Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 7EWirxYrS1mvPampLeYuCFaJFV7IZA/WJgv/zNQR8UE=
Subject key identifier: B0:D0:D8:39:A4:60:60:9D:61:D5:D1:74:AF:B6:77:B2:F4:5E:B3:16
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 07F96975A858912102B0881240ECDFF4E51B60FE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Wed 23 Sep 2026 09:57:51 +0000
ROA not before: Wed 23 Sep 2026 09:52:51 +0000
ROA not after: Wed 22 Sep 2027 09:57:51 +0000
asID: 174
IP address blocks: 51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
51.241.62.0/24 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f9:69:75:a8:58:91:21:02:b0:88:12:40:ec:df:f4:e5:1b:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 09:52:51 2026 GMT
Not After : Sep 22 09:57:51 2027 GMT
Subject: CN=B0D0D839A460609D61D5D174AFB677B2F45EB316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:73:9e:e4:95:63:85:f2:93:b7:93:a7:9e:
26:7f:83:7d:7d:75:52:3d:ef:05:e3:ba:10:f3:d5:
b0:a8:0e:20:24:33:82:bf:44:6f:55:0c:07:72:03:
5a:b9:b0:25:9a:8d:49:7f:04:43:67:31:4d:cb:fa:
eb:7d:6a:32:4b:e3:a1:68:a9:f5:24:46:99:5d:95:
79:fc:5f:7e:5c:07:d2:99:4b:31:2a:51:a6:74:e7:
6f:3b:26:87:9e:84:a2:27:a1:09:2d:38:ef:75:d5:
55:5b:55:be:e8:54:52:f9:6f:1f:34:04:35:e6:fe:
89:29:8e:9c:4a:dc:2d:59:b5:9a:83:76:66:03:52:
ee:d7:71:48:19:d9:7e:c2:20:36:d1:0b:ea:2b:b1:
2a:3f:b8:27:1c:df:18:bf:e8:9c:00:14:57:9b:66:
03:e1:6a:fb:f4:08:4f:a4:7d:e7:f3:c1:33:1c:45:
0d:69:a4:7c:33:42:9f:4b:5b:55:19:17:71:e3:5a:
71:bc:ca:be:88:a1:f6:7e:22:50:aa:de:30:10:22:
c3:0e:53:ff:7f:46:4c:79:d7:b8:4c:08:7c:d1:b1:
fd:b0:61:d8:b9:29:6c:48:fc:10:f5:54:81:9d:f5:
b0:29:0a:22:22:2c:42:5a:08:28:55:40:90:07:0a:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:D8:39:A4:60:60:9D:61:D5:D1:74:AF:B6:77:B2:F4:5E:B3:16
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.192.0/24
51.194.207.0/24
51.241.62.0/24
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
Signature Algorithm: sha256WithRSAEncryption
62:48:6e:b9:2c:ec:14:90:57:be:65:26:57:56:53:4f:5e:69:
9f:5c:ee:ea:4e:b0:b8:c9:44:de:fe:de:7b:e9:ab:a4:14:8e:
31:dd:85:67:d1:e6:6d:d0:e1:cf:db:9f:b0:51:e7:5f:2a:9a:
ee:f9:64:e5:ab:dd:21:c5:c9:ee:f6:4e:e5:3e:d3:83:8f:c9:
03:e6:b7:fc:bf:8e:70:4a:5d:85:e6:15:50:d8:7a:b4:65:f0:
fd:07:4a:35:58:90:c0:1f:0d:b3:de:35:56:c4:13:a8:ef:eb:
95:e9:4b:f2:68:ff:05:b5:91:ec:4c:51:fb:7b:e0:ec:75:98:
02:fe:08:9a:16:83:83:e3:b6:56:77:82:9e:ce:b1:18:45:9a:
fe:78:19:e5:eb:25:54:77:92:2c:fd:88:62:6d:91:66:6c:b9:
9c:d7:50:ac:d4:50:1b:2a:06:86:b9:78:09:39:bb:f3:68:24:
1a:e2:af:f1:58:ab:fa:db:e2:47:c0:f1:df:c8:03:fd:c6:5c:
8b:66:d2:cb:72:ad:de:fa:b4:fa:47:94:e9:e2:cd:dd:9f:53:
54:9d:98:1c:d8:35:a7:01:de:99:a2:f5:4b:f9:ae:df:ce:6b:
56:3a:ba:40:e2:66:1a:1f:b1:c8:26:c5:f1:e2:0f:cf:87:f6:
01:8f:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:41:37 2026 by rpki-client