This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS17497.roa File: AS17497.roa (raw, json) Hash identifier: lhmBs6zdrwytM9gTLVTitZlsfYtS4c3rBOW5zuX5vWY= Subject key identifier: 55:76:FC:71:06:A2:74:1E:F1:EF:8F:8D:5B:D9:BF:5C:9A:FF:44:FE Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6396FC8157CCF9D009CD632AAB4BA85A69A05AEA Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS17497.roa Signing time: Sat 24 Jan 2026 07:39:06 +0000 ROA not before: Sat 24 Jan 2026 07:34:06 +0000 ROA not after: Sat 23 Jan 2027 07:39:06 +0000 asID: 17497 IP address blocks: 92.112.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:96:fc:81:57:cc:f9:d0:09:cd:63:2a:ab:4b:a8:5a:69:a0:5a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 24 07:34:06 2026 GMT Not After : Jan 23 07:39:06 2027 GMT Subject: CN=5576FC7106A2741EF1EF8F8D5BD9BF5C9AFF44FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:66:4d:77:a5:9e:6c:e8:1b:88:b0:26:0b: 3d:22:1e:a9:06:19:7f:42:80:a7:f2:bf:aa:e6:e3: be:d4:40:1a:73:c5:a6:21:68:54:fc:af:93:c4:76: 29:42:2d:6c:bb:a2:af:99:39:d0:a2:37:2f:81:0d: 0f:b7:ac:1b:ca:bc:a5:b9:0d:20:78:5e:c0:66:8d: d0:45:ad:01:09:68:16:92:e9:1d:f5:30:9a:3e:d8: 0c:08:cf:f3:94:0e:e4:16:c5:de:7c:b3:fa:68:93: c6:75:ac:73:36:11:93:0d:3d:a9:82:47:f8:50:b5: e9:46:db:90:b2:95:e0:dc:ab:27:ea:70:a3:e9:d9: 3c:e4:b2:51:5d:e6:e3:10:7b:81:9e:af:0e:ab:2d: d0:7a:23:8e:a6:6b:d0:29:3b:5d:34:df:d9:d3:f6: 6e:db:0c:a9:9d:3b:e6:36:47:f0:d0:98:f7:fc:e8: 6b:53:1e:09:99:fc:ee:1c:6d:52:26:75:11:10:d1: e8:8d:1f:8b:d0:44:3a:69:fc:47:10:82:09:e7:84: ad:84:21:4a:02:93:36:fa:17:4c:8c:d8:96:58:2c: 14:a5:ea:4d:da:33:97:7d:0e:c1:23:02:d3:8c:cf: 25:22:4e:61:5e:59:91:46:8f:5c:c1:e0:fa:5b:59: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:FC:71:06:A2:74:1E:F1:EF:8F:8D:5B:D9:BF:5C:9A:FF:44:FE X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS17497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.112.45.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:cf:8c:ba:62:15:9f:16:b5:b8:46:94:02:4e:98:84:e4:c8: 1c:57:f0:fe:ff:4a:26:4f:3b:77:e8:be:59:50:ea:20:44:2a: 60:c7:2b:15:86:a5:eb:45:35:b9:c8:1b:4e:56:96:b5:cf:6f: 22:b8:31:0d:53:58:cf:14:92:5d:45:df:47:1f:c9:89:79:f2: a4:00:fb:f8:c4:82:2e:ea:ac:8e:61:9c:05:8d:7d:04:39:ee: a1:84:40:c5:dc:d3:c5:7a:76:bb:9b:3c:34:0e:ee:a3:ad:c3: c3:ee:76:7f:c1:81:f3:40:e2:ac:c4:a1:d6:b0:e2:f6:68:a4: 52:e3:6e:6d:11:1e:40:48:5d:ea:ec:c0:42:da:17:ca:ba:f0: ac:ad:3c:e3:7b:8a:ed:c1:23:4f:27:ef:1e:9d:61:e6:a4:2e: cf:a5:97:38:3f:a1:e3:59:a6:ed:44:ab:93:d9:f6:20:62:39: 9b:7b:fb:3d:07:30:b9:f0:99:b0:09:93:bf:15:d8:c9:24:80: f5:72:8d:ff:9f:da:fd:80:7e:3f:d3:f7:ef:f0:ac:58:39:76: 05:50:74:ee:3a:57:17:59:6b:e7:27:7a:04:b9:f5:15:07:c3: e6:51:fe:1e:bd:bb:0f:28:ec:5c:f3:c3:56:f2:3c:cf:b4:b9: 8f:be:22:f7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUY5b8gVfM+dAJzWMqq0uoWmmgWuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMjQwNzM0MDZaFw0yNzAxMjMwNzM5MDZaMDMxMTAvBgNV BAMTKDU1NzZGQzcxMDZBMjc0MUVGMUVGOEY4RDVCRDlCRjVDOUFGRjQ0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubmZNd6WebOgbiLAmCz0iHqkG GX9CgKfyv6rm477UQBpzxaYhaFT8r5PEdilCLWy7oq+ZOdCiNy+BDQ+3rBvKvKW5 DSB4XsBmjdBFrQEJaBaS6R31MJo+2AwIz/OUDuQWxd58s/pok8Z1rHM2EZMNPamC R/hQtelG25CyleDcqyfqcKPp2TzkslFd5uMQe4Gerw6rLdB6I46ma9ApO10039nT 9m7bDKmdO+Y2R/DQmPf86GtTHgmZ/O4cbVImdREQ0eiNH4vQRDpp/EcQggnnhK2E IUoCkzb6F0yM2JZYLBSl6k3aM5d9DsEjAtOMzyUiTmFeWZFGj1zB4PpbWXr9AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUVXb8cQaidB7x74+NW9m/XJr/RP4wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTc0OTcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccC0w DQYJKoZIhvcNAQELBQADggEBAB7PjLpiFZ8WtbhGlAJOmITkyBxX8P7/SiZPO3fo vllQ6iBEKmDHKxWGpetFNbnIG05WlrXPbyK4MQ1TWM8Ukl1F30cfyYl58qQA+/jE gi7qrI5hnAWNfQQ57qGEQMXc08V6drubPDQO7qOtw8Pudn/BgfNA4qzEodaw4vZo pFLjbm0RHkBIXerswELaF8q68KytPON7iu3BI08n7x6dYeakLs+llzg/oeNZpu1E q5PZ9iBiOZt7+z0HMLnwmbAJk78V2MkkgPVyjf+f2v2Afj/T9+/wrFg5dgVQdO46 VxdZa+cnegS59RUHw+ZR/h69uw8o7Fzzw1byPM+0uY++Ivc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:24 2026 by rpki-client