Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: zgUH3S1vYEXtXokQIHLv3nK3IRRRfqgjsNI609eUaJI=
Subject key identifier: B9:17:12:11:CA:51:E4:03:E9:56:27:8E:18:09:C0:6A:F4:45:A7:D8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6BC6767381E774CB5C7DFC93366CE32BCDD51422
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time: Tue 24 Mar 2026 00:04:53 +0000
ROA not before: Mon 23 Mar 2026 23:59:53 +0000
ROA not after: Tue 23 Mar 2027 00:04:53 +0000
asID: 174
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.85.0/24 maxlen: 24
46.202.86.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
91.124.17.0/24 maxlen: 24
91.124.68.0/22 maxlen: 22
91.124.72.0/22 maxlen: 22
91.124.76.0/22 maxlen: 22
91.124.100.0/22 maxlen: 22
91.124.104.0/22 maxlen: 22
91.124.108.0/22 maxlen: 22
91.124.212.0/22 maxlen: 22
91.124.224.0/22 maxlen: 22
92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.63.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.94.127.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c6:76:73:81:e7:74:cb:5c:7d:fc:93:36:6c:e3:2b:cd:d5:14:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 23 23:59:53 2026 GMT
Not After : Mar 23 00:04:53 2027 GMT
Subject: CN=B9171211CA51E403E956278E1809C06AF445A7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:86:b0:f9:21:c8:6d:93:a3:c6:89:ca:ca:
a0:3c:43:46:c5:13:31:80:70:7b:ec:a8:67:1e:f0:
fb:e5:68:f2:ce:59:c7:47:06:86:3a:b0:6a:c7:ea:
eb:6d:58:35:39:90:d6:7d:2b:da:a8:c6:89:52:ce:
06:f8:c5:21:30:11:fc:9c:4c:e4:c8:65:13:ad:fc:
36:63:d0:3c:7d:9a:db:a9:a8:80:d2:76:da:a9:0b:
ef:c4:ae:0f:e4:0b:61:4b:82:ba:60:f7:65:c4:34:
74:c8:bd:38:14:d8:6d:31:ee:14:4c:75:7a:e0:32:
c4:f0:45:5d:bd:ae:d0:09:6f:b6:46:f5:00:87:51:
27:41:dd:6e:85:69:ef:13:6c:85:85:ac:ba:79:21:
ce:a0:6c:9a:5d:15:5d:d6:49:16:c3:b8:89:25:69:
32:f4:8e:90:6c:00:54:24:82:1e:9b:ee:67:a4:85:
f1:0b:bd:d7:0d:1e:1a:3e:22:5d:4f:aa:99:7c:9a:
b4:9d:ce:f7:44:3b:ca:b0:a7:cb:ea:b3:18:16:a6:
ce:9c:be:1f:94:d5:4b:3a:de:b1:82:d2:e4:9d:6f:
76:ec:85:8d:ae:43:ef:a3:35:50:15:e8:63:20:7a:
6c:6b:96:7e:2c:8f:65:49:5b:f2:bd:2a:5d:72:2c:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:12:11:CA:51:E4:03:E9:56:27:8E:18:09:C0:6A:F4:45:A7:D8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.85.0-46.202.86.255
46.203.148.0/24
46.203.178.0/24
91.124.17.0/24
91.124.68.0-91.124.79.255
91.124.100.0-91.124.111.255
91.124.212.0/22
91.124.224.0/22
92.113.70.0-92.113.72.255
92.113.160.0/24
95.134.12.0/22
95.134.63.0/24
95.134.79.0-95.134.80.255
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.151.0/24
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.45.0/24
178.94.127.0/24
178.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a2:56:fb:b2:bb:3c:bf:54:0e:bf:06:49:bd:b5:b8:32:8b:
e1:8c:27:30:23:9d:e9:ee:33:a8:3b:96:40:85:5a:b6:7e:a4:
1f:e8:bf:05:09:fe:ab:1e:00:ee:cb:53:01:df:ac:00:41:5e:
33:f2:e1:c4:f0:30:f9:ed:21:d2:78:2c:c4:f1:66:6d:ac:5b:
63:00:64:16:aa:6f:48:e8:2e:d7:f8:e3:37:11:b9:90:d3:a3:
96:48:93:fa:02:6b:19:e8:b0:04:35:9c:47:75:4f:ce:a0:13:
d5:19:a9:6f:4f:fb:97:a6:c3:e4:b5:c9:d4:9b:0c:15:9a:13:
f2:03:34:a4:be:ee:14:70:92:b8:21:2f:86:b7:c9:9a:96:53:
2b:4d:ef:4a:63:ec:d0:5e:93:8f:d8:17:97:5d:b9:8f:af:4d:
8c:f6:7a:b8:47:08:b3:20:24:a2:82:26:ff:ce:f8:de:d7:06:
15:7b:2d:6f:83:6d:0b:df:bc:05:2e:01:93:51:18:c8:78:35:
f9:1b:9b:ac:a8:75:4a:95:76:b9:f8:a6:c5:60:5d:f1:74:da:
11:77:55:d4:fd:d3:b6:24:91:99:f6:81:24:3a:59:ed:cb:d1:
7c:9b:ac:9c:bb:a8:c3:e4:44:84:d6:67:24:1a:d6:4f:b6:52:
58:7a:20:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:41:59 2026 by rpki-client