Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: oUsldH4UzD/yX8KIn8eh8wsfDrD4879eSCsvaVVfGNE=
Subject key identifier: 9D:2E:0F:FA:1D:78:F1:DB:25:D0:A7:DA:47:F6:3B:C9:2E:27:A7:3F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26C740E18D0BB5CDFD16EA983B5EF1A58CE04EEE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Fri 16 Oct 2026 18:02:02 +0000
ROA not before: Fri 16 Oct 2026 17:57:02 +0000
ROA not after: Fri 15 Oct 2027 18:02:02 +0000
asID: 174
IP address blocks: 51.194.191.0/24 maxlen: 24
51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
94.118.27.0/24 maxlen: 24
94.118.108.0/24 maxlen: 24
94.194.104.0/22 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
188.221.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c7:40:e1:8d:0b:b5:cd:fd:16:ea:98:3b:5e:f1:a5:8c:e0:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 16 17:57:02 2026 GMT
Not After : Oct 15 18:02:02 2027 GMT
Subject: CN=9D2E0FFA1D78F1DB25D0A7DA47F63BC92E27A73F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:95:9b:96:b7:9e:bf:4e:54:83:97:c1:58:
cf:10:21:6d:3c:2f:93:30:5d:60:1b:37:b0:28:40:
f3:ce:4b:c2:41:5d:f4:27:3b:92:73:12:c7:4f:57:
1c:cb:8d:a3:a9:01:0f:c4:b2:58:1f:8d:cb:e1:8e:
55:10:0c:8d:f6:3c:99:3d:7b:f2:f4:68:14:8c:39:
c3:e3:4d:da:b0:51:2f:62:81:a7:e3:25:44:4a:3d:
93:ec:f4:50:ee:8c:c1:a3:c6:3e:ab:b0:14:a4:e4:
d9:af:42:13:df:ba:f4:1f:9a:71:8d:d0:02:77:e2:
a0:03:90:8a:aa:e6:d2:16:e8:29:8a:55:47:a6:0b:
c1:92:56:a4:81:2b:e0:28:5d:b8:9b:1b:32:45:b2:
79:d4:f5:d1:63:b7:f8:41:08:7e:dc:1b:50:d4:2d:
e2:77:c6:42:2e:ae:27:b9:c2:6a:48:c3:48:85:b2:
0e:b1:b6:3e:56:6c:9d:2d:cd:b7:7a:7a:65:26:e1:
35:1f:b2:fd:95:9e:de:2b:92:e3:43:14:f5:25:24:
a1:99:87:d0:42:37:6a:67:2b:cd:d6:1e:d4:2d:fc:
aa:67:e0:55:d2:5b:c4:9b:8a:c3:72:f8:fa:cb:9d:
5e:9e:3e:8b:cd:47:17:d1:0d:24:a5:e0:b2:8b:79:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:0F:FA:1D:78:F1:DB:25:D0:A7:DA:47:F6:3B:C9:2E:27:A7:3F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.191.0-51.194.192.255
51.194.207.0/24
94.118.27.0/24
94.118.108.0/24
94.194.104.0/22
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
188.221.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e9:ab:44:d3:57:50:95:7c:f1:af:99:b4:e0:cd:b1:e0:c2:
06:b0:ea:20:c0:8b:a3:d3:c0:4a:86:6e:53:5e:5c:a8:96:a6:
67:e9:09:e7:05:4e:b6:75:39:79:78:26:a9:12:0a:20:63:dd:
fe:b9:4b:ae:fa:b6:ee:73:34:af:e8:02:88:13:d1:33:21:6b:
cb:d9:91:06:3d:59:e6:88:01:06:fb:c6:46:68:3e:dc:43:f7:
c4:9f:a3:60:a4:3d:da:c8:b0:60:c1:a5:63:fe:e4:51:0f:c0:
26:d1:22:63:2a:c7:dd:0a:ac:47:5f:be:b4:b7:01:a2:57:16:
2c:ff:76:33:47:84:0f:58:a1:92:0e:03:bf:76:07:cd:7a:d7:
9b:bc:31:a1:42:76:7e:40:78:8a:6b:a2:62:41:95:59:31:d8:
c7:fe:07:35:5c:a9:0b:d1:22:d8:87:bf:b8:d5:da:eb:be:23:
02:f6:10:51:9b:80:72:ea:f7:1e:56:26:16:0b:cc:58:56:68:
e2:6b:7e:c4:00:4e:60:fa:3d:e2:2a:01:a7:86:5b:76:f3:a1:
ff:71:97:a9:0d:0e:74:fe:ed:fc:d9:15:fe:af:2b:b0:3f:30:
63:ff:6b:55:db:4e:7e:4e:d8:0b:8b:16:9c:dd:7d:4e:db:b3:
80:50:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:13:54 2026 by rpki-client