Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: Ak6wy3VlEsY8SQ5wwH98aTPyO95tGFX//b6LLMi9bhA=
Subject key identifier: 31:E7:8F:68:41:C6:F2:B4:97:F4:B6:C4:07:1F:F4:B3:D0:A5:3C:14
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 70134D5CA51186D60CF3847496471EC84FD29C36
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time: Thu 16 Oct 2025 00:08:15 +0000
ROA not before: Thu 16 Oct 2025 00:03:15 +0000
ROA not after: Thu 15 Oct 2026 00:08:15 +0000
asID: 174
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.85.0/24 maxlen: 24
46.202.86.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
91.124.17.0/24 maxlen: 24
91.124.68.0/22 maxlen: 22
91.124.72.0/22 maxlen: 22
91.124.76.0/22 maxlen: 22
91.124.84.0/22 maxlen: 22
91.124.92.0/22 maxlen: 22
91.124.96.0/22 maxlen: 22
91.124.100.0/22 maxlen: 22
91.124.104.0/22 maxlen: 22
91.124.108.0/22 maxlen: 22
91.124.212.0/22 maxlen: 22
91.124.224.0/22 maxlen: 22
92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.73.0/24 maxlen: 24
92.113.101.0/24 maxlen: 24
92.113.102.0/24 maxlen: 24
92.113.104.0/24 maxlen: 24
92.113.105.0/24 maxlen: 24
92.113.158.0/24 maxlen: 24
92.113.159.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
92.113.161.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.63.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.94.127.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:13:4d:5c:a5:11:86:d6:0c:f3:84:74:96:47:1e:c8:4f:d2:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 16 00:03:15 2025 GMT
Not After : Oct 15 00:08:15 2026 GMT
Subject: CN=31E78F6841C6F2B497F4B6C4071FF4B3D0A53C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:4b:e9:7b:6f:36:72:cd:7a:84:98:f1:a7:
b8:90:6a:c5:63:28:ec:b4:f8:d6:7e:75:9e:ad:4f:
ce:4a:a0:38:6d:11:eb:18:8a:68:13:f8:63:55:16:
58:84:55:97:3e:b6:54:1e:24:e4:03:ca:b3:b8:75:
f1:06:a1:bc:9c:f5:6e:42:8a:06:83:e9:d7:ed:9e:
43:6a:e7:4b:29:8f:ea:58:31:59:b7:e9:15:13:94:
37:90:db:ac:9e:50:83:0c:7d:0e:15:70:b3:d1:4b:
bb:66:25:fc:a4:09:f2:b1:f6:b4:9b:d6:77:66:7a:
dc:b2:43:fd:8d:bb:06:f0:69:7b:67:71:8a:92:68:
86:d6:c5:41:e7:ac:65:9e:7a:61:84:a2:50:a7:01:
b0:1c:2f:1f:b4:38:0b:1b:b4:a3:f9:49:80:63:f1:
f2:53:b0:2e:73:47:d0:b0:7e:79:1d:84:12:b6:62:
c0:f0:9f:2e:55:f8:2b:ac:bd:c0:cf:2e:be:a0:80:
36:29:83:1c:51:7c:74:cb:0b:31:71:d5:4a:52:26:
e2:f6:cc:b5:d9:55:20:5d:73:19:e9:ef:e4:3e:51:
3a:20:78:9a:c8:e2:95:4a:d8:f6:d1:2a:c9:6c:4b:
14:92:79:00:5e:1c:f0:43:51:bf:fb:a6:4d:93:71:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:8F:68:41:C6:F2:B4:97:F4:B6:C4:07:1F:F4:B3:D0:A5:3C:14
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.85.0-46.202.86.255
46.203.148.0/24
46.203.178.0/24
91.124.17.0/24
91.124.68.0-91.124.79.255
91.124.84.0/22
91.124.92.0-91.124.111.255
91.124.212.0/22
91.124.224.0/22
92.113.70.0-92.113.73.255
92.113.101.0-92.113.102.255
92.113.104.0/23
92.113.158.0-92.113.161.255
95.134.12.0/22
95.134.63.0/24
95.134.79.0-95.134.80.255
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.151.0/24
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.45.0/24
178.94.127.0/24
178.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b3:e6:d5:a2:29:b5:4b:92:f9:b5:47:3f:0e:60:23:d2:83:
e1:c7:cf:a8:b8:57:40:3a:eb:67:b9:7f:38:2b:e4:08:74:6c:
b4:a2:9c:ad:86:5c:39:f4:d0:0b:53:b5:2c:4a:49:d9:dc:c9:
5c:b0:1c:fd:bb:ab:c1:07:8f:73:9a:92:4e:49:fe:bd:df:72:
e7:bb:1f:29:bd:5e:65:13:6f:9a:c9:ba:e5:2a:4e:8b:c3:31:
81:c4:86:fc:0d:29:3f:5a:84:4f:d7:ad:68:d4:50:99:d4:49:
93:25:53:fd:31:26:a0:74:2c:c0:8a:21:e6:cb:1f:2b:9e:e0:
b8:e6:4a:e7:b8:a4:8b:0f:ea:a0:fb:6d:44:bb:f2:01:d4:1b:
b0:7a:11:3b:7a:cf:5c:48:a0:69:86:ad:9f:73:07:d2:7c:6a:
f5:09:d8:59:4f:90:93:88:d2:bc:ac:b8:50:6b:87:8e:d5:28:
1e:ee:af:2b:79:04:0b:2b:1f:46:03:5a:a1:9d:22:9d:ea:fa:
e1:cb:8d:00:ec:99:a0:d6:7e:30:c1:22:61:c6:c2:0d:16:28:
9f:37:01:1f:28:2f:08:30:88:55:11:4a:ec:20:4b:4b:49:ed:
0a:8a:45:4b:f9:7a:7d:68:20:f4:44:d0:68:71:b6:16:35:3c:
d7:e6:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:39:39 2025 by rpki-client