This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa File: AS174.roa (raw, json) Hash identifier: OIiNNdv2zLRuH/+cZO/Qj4ctOJ7tGbBmzXijPdoa2Uo= Subject key identifier: 62:A0:3C:D3:DC:47:5D:4C:E9:57:B4:53:97:BA:26:FD:58:2C:DA:0D Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 77109EAE209C0BA6E8819F6AD8CD2103F1430AD5 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa Signing time: Thu 20 Nov 2025 00:06:27 +0000 ROA not before: Thu 20 Nov 2025 00:01:27 +0000 ROA not after: Thu 19 Nov 2026 00:06:27 +0000 asID: 174 IP address blocks: 46.202.35.0/24 maxlen: 24 46.202.85.0/24 maxlen: 24 46.202.86.0/24 maxlen: 24 46.203.148.0/24 maxlen: 24 46.203.178.0/24 maxlen: 24 91.124.17.0/24 maxlen: 24 91.124.68.0/22 maxlen: 22 91.124.72.0/22 maxlen: 22 91.124.76.0/22 maxlen: 22 91.124.100.0/22 maxlen: 22 91.124.104.0/22 maxlen: 22 91.124.108.0/22 maxlen: 22 91.124.212.0/22 maxlen: 22 91.124.224.0/22 maxlen: 22 92.113.70.0/24 maxlen: 24 92.113.71.0/24 maxlen: 24 92.113.72.0/24 maxlen: 24 92.113.73.0/24 maxlen: 24 92.113.101.0/24 maxlen: 24 92.113.102.0/24 maxlen: 24 92.113.104.0/24 maxlen: 24 92.113.105.0/24 maxlen: 24 92.113.158.0/24 maxlen: 24 92.113.159.0/24 maxlen: 24 92.113.160.0/24 maxlen: 24 92.113.161.0/24 maxlen: 24 95.134.12.0/24 maxlen: 24 95.134.13.0/24 maxlen: 24 95.134.14.0/24 maxlen: 24 95.134.15.0/24 maxlen: 24 95.134.63.0/24 maxlen: 24 95.134.79.0/24 maxlen: 24 95.134.80.0/24 maxlen: 24 95.134.88.0/24 maxlen: 24 95.134.95.0/24 maxlen: 24 95.134.128.0/24 maxlen: 24 95.134.134.0/24 maxlen: 24 95.134.151.0/24 maxlen: 24 95.135.104.0/24 maxlen: 24 95.135.154.0/24 maxlen: 24 95.135.155.0/24 maxlen: 24 95.135.168.0/24 maxlen: 24 95.135.232.0/24 maxlen: 24 95.135.238.0/24 maxlen: 24 95.135.242.0/24 maxlen: 24 178.92.45.0/24 maxlen: 24 178.94.127.0/24 maxlen: 24 178.94.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:10:9e:ae:20:9c:0b:a6:e8:81:9f:6a:d8:cd:21:03:f1:43:0a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 20 00:01:27 2025 GMT Not After : Nov 19 00:06:27 2026 GMT Subject: CN=62A03CD3DC475D4CE957B45397BA26FD582CDA0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:41:a8:f2:d5:d5:b6:3c:47:c9:0f:ec:e4: 70:db:77:5c:dc:03:3a:86:3f:c9:8c:7c:67:58:3e: 0f:18:e3:d0:58:ee:97:4e:b4:0e:9b:c4:b6:ba:88: 63:31:50:61:ee:96:db:70:d9:ad:c3:82:e9:6d:07: f3:7d:4e:dd:6c:8d:a5:04:12:b6:b6:1a:06:54:31: 86:a8:78:9b:95:0f:ed:a2:ec:a7:45:9d:12:9f:13: 67:8c:08:71:d8:e8:cb:77:5c:54:17:e8:69:4e:14: b6:1d:e4:2e:8c:72:60:ae:84:5f:88:e4:8d:89:37: d5:ee:9b:ab:46:71:b6:74:8f:85:b3:ff:99:d5:b4: 25:4c:6c:b4:ad:6d:62:41:10:1d:eb:a2:14:43:f0: d1:99:25:cd:e0:29:1e:c7:d8:53:01:78:79:5e:74: f2:f8:8e:2b:5c:c3:d0:bd:ec:02:e8:c4:fc:82:c9: 11:90:bc:ae:29:0d:c8:56:d1:92:27:49:a9:d9:f7: a0:44:db:8c:50:9f:60:36:7e:52:52:8e:bd:2a:6b: ff:81:f5:be:63:7b:17:98:c5:9c:4f:b2:f9:12:a3: b8:bd:6c:e6:c6:b3:2b:c8:23:16:0e:59:de:d8:e0: f0:ae:ad:65:1f:60:72:22:f0:6d:8f:a3:d4:95:eb: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:3C:D3:DC:47:5D:4C:E9:57:B4:53:97:BA:26:FD:58:2C:DA:0D X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.35.0/24 46.202.85.0-46.202.86.255 46.203.148.0/24 46.203.178.0/24 91.124.17.0/24 91.124.68.0-91.124.79.255 91.124.100.0-91.124.111.255 91.124.212.0/22 91.124.224.0/22 92.113.70.0-92.113.73.255 92.113.101.0-92.113.102.255 92.113.104.0/23 92.113.158.0-92.113.161.255 95.134.12.0/22 95.134.63.0/24 95.134.79.0-95.134.80.255 95.134.88.0/24 95.134.95.0/24 95.134.128.0/24 95.134.134.0/24 95.134.151.0/24 95.135.104.0/24 95.135.154.0/23 95.135.168.0/24 95.135.232.0/24 95.135.238.0/24 95.135.242.0/24 178.92.45.0/24 178.94.127.0/24 178.94.174.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:20:d5:40:24:14:b7:97:95:e1:d3:ae:f6:97:89:57:37:a0: 5a:2e:ad:23:dc:92:20:4d:b4:b9:06:cc:b5:d0:5d:65:32:e2: af:8e:13:e9:17:cc:aa:9b:4c:09:c8:25:fd:75:da:75:7f:05: 1c:d1:1a:b2:dc:5e:89:5d:91:94:fc:fa:6b:96:b4:05:60:6f: 84:3f:4d:d9:f3:c3:82:93:98:eb:fb:19:6c:af:81:e4:51:08: e2:2c:ae:6a:01:30:68:59:fd:95:15:41:f9:13:e1:b1:1f:a6: 76:c0:9e:36:04:89:89:0b:6c:b8:37:1b:2e:74:f0:61:a0:29: 2d:67:4d:2b:3e:4d:b4:71:41:10:e6:b2:5f:eb:89:bd:47:cc: 1c:23:80:7f:4e:3d:40:ac:aa:49:16:58:ec:a1:03:5e:87:0f: 58:07:68:06:31:59:ad:e9:3f:f8:93:fa:3b:85:ea:04:0e:7e: 01:cd:72:e7:2e:35:94:00:4c:6f:63:5e:a5:31:3d:a5:59:1f: a3:eb:20:0a:1a:39:47:6c:92:e0:4c:08:3d:9c:7c:59:a8:a9: 71:6b:01:03:9a:cb:7b:2d:87:f4:a7:67:bc:b1:d3:51:03:7a: d8:4c:04:80:ae:79:7d:45:cd:16:62:cf:ae:55:3c:ff:63:d2: 60:cb:ee:a2 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUdxCeriCcC6bogZ9q2M0hA/FDCtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjAwMDAxMjdaFw0yNjExMTkwMDA2MjdaMDMxMTAvBgNV BAMTKDYyQTAzQ0QzREM0NzVENENFOTU3QjQ1Mzk3QkEyNkZENTgyQ0RBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QEGo8tXVtjxHyQ/s5HDbd1zc AzqGP8mMfGdYPg8Y49BY7pdOtA6bxLa6iGMxUGHulttw2a3DgultB/N9Tt1sjaUE Era2GgZUMYaoeJuVD+2i7KdFnRKfE2eMCHHY6Mt3XFQX6GlOFLYd5C6McmCuhF+I 5I2JN9Xum6tGcbZ0j4Wz/5nVtCVMbLStbWJBEB3rohRD8NGZJc3gKR7H2FMBeHle dPL4jitcw9C97ALoxPyCyRGQvK4pDchW0ZInSanZ96BE24xQn2A2flJSjr0qa/+B 9b5jexeYxZxPsvkSo7i9bObGsyvIIxYOWd7Y4PCurWUfYHIi8G2Po9SV68LtAgMB AAGjggLzMIIC7zAdBgNVHQ4EFgQUYqA809xHXUzpV7RTl7om/Vgs2g0wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgABMIHsAwQA LsojMAwDBAAuylUDBAAuylYDBAAuy5QDBAAuy7IDBABbfBEwDAMEAlt8RAMEBFt8 QDAMAwQCW3xkAwQEW3xgAwQCW3zUAwQCW3zgMAwDBAFccUYDBAFccUgwDAMEAFxx ZQMEAFxxZgMEAVxxaDAMAwQBXHGeAwQBXHGgAwQCX4YMAwQAX4Y/MAwDBABfhk8D BABfhlADBABfhlgDBABfhl8DBABfhoADBABfhoYDBABfhpcDBABfh2gDBAFfh5oD BABfh6gDBABfh+gDBABfh+4DBABfh/IDBACyXC0DBACyXn8DBACyXq4wDQYJKoZI hvcNAQELBQADggEBAHog1UAkFLeXleHTrvaXiVc3oFourSPckiBNtLkGzLXQXWUy 4q+OE+kXzKqbTAnIJf112nV/BRzRGrLcXoldkZT8+muWtAVgb4Q/Tdnzw4KTmOv7 GWyvgeRRCOIsrmoBMGhZ/ZUVQfkT4bEfpnbAnjYEiYkLbLg3Gy508GGgKS1nTSs+ TbRxQRDmsl/rib1HzBwjgH9OPUCsqkkWWOyhA16HD1gHaAYxWa3pP/iT+juF6gQO fgHNcucuNZQATG9jXqUxPaVZH6PrIAoaOUdskuBMCD2cfFmoqXFrAQOay3sth/Sn Z7yx01EDethMBICueX1FzRZiz65VPP9j0mDL7qI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:13 2025 by rpki-client