This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47172.roa File: AS47172.roa (raw, json) Hash identifier: h3IyWUAXsnoV3iUiopHf8K0+DrZk00jLVSlSJ+n8b3w= Subject key identifier: 9E:52:5E:C2:40:4A:89:53:18:EB:FA:47:50:09:50:1E:CE:71:74:DA Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5C564519C251365CB0F3F1E67B580BB77AE9149F Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47172.roa Signing time: Wed 10 Dec 2025 13:57:21 +0000 ROA not before: Wed 10 Dec 2025 13:52:21 +0000 ROA not after: Wed 09 Dec 2026 13:57:21 +0000 asID: 47172 IP address blocks: 155.117.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:56:45:19:c2:51:36:5c:b0:f3:f1:e6:7b:58:0b:b7:7a:e9:14:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 10 13:52:21 2025 GMT Not After : Dec 9 13:57:21 2026 GMT Subject: CN=9E525EC2404A895318EBFA475009501ECE7174DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:fb:64:b2:6b:ee:27:43:2a:25:39:14:fb: 62:8f:e8:37:b8:40:33:dc:11:86:15:c3:9c:7a:ec: fc:95:6a:f0:c1:8d:94:59:42:83:c5:57:0b:ed:36: 92:a1:36:5a:12:3f:b3:57:18:81:17:cf:53:f3:04: 29:34:5f:cd:46:db:e6:11:00:b4:d3:da:cc:80:28: 59:09:7b:71:fa:df:ec:db:2b:ed:3c:d3:bf:5d:60: 0d:82:bb:60:8a:50:5f:56:b3:1f:c9:43:b1:96:88: 36:f8:11:02:00:bb:4d:e6:a5:5c:ea:3c:b7:49:2a: 12:a3:ab:f7:ec:91:97:37:de:b0:5f:f3:91:7f:83: a6:0e:84:1c:6e:8b:fc:f6:eb:41:b9:3d:34:45:9a: 07:89:fc:fa:43:46:05:4d:3d:b4:49:88:ec:ec:ac: d8:89:ff:89:d1:d4:19:17:05:d6:be:ef:de:37:96: d5:e5:43:92:fe:b0:53:13:c0:f6:3a:24:16:b9:92: cf:6d:ba:e1:e0:41:ff:71:e0:18:49:b0:bd:2c:1b: 61:ab:5e:50:9d:99:7f:1c:70:7c:5e:4b:33:0e:ef: 98:3c:67:00:df:de:18:9d:88:32:f4:ef:20:0d:14: 7f:e3:5d:49:45:b5:89:73:89:42:da:ad:ca:6b:87: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:52:5E:C2:40:4A:89:53:18:EB:FA:47:50:09:50:1E:CE:71:74:DA X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.146.0/24 Signature Algorithm: sha256WithRSAEncryption 99:a9:ec:64:64:0f:4f:58:38:ff:23:9b:e8:94:b0:93:0b:1b: a6:2e:b9:48:5c:17:d5:d5:0b:fe:9a:48:36:a5:f3:93:53:6e: f9:55:e0:b3:c0:a9:63:af:89:70:88:f8:4e:28:d3:61:d2:3b: ab:18:6f:9d:2d:9e:4c:d7:44:d0:a9:2e:ce:cf:66:7a:08:18: 11:76:78:5c:a4:a6:ca:c0:24:e6:7a:bd:91:82:96:5b:10:43: 0d:02:1e:79:ea:e3:86:3b:a7:d1:14:0b:e6:47:e2:a9:7e:9c: 26:59:a4:8c:fb:82:0c:95:08:77:03:bb:71:25:9d:20:1a:ca: 82:57:85:06:1f:83:7d:04:98:25:b5:ff:f6:84:7f:fe:1b:7f: ca:6d:0d:7d:31:3a:ed:76:36:43:3c:d6:15:5f:5a:2b:f2:d9: 82:69:d7:86:23:61:58:4e:69:13:7e:0e:f7:00:bb:56:4d:79: e2:2f:2b:97:41:45:d4:1c:60:c5:12:ab:79:ae:62:3e:0d:fe: f3:e4:df:6c:ff:94:a7:43:f7:f4:70:1d:b3:3f:62:2f:3f:b0: eb:b3:74:43:f4:a9:2b:22:f1:0f:76:a0:3c:6c:8b:9e:b8:fa: fb:91:a9:4a:25:d0:22:86:e8:ff:3c:93:58:33:d0:f6:21:14: 57:96:af:21 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUXFZFGcJRNlyw8/Hme1gLt3rpFJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTAxMzUyMjFaFw0yNjEyMDkxMzU3MjFaMDMxMTAvBgNV BAMTKDlFNTI1RUMyNDA0QTg5NTMxOEVCRkE0NzUwMDk1MDFFQ0U3MTc0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0ftksmvuJ0MqJTkU+2KP6De4 QDPcEYYVw5x67PyVavDBjZRZQoPFVwvtNpKhNloSP7NXGIEXz1PzBCk0X81G2+YR ALTT2syAKFkJe3H63+zbK+08079dYA2Cu2CKUF9Wsx/JQ7GWiDb4EQIAu03mpVzq PLdJKhKjq/fskZc33rBf85F/g6YOhBxui/z260G5PTRFmgeJ/PpDRgVNPbRJiOzs rNiJ/4nR1BkXBda+7943ltXlQ5L+sFMTwPY6JBa5ks9tuuHgQf9x4BhJsL0sG2Gr XlCdmX8ccHxeSzMO75g8ZwDf3hidiDL07yANFH/jXUlFtYlziULarcprh1uhAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUnlJewkBKiVMY6/pHUAlQHs5xdNowHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDcxNzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACbdZIw DQYJKoZIhvcNAQELBQADggEBAJmp7GRkD09YOP8jm+iUsJMLG6YuuUhcF9XVC/6a SDal85NTbvlV4LPAqWOviXCI+E4o02HSO6sYb50tnkzXRNCpLs7PZnoIGBF2eFyk psrAJOZ6vZGCllsQQw0CHnnq44Y7p9EUC+ZH4ql+nCZZpIz7ggyVCHcDu3ElnSAa yoJXhQYfg30EmCW1//aEf/4bf8ptDX0xOu12NkM81hVfWivy2YJp14YjYVhOaRN+ DvcAu1ZNeeIvK5dBRdQcYMUSq3muYj4N/vPk32z/lKdD9/RwHbM/Yi8/sOuzdEP0 qSsi8Q92oDxsi564+vuRqUol0CKG6P88k1gz0PYhFFeWryE= -----END CERTIFICATE-----Generated at Fri Dec 19 21:20:41 2025 by rpki-client