Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: YVpjx11K2k0KwX6I8b7c/sGi80aE+WgPV5jxCl19cwg=
Subject key identifier: 62:0A:DC:0E:F0:8D:3B:E5:F3:5B:3B:ED:91:8D:82:B2:7C:FF:BF:DA
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 36A0FA8EAC4EB27121B0CE761793A5A50D72E3F6
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
Signing time: Mon 16 Mar 2026 00:04:59 +0000
ROA not before: Sun 15 Mar 2026 23:59:59 +0000
ROA not after: Mon 15 Mar 2027 00:04:59 +0000
asID: 174
IP address blocks: 212.60.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a0:fa:8e:ac:4e:b2:71:21:b0:ce:76:17:93:a5:a5:0d:72:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Mar 15 23:59:59 2026 GMT
Not After : Mar 15 00:04:59 2027 GMT
Subject: CN=620ADC0EF08D3BE5F35B3BED918D82B27CFFBFDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:f3:60:3a:55:d5:74:5d:e2:2b:e8:44:3a:
04:88:93:56:de:aa:de:66:92:7f:e8:f0:df:8a:b7:
6c:26:28:73:57:ca:bf:43:c3:df:df:c5:99:83:37:
e9:16:df:8e:5d:72:04:94:e7:25:3a:9b:14:80:1c:
86:42:35:7e:e4:51:d0:6b:76:c0:9f:03:0f:fd:de:
07:6d:07:b5:10:fc:9f:6a:7b:d6:0d:fa:76:0c:a1:
e4:44:9a:b4:f6:8a:c6:26:57:8c:c8:50:df:4b:39:
c9:40:5a:8a:47:4a:36:52:a5:e9:2e:f2:df:12:6c:
22:b5:c2:b7:41:5a:02:13:29:a8:0f:b4:af:f2:dc:
ba:04:47:a7:7e:47:f1:22:4f:d7:88:a8:f7:ee:a8:
5e:2e:e3:2e:46:fe:c2:20:f5:1b:45:e0:b4:3d:f1:
ee:1f:a5:8c:3c:f6:69:92:8e:ed:a0:ca:ed:3a:95:
91:5a:09:8c:66:b9:cf:7a:0d:c5:25:bd:17:b1:11:
42:be:61:cb:7b:f6:54:53:ae:d3:08:54:e7:79:b9:
f2:0e:0e:59:df:4f:6e:02:f7:6f:1f:06:ec:2f:4e:
1a:02:58:8e:89:c1:9b:1a:49:87:6d:90:0a:1d:a1:
2b:95:6e:f8:cc:f4:00:87:d9:81:f5:5f:e1:a3:c6:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:DC:0E:F0:8D:3B:E5:F3:5B:3B:ED:91:8D:82:B2:7C:FF:BF:DA
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a4:22:d2:10:54:7d:03:46:b3:d6:01:9d:ab:2c:4d:c2:4d:
02:5b:2a:af:c3:78:03:4f:be:4d:cb:a3:d8:e6:9a:01:95:be:
67:98:52:76:3f:5c:4a:79:fe:b2:b5:a9:80:b2:5e:c1:fd:50:
0f:31:e7:af:f7:8a:4b:72:c4:56:c6:70:39:2b:84:26:4e:44:
c8:d7:7e:05:26:43:24:f9:94:25:d3:1a:7b:80:23:99:cc:d6:
ca:8e:0b:50:40:c1:db:85:24:cd:29:b3:a7:5f:83:c7:d2:25:
78:c1:1b:d0:37:20:1c:7f:78:44:e5:63:68:fc:f8:83:59:c5:
a1:2b:ef:9a:dd:65:d4:66:55:fd:66:eb:df:58:22:61:b6:d3:
8b:55:01:bd:ee:b2:c4:85:61:4f:23:63:89:f3:10:97:ec:e5:
54:6a:92:b2:f2:0b:46:c9:07:89:bd:c6:23:bd:e3:d8:12:6b:
54:3e:d5:82:97:8d:9e:51:0b:a2:07:dd:6c:c0:4b:51:95:aa:
f6:bc:82:f8:8f:f8:e2:a0:17:dd:0f:4e:6e:f0:15:bd:56:66:
1a:74:af:53:43:47:d5:2f:0f:1f:5b:57:d3:12:d6:0c:2e:80:
3d:c8:7c:4e:fd:62:7e:8f:e4:95:65:a7:e1:af:6a:15:9e:ca:
8c:85:41:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUNqD6jqxOsnEhsM52F5OlpQ1y4/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjAzMTUyMzU5NTlaFw0yNzAzMTUwMDA0NTlaMDMxMTAvBgNV
BAMTKDYyMEFEQzBFRjA4RDNCRTVGMzVCM0JFRDkxOEQ4MkIyN0NGRkJGREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZfNgOlXVdF3iK+hEOgSIk1be
qt5mkn/o8N+Kt2wmKHNXyr9Dw9/fxZmDN+kW345dcgSU5yU6mxSAHIZCNX7kUdBr
dsCfAw/93gdtB7UQ/J9qe9YN+nYMoeREmrT2isYmV4zIUN9LOclAWopHSjZSpeku
8t8SbCK1wrdBWgITKagPtK/y3LoER6d+R/EiT9eIqPfuqF4u4y5G/sIg9RtF4LQ9
8e4fpYw89mmSju2gyu06lZFaCYxmuc96DcUlvRexEUK+Yct79lRTrtMIVOd5ufIO
DlnfT24C928fBuwvThoCWI6JwZsaSYdtkAodoSuVbvjM9ACH2YH1X+GjxjY1AgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUYgrcDvCNO+XzWzvtkY2Csnz/v9owHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DyeMA0G
CSqGSIb3DQEBCwUAA4IBAQAupCLSEFR9A0az1gGdqyxNwk0CWyqvw3gDT75Ny6PY
5poBlb5nmFJ2P1xKef6ytamAsl7B/VAPMeev94pLcsRWxnA5K4QmTkTI134FJkMk
+ZQl0xp7gCOZzNbKjgtQQMHbhSTNKbOnX4PH0iV4wRvQNyAcf3hE5WNo/PiDWcWh
K++a3WXUZlX9ZuvfWCJhttOLVQG97rLEhWFPI2OJ8xCX7OVUapKy8gtGyQeJvcYj
vePYEmtUPtWCl42eUQuiB91swEtRlar2vIL4j/jioBfdD05u8BW9VmYadK9TQ0fV
Lw8fW1fTEtYMLoA9yHxO/WJ+j+SVZafhr2oVnsqMhUGc
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:32:10 2026 by rpki-client