Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: VUNN/bPK0cWxPf00Xnr4J+O8ovJ/+g7+khklXt+xNSg=
Subject key identifier: 3F:C0:3A:37:C5:22:D7:8F:67:90:1A:82:EB:46:85:85:D5:0F:6A:7C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 41E29D5E796AF879E260763FFA336000A3D1F572
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time: Fri 20 Jun 2025 00:02:54 +0000
ROA not before: Thu 19 Jun 2025 23:57:54 +0000
ROA not after: Fri 19 Jun 2026 00:02:54 +0000
asID: 174
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.85.0/24 maxlen: 24
46.202.86.0/24 maxlen: 24
46.203.18.0/24 maxlen: 24
46.203.31.0/24 maxlen: 24
46.203.33.0/24 maxlen: 24
46.203.35.0/24 maxlen: 24
46.203.46.0/24 maxlen: 24
46.203.55.0/24 maxlen: 24
46.203.57.0/24 maxlen: 24
46.203.61.0/24 maxlen: 24
46.203.72.0/24 maxlen: 24
46.203.75.0/24 maxlen: 24
46.203.78.0/24 maxlen: 24
46.203.81.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
91.124.17.0/24 maxlen: 24
91.124.36.0/24 maxlen: 24
91.124.68.0/22 maxlen: 22
91.124.72.0/22 maxlen: 22
91.124.76.0/22 maxlen: 22
91.124.84.0/22 maxlen: 22
91.124.92.0/22 maxlen: 22
91.124.96.0/22 maxlen: 22
91.124.100.0/22 maxlen: 22
91.124.104.0/22 maxlen: 22
91.124.108.0/22 maxlen: 22
91.124.160.0/24 maxlen: 24
91.124.161.0/24 maxlen: 24
91.124.162.0/24 maxlen: 24
91.124.163.0/24 maxlen: 24
91.124.176.0/24 maxlen: 24
91.124.196.0/24 maxlen: 24
91.124.197.0/24 maxlen: 24
91.124.198.0/24 maxlen: 24
91.124.204.0/24 maxlen: 24
91.124.205.0/24 maxlen: 24
91.124.206.0/24 maxlen: 24
91.124.212.0/22 maxlen: 22
91.124.224.0/22 maxlen: 22
92.112.65.0/24 maxlen: 24
92.112.66.0/24 maxlen: 24
92.112.104.0/24 maxlen: 24
92.112.105.0/24 maxlen: 24
92.112.108.0/24 maxlen: 24
92.112.109.0/24 maxlen: 24
92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.73.0/24 maxlen: 24
92.113.101.0/24 maxlen: 24
92.113.102.0/24 maxlen: 24
92.113.104.0/24 maxlen: 24
92.113.105.0/24 maxlen: 24
92.113.127.0/24 maxlen: 24
92.113.128.0/24 maxlen: 24
92.113.158.0/24 maxlen: 24
92.113.159.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
92.113.161.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e2:9d:5e:79:6a:f8:79:e2:60:76:3f:fa:33:60:00:a3:d1:f5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 19 23:57:54 2025 GMT
Not After : Jun 19 00:02:54 2026 GMT
Subject: CN=3FC03A37C522D78F67901A82EB468585D50F6A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:98:72:0c:bf:14:83:a4:22:2a:1a:e3:1f:
83:99:24:3c:c9:a9:ef:a0:72:5a:c4:91:84:7c:25:
3e:a2:5f:34:98:16:f5:65:91:fa:96:75:00:a7:b7:
72:4b:a2:7a:f3:5d:ea:79:69:aa:5a:ef:fb:76:97:
a8:f6:d4:61:e1:9d:08:7d:b2:7c:5c:1a:b3:a7:c2:
01:04:76:55:e8:eb:cc:79:61:4c:b0:0a:0c:6c:85:
1e:4a:eb:ed:0b:00:62:25:d6:d9:f9:e6:eb:d9:1f:
f5:e4:d0:6b:0f:6d:3e:e3:cc:7d:03:8a:7d:b2:1e:
55:23:bd:1c:1a:70:36:bb:60:a6:ee:b4:8a:4c:a7:
7f:3d:d7:3e:ef:bf:32:ee:c1:f4:b8:eb:e1:34:70:
3d:11:d5:50:3a:6c:3a:ec:50:df:c1:0d:57:79:15:
2a:c2:f5:97:e5:56:a6:f0:0a:b7:b4:6a:d9:5b:b4:
00:c0:24:b5:80:8e:db:44:5e:7d:c7:d2:32:73:ed:
71:0f:6f:de:fd:b4:12:c1:d3:76:0e:76:b0:6f:15:
d7:b7:e2:e6:0c:23:3f:8f:f5:32:07:8d:2d:7d:0c:
97:10:35:24:d8:70:e2:6a:4e:85:fe:67:21:77:0d:
ac:3a:bd:89:3d:58:ce:22:8c:f2:5e:d4:c8:25:47:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:3A:37:C5:22:D7:8F:67:90:1A:82:EB:46:85:85:D5:0F:6A:7C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.85.0-46.202.86.255
46.203.18.0/24
46.203.31.0/24
46.203.33.0/24
46.203.35.0/24
46.203.46.0/24
46.203.55.0/24
46.203.57.0/24
46.203.61.0/24
46.203.72.0/24
46.203.75.0/24
46.203.78.0/24
46.203.81.0/24
46.203.148.0/24
46.203.178.0/24
91.124.17.0/24
91.124.36.0/24
91.124.68.0-91.124.79.255
91.124.84.0/22
91.124.92.0-91.124.111.255
91.124.160.0/22
91.124.176.0/24
91.124.196.0-91.124.198.255
91.124.204.0-91.124.206.255
91.124.212.0/22
91.124.224.0/22
92.112.65.0-92.112.66.255
92.112.104.0/23
92.112.108.0/23
92.113.70.0-92.113.73.255
92.113.101.0-92.113.102.255
92.113.104.0/23
92.113.127.0-92.113.128.255
92.113.158.0-92.113.161.255
95.134.12.0/22
95.134.79.0-95.134.80.255
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.151.0/24
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.45.0/24
178.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
67:45:8e:82:22:4c:04:96:24:06:41:6e:9d:0b:45:5f:64:fb:
b2:8e:17:ef:11:f3:ab:a7:a6:f5:71:fb:1c:50:42:f5:dc:d7:
90:3d:ac:13:ec:a7:f4:d0:b7:49:f3:0c:2c:df:4d:f8:e8:3a:
dd:c9:05:2e:10:8f:5c:b8:fe:ee:fb:c5:fa:de:6b:ee:1c:d1:
30:57:49:f9:8d:d3:6b:9b:b4:f1:f1:c7:4e:2d:3f:47:bf:8c:
ee:34:6e:b0:35:08:16:c0:d8:09:4f:68:80:7b:0a:6b:04:19:
32:bf:96:ff:0d:4b:d8:11:12:bb:1a:93:b7:29:da:0a:4b:1b:
fd:21:25:ee:67:c5:98:69:16:a1:64:78:24:b7:46:8f:29:88:
37:c4:60:96:be:e8:83:56:28:0d:dd:ae:5c:05:ea:f2:19:29:
91:da:29:30:70:93:08:ab:7a:96:8f:90:de:ef:9d:4d:ad:43:
93:37:00:a5:41:ae:93:4e:64:28:6f:2c:00:f0:65:78:15:64:
5a:6a:73:71:8c:4f:83:38:6c:d8:f6:cf:26:f8:15:63:fd:a8:
de:02:b5:74:65:48:ad:38:f4:09:34:47:b0:9a:e5:8d:6e:32:
4e:47:ec:77:ab:3f:9e:e6:b2:5d:46:bf:56:28:c0:04:49:32:
2c:e0:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:55:19 2025 by rpki-client