This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS174.roa File: AS174.roa (raw, json) Hash identifier: iNseI/lur6aa0yLkwgrHj1cZVkWZ7lU187GLcDulpno= Subject key identifier: 3C:65:23:DE:D3:CC:1A:7E:AF:7B:0C:3B:16:A5:62:18:60:28:FA:D0 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 4970360B065705C5BD756BA327E60FACDC79BB41 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS174.roa Signing time: Wed 04 Feb 2026 12:57:51 +0000 ROA not before: Wed 04 Feb 2026 12:52:51 +0000 ROA not after: Wed 03 Feb 2027 12:57:51 +0000 asID: 174 IP address blocks: 176.53.157.0/24 maxlen: 24 176.53.159.0/24 maxlen: 24 193.38.44.0/24 maxlen: 24 193.38.45.0/24 maxlen: 24 194.93.61.0/24 maxlen: 24 194.93.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:70:36:0b:06:57:05:c5:bd:75:6b:a3:27:e6:0f:ac:dc:79:bb:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:51 2026 GMT Not After : Feb 3 12:57:51 2027 GMT Subject: CN=3C6523DED3CC1A7EAF7B0C3B16A562186028FAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:27:89:0f:1e:62:62:f5:6d:c3:4b:7f:9b:c7: 88:0b:20:6b:3e:4c:7d:fa:2a:13:5b:6d:4b:c4:95: 4c:07:ac:7b:6c:76:98:83:f0:14:90:4a:90:b4:5c: ab:7c:11:2c:10:e2:24:17:ea:f6:1f:59:9d:48:90: 17:b2:c1:ae:f9:d1:65:59:da:87:9f:44:6b:c7:fe: 8f:e2:72:8b:bd:0a:9c:7b:bd:b5:41:11:f5:8b:54: 9b:69:b3:c6:db:93:df:49:48:86:d0:78:af:2f:09: a3:ed:c8:08:d2:9b:c9:3a:49:98:42:da:f5:6b:b0: 00:84:31:8b:24:2e:71:69:9b:9a:10:c1:eb:d9:a6: a8:b6:f3:6f:25:56:ad:09:b3:54:97:09:16:4d:7c: 8b:01:9b:35:0d:c0:27:78:6a:c0:3d:94:7e:fe:19: 13:cb:da:e5:fb:09:4d:21:3b:17:41:27:1d:f3:1d: 64:3b:b9:c9:d8:57:43:49:8e:df:bb:e8:e0:e8:d9: b6:19:2d:4b:a3:34:8d:1f:eb:fb:29:e4:2b:35:9a: 43:8c:5b:d6:06:7d:a9:8d:eb:dd:c4:e4:7f:54:b9: d6:fc:f2:32:ed:a0:4e:fa:05:84:98:7a:3d:19:05: 1a:4c:06:4e:a9:e3:97:c2:72:28:d9:da:42:7f:7f: c9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:65:23:DE:D3:CC:1A:7E:AF:7B:0C:3B:16:A5:62:18:60:28:FA:D0 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.157.0/24 176.53.159.0/24 193.38.44.0/23 194.93.61.0/24 194.93.63.0/24 Signature Algorithm: sha256WithRSAEncryption e7:a2:72:a8:23:68:22:43:55:1c:61:af:8a:0e:ab:fb:1f:2a: 92:bb:a1:3a:2a:9b:ff:4a:e2:e4:b8:8b:e5:fa:92:ae:a5:91: 74:62:cc:5c:f4:34:c8:27:2b:ed:eb:c3:c7:76:05:52:0f:fc: b7:2f:fe:d4:72:52:f3:36:7c:85:07:5c:44:18:af:fe:da:97: 71:ae:1d:3d:7b:30:0e:32:b4:9f:27:94:bc:71:c5:7d:02:e1: 5d:1d:cd:38:49:60:75:82:c9:52:e4:90:b5:a6:ed:36:53:11: ed:7d:ea:68:c2:38:55:52:8c:d5:4d:30:26:d4:c7:e4:37:f9: bc:61:87:c9:8f:de:6c:96:51:11:46:86:ad:18:4f:fd:ff:48: 19:74:4c:1f:85:53:e2:2a:39:93:ea:91:bb:21:f9:e7:49:b6: 55:36:6a:77:b8:6e:2d:11:de:f1:86:07:ef:b5:84:e6:04:e7: fc:03:13:2f:2a:0c:b6:bb:cf:23:cf:f9:b6:d0:4b:5c:f5:d4: 8e:43:38:62:0a:45:f8:c2:d9:ff:dc:54:e4:6a:77:e4:54:84: 60:10:8a:68:a9:55:4e:7d:6d:90:09:43:71:1e:75:b7:94:a2: ac:e7:5a:c9:c1:ed:f9:d1:f0:c2:49:06:71:d5:b8:cd:69:d5: c3:c7:99:33 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUSXA2CwZXBcW9dWujJ+YPrNx5u0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTFaFw0yNzAyMDMxMjU3NTFaMDMxMTAvBgNV BAMTKDNDNjUyM0RFRDNDQzFBN0VBRjdCMEMzQjE2QTU2MjE4NjAyOEZBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0J4kPHmJi9W3DS3+bx4gLIGs+ TH36KhNbbUvElUwHrHtsdpiD8BSQSpC0XKt8ESwQ4iQX6vYfWZ1IkBeywa750WVZ 2oefRGvH/o/icou9Cpx7vbVBEfWLVJtps8bbk99JSIbQeK8vCaPtyAjSm8k6SZhC 2vVrsACEMYskLnFpm5oQwevZpqi2828lVq0Js1SXCRZNfIsBmzUNwCd4asA9lH7+ GRPL2uX7CU0hOxdBJx3zHWQ7ucnYV0NJjt+76ODo2bYZLUujNI0f6/sp5Cs1mkOM W9YGfamN693E5H9Uudb88jLtoE76BYSYej0ZBRpMBk6p45fCcijZ2kJ/f8nRAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUPGUj3tPMGn6veww7FqViGGAo+tAwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAsDWdAwQA sDWfAwQBwSYsAwQAwl09AwQAwl0/MA0GCSqGSIb3DQEBCwUAA4IBAQDnonKoI2gi Q1UcYa+KDqv7HyqSu6E6Kpv/SuLkuIvl+pKupZF0Ysxc9DTIJyvt68PHdgVSD/y3 L/7UclLzNnyFB1xEGK/+2pdxrh09ezAOMrSfJ5S8ccV9AuFdHc04SWB1gslS5JC1 pu02UxHtfepowjhVUozVTTAm1MfkN/m8YYfJj95sllERRoatGE/9/0gZdEwfhVPi KjmT6pG7IfnnSbZVNmp3uG4tEd7xhgfvtYTmBOf8AxMvKgy2u88jz/m20Etc9dSO QzhiCkX4wtn/3FTkanfkVIRgEIpoqVVOfW2QCUNxHnW3lKKs51rJwe350fDCSQZx 1bjNadXDx5kz -----END CERTIFICATE-----Generated at Thu Feb 5 13:52:25 2026 by rpki-client