Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: w366f7GDxKVKeFG1W71sDtFSoBS2xM7+Kwao7DRSIcU=
Subject key identifier: 58:50:EC:82:EC:66:3C:BE:72:17:41:75:D1:07:B9:11:7E:E3:75:34
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 79A9BFF4028D69C44B552F98BCD421DDF8078507
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Fri 06 Nov 2026 10:03:01 +0000
ROA not before: Fri 06 Nov 2026 09:58:01 +0000
ROA not after: Fri 05 Nov 2027 10:03:01 +0000
asID: 174
IP address blocks: 51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
94.194.104.0/22 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
188.221.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a9:bf:f4:02:8d:69:c4:4b:55:2f:98:bc:d4:21:dd:f8:07:85:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 6 09:58:01 2026 GMT
Not After : Nov 5 10:03:01 2027 GMT
Subject: CN=5850EC82EC663CBE72174175D107B9117EE37534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:c4:bd:09:75:6c:56:c4:a3:16:1b:68:de:
f9:d3:0a:3b:48:a3:b2:9f:e7:ba:cc:f5:a5:56:7a:
6c:7b:c3:b4:8d:4c:6c:6a:c7:08:22:4d:fd:80:22:
12:ec:41:2c:25:26:ec:70:30:0a:83:95:29:63:58:
e2:d7:19:07:f5:2a:9a:e7:d1:cd:10:2c:a3:c9:46:
a9:d0:7a:be:49:5c:eb:e8:5b:64:5a:e6:fd:09:71:
12:66:bb:93:96:52:77:69:cc:b2:32:66:04:16:ba:
69:0f:ef:ea:e5:a3:b5:86:ca:29:7b:a2:04:d9:24:
8c:97:32:28:c7:ec:d9:d8:00:f6:cc:9a:c1:af:59:
ab:fe:fd:51:34:cd:fd:a1:03:c6:93:1c:5e:ed:27:
09:bd:f5:47:2e:0a:81:af:9c:cd:27:41:0b:eb:95:
f0:5d:b5:e6:34:b0:38:73:a2:2f:0c:17:54:ce:1f:
6c:11:cc:78:ca:9e:e8:66:29:4f:45:43:12:ac:95:
4e:ff:7d:5a:be:6b:5a:3c:78:14:fd:00:e2:cb:00:
f1:11:3f:4d:15:c1:8f:9d:2f:13:05:84:90:06:39:
b5:2c:b3:ba:70:09:71:3e:1a:aa:53:c1:28:f5:ea:
36:b4:7c:56:0c:44:47:69:a3:f6:2b:89:5c:65:6a:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:EC:82:EC:66:3C:BE:72:17:41:75:D1:07:B9:11:7E:E3:75:34
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.192.0/24
51.194.207.0/24
94.194.104.0/22
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
188.221.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f9:cb:5c:24:bd:7b:e3:33:31:19:4f:cf:16:8c:5d:b4:c1:
d2:14:ea:66:4f:2d:b2:8b:b9:a5:09:4b:8b:da:52:fd:49:b5:
b2:5d:f3:c6:d5:9f:e0:ae:7b:d2:60:5e:58:8d:41:bc:f3:a9:
1f:c3:6c:5a:23:23:da:32:3b:de:ec:0b:e1:e5:db:13:93:13:
6d:8f:01:cb:27:25:fc:cd:c3:da:c2:b9:de:0a:f1:90:e1:b7:
ca:2f:9a:fe:a3:db:58:29:ef:1f:90:44:33:ed:18:68:57:b2:
14:39:2e:03:a5:37:cb:36:f5:90:dc:93:6d:e7:93:e2:1d:97:
e9:ac:a2:0f:9e:e4:43:51:24:1a:b8:8f:52:72:3b:00:ca:81:
bb:4b:95:55:9e:df:0c:da:8f:9e:39:2b:16:31:03:ba:00:4d:
3c:9d:3c:59:e3:07:f6:e4:6f:5a:de:4c:93:3b:eb:57:66:8a:
c1:82:5b:bd:b5:ff:38:c6:09:bc:a7:7b:69:50:2e:bf:8a:ef:
b5:48:d4:f9:a7:29:a6:8f:44:8b:4f:94:2b:48:22:cd:d9:aa:
e5:62:6c:1a:63:ce:76:d7:3c:b7:b0:4f:db:48:ce:f5:a4:fd:
e8:91:96:48:0e:f6:38:25:94:fe:f4:78:b3:2c:e4:f8:a6:66:
da:51:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:12:45 2026 by rpki-client