Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 2djKYjbj1g1WwNYjclBttAFGiu4SSKkHBMm7G8an7sU=
Subject key identifier: A1:90:24:98:A4:F5:CD:B4:6D:89:91:F9:42:9B:29:77:9D:60:E7:35
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 29F394488818A164AFD665ECE0B5B75676DBB658
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
Signing time: Sun 04 Oct 2026 23:23:12 +0000
ROA not before: Sun 04 Oct 2026 23:18:12 +0000
ROA not after: Sun 03 Oct 2027 23:23:12 +0000
asID: 174
IP address blocks: 82.47.24.0/23 maxlen: 24
82.47.190.0/24 maxlen: 24
82.47.208.0/24 maxlen: 24
82.47.224.0/24 maxlen: 24
82.47.225.0/24 maxlen: 24
82.47.228.0/24 maxlen: 24
2a13:9500:1e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f3:94:48:88:18:a1:64:af:d6:65:ec:e0:b5:b7:56:76:db:b6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 4 23:18:12 2026 GMT
Not After : Oct 3 23:23:12 2027 GMT
Subject: CN=A1902498A4F5CDB46D8991F9429B29779D60E735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:38:c6:23:46:2e:41:ca:f9:7c:ed:d9:aa:
f0:71:76:99:ad:43:23:ca:85:d9:04:ec:2e:ce:fd:
34:15:45:cb:60:9f:fe:6f:16:22:36:8e:d7:6f:5e:
bb:b3:bf:83:eb:e6:72:fe:a0:c6:c0:bf:83:90:c0:
f2:42:3d:a2:1b:23:cd:a1:31:54:70:11:3f:7b:9c:
ac:20:c7:3f:1c:ce:09:10:1f:36:42:0d:0b:0d:df:
fe:fe:fb:d6:7d:02:2b:4d:61:03:6e:7e:21:7c:61:
50:1a:b6:35:e1:dc:0b:4f:13:b2:da:0d:1f:fc:06:
c4:db:f0:53:dd:f1:b9:82:44:2a:5c:83:98:f3:73:
1c:06:d6:8d:76:2a:18:d3:0c:33:2a:07:f9:ca:26:
9e:f6:fe:9a:95:9f:50:b8:b1:b5:42:1e:7b:63:2b:
1f:37:9f:72:83:15:00:80:86:01:36:cc:bc:82:c5:
ed:9f:62:6a:c8:74:a4:d3:7e:8b:c7:4b:31:1a:bb:
ca:29:fa:c0:da:8f:14:10:14:6c:76:fc:df:35:ee:
70:f0:ce:21:82:e5:f3:9b:f7:ea:28:c0:f6:24:3a:
a7:e2:cf:1d:b6:5e:34:85:ea:9d:5b:68:8b:ac:48:
dc:e8:ba:60:a1:db:81:b1:3d:71:4a:59:61:55:24:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:90:24:98:A4:F5:CD:B4:6D:89:91:F9:42:9B:29:77:9D:60:E7:35
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.24.0/23
82.47.190.0/24
82.47.208.0/24
82.47.224.0/23
82.47.228.0/24
IPv6:
2a13:9500:1e8::/48
Signature Algorithm: sha256WithRSAEncryption
83:8a:4d:6b:bb:92:8f:38:76:31:40:c8:58:9a:b9:07:90:63:
56:70:0c:46:0c:e9:d4:fa:b0:62:c5:24:f7:90:fe:ed:ad:8d:
e9:df:95:0a:1f:be:2b:d3:01:2d:23:5f:7e:d0:97:a1:ae:9f:
45:3b:4a:96:7f:2f:aa:a0:3f:88:ad:1e:91:cc:aa:b0:10:8c:
2b:a3:4b:fc:ef:c2:94:b0:c1:75:bd:e6:34:05:b8:1e:73:d2:
38:33:ca:fc:0b:91:4f:21:15:c0:d1:52:58:e0:34:0b:f2:09:
bd:2f:42:56:d4:39:d8:09:e9:81:cb:61:27:6d:d6:ba:94:a9:
f3:62:ec:35:0d:3a:56:00:b0:fa:f2:fe:3b:c5:07:55:25:c2:
d9:57:b2:41:8b:97:89:ef:27:4e:1c:da:6c:45:04:69:6a:74:
22:dd:9b:af:7d:48:a2:cf:5c:e4:8e:01:1d:07:17:9b:b8:67:
a9:26:18:85:d9:60:0f:da:86:96:b8:10:fc:d2:09:36:3b:98:
7e:cf:48:bd:fb:b4:93:cc:66:e0:9c:8c:2f:8e:08:39:13:37:
ce:42:64:c8:6d:7e:b0:50:3e:11:16:2b:1b:e4:bf:c8:14:74:
a1:36:8c:57:a7:9b:9a:94:83:b0:f2:b1:29:73:66:bb:f5:ab:
61:6f:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:52:48 2026 by rpki-client