Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 23ytgx6ItNd7BQxt2ghBUhQNYOT8NEgmP8ZmUzt7Sxs=
Subject key identifier: E7:36:67:EA:95:DA:BB:9F:5A:A0:E1:3F:4D:3B:4E:2F:C8:F3:A5:F1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6F15781A5250BB7866B079B0172DF4CCB4F5D398
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Fri 10 Jul 2026 09:23:04 +0000
ROA not before: Fri 10 Jul 2026 09:18:04 +0000
ROA not after: Fri 09 Jul 2027 09:23:04 +0000
asID: 174
IP address blocks: 51.194.247.0/24 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:15:78:1a:52:50:bb:78:66:b0:79:b0:17:2d:f4:cc:b4:f5:d3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 10 09:18:04 2026 GMT
Not After : Jul 9 09:23:04 2027 GMT
Subject: CN=E73667EA95DABB9F5AA0E13F4D3B4E2FC8F3A5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:4f:fd:33:a4:0f:4a:4a:70:7d:b8:3d:ff:
fb:e6:5b:99:87:cc:6c:93:0d:7a:73:7b:e8:6c:91:
25:f1:e7:e8:a0:fc:48:2c:e4:17:c5:08:83:c1:50:
72:a6:b4:d2:eb:d2:45:25:22:ac:28:94:50:ef:d2:
5a:50:5c:01:7b:37:6f:9d:a1:89:7e:9f:92:60:c7:
48:79:5a:7d:f8:ab:af:52:c0:a0:d7:1b:ab:4c:92:
75:8c:7c:d7:a0:be:75:62:95:fb:5e:c1:1b:32:69:
4e:65:8a:f3:e2:be:1c:74:8f:c6:e5:8e:e5:5a:1c:
1b:82:d7:dd:6a:50:73:69:53:2c:49:1d:bf:7d:e2:
76:15:33:ba:46:00:50:e4:63:e2:69:ac:49:8c:45:
2a:6e:fe:8f:b7:e1:ff:14:8e:ad:b3:73:03:ca:90:
1f:c9:7c:29:34:ad:3c:b8:e2:46:63:2f:2c:73:84:
af:05:4c:43:7c:97:a6:4d:72:f5:1a:45:44:b0:13:
25:29:f7:d9:38:ed:c8:1d:d3:83:8c:69:6b:5a:4a:
11:29:ba:ba:08:40:9b:86:03:20:88:aa:53:a6:9b:
aa:cd:7e:81:6b:68:46:af:fe:ae:b3:a2:fd:1b:1c:
47:f8:f6:d2:db:80:a0:54:b6:2a:3c:67:5d:c1:0c:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:67:EA:95:DA:BB:9F:5A:A0:E1:3F:4D:3B:4E:2F:C8:F3:A5:F1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.247.0/24
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:e2:5f:d5:2f:f1:54:82:cc:35:1e:f5:cd:45:71:a7:62:72:
36:56:60:97:e0:7d:bb:5d:06:aa:94:cf:78:b1:1a:7b:f7:41:
91:d9:fb:5d:3f:e8:8a:18:41:15:68:c0:71:d6:81:8c:5d:fd:
a9:e5:10:78:da:57:93:78:89:da:51:e0:8d:15:6d:95:ca:2d:
ae:3c:7b:84:5d:5e:cb:21:d9:2e:d3:14:d1:98:00:3c:8b:30:
6b:49:b7:da:47:81:f2:8c:03:8a:91:aa:ef:48:9a:84:55:da:
96:05:58:51:07:bb:5b:cd:f0:c1:4a:66:4e:6e:b1:d5:50:33:
a8:f0:ca:75:02:f2:f6:2f:bd:e9:55:af:40:36:f9:24:c2:4a:
d3:aa:8c:4a:6f:f2:2e:54:24:45:75:ab:6c:8e:8d:af:5f:18:
cb:0d:6f:dc:7a:75:d3:2a:f1:d4:52:88:31:b4:33:3f:c4:37:
ef:48:de:ab:5f:c0:92:aa:a9:d7:70:2d:0d:1a:cb:c0:41:65:
a6:38:a0:7e:be:85:16:e9:45:e6:75:56:e6:16:b8:8c:27:e2:
99:5e:16:49:88:30:97:4e:13:1c:5a:3e:4f:8d:1b:d0:1e:b9:
6b:1e:3b:37:8a:db:03:0c:0f:0c:a3:08:0e:78:3d:09:9f:35:
da:44:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:03 2026 by rpki-client