDZX6pI3ML4zk5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMjYxODE2MTdaFw0yNjExMjUxODIxMTdaMDMxMTAvBgNV BAMTKDkzMUE3NkRDMTg0RDI0MEZBRThBNTVEMjBDODlGNTUxNTY4NTk2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/X7ZE5G418Kc40QhWMWPiW0N Eumnz9UQX0iUwe/23wbpGKdQRqfCKMS4yv/MZdPevfuQaww0Me4FeqlXd9LRbwxi G+hj6XFWJABsngHim0vN98VXTKpibFyhr/LPUn3KAIPOfl4AD4hqmm1UcP02sfGF 0KBT41DfGvDmxHcwR1nIo4CjbCcwhGkEVv1WqbVxSp614B0wm4E5l/APwJfEreeQ AYU+fJ1os6bg+pLep0DrZtNQv23qOf8OhWkeyQBmA6GyL19QdfVI6X+hk3LtZdho UBEpesKY2YxCQuSyyptL8oOouGYBs9zFBDRsSKUVUCfOg8cZezNViZU5SOcNAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUkxp23BhNJA+uilXSDIn1UVaFlsowHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBADUPJED BADUPJIDBADUPJQDBADUPJYDBADUPJgDBADUPJoDBADUPJwDBADUPJ4wDQYJKoZI hvcNAQELBQADggEBAJ33wHEz78H134VYLy6v93HHt1RfAvabNX9Rp9HlKAy1qbD5 Dzi71hHUJsI8iNR3K2x5NJ2K/7ewg8UTQlFclPUn0QN7nl4cNgK5Syx4ytH/hOPU 2+XKb2QtMbKCNdkoOQNNcAX0MI+NvWInOIN4FotHHnQkD3jksdUi19cj42Q6xBK+ umpLlhwLCa0t+RgiDW00zhyHkyHVQEhnutGjAi5wfZc1GVmFh1m6+GA8SNG7sHFS +iRl41Mn+mTP0yrmrbn0AhvFcoi0c4R15eiBabCYsJVn5sqzcsSQTYMpUSpCFEx2 j0aXEdEkHh4ugXVDn5VO/m2dg9xIAwL7UtWQUX8= -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:01 2025 by rpki-client