Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 2RiqxE3gY3tKvrU8c9LhUKJq25p5mC3bG8CcZdJPUi4=
Subject key identifier: D5:F8:BE:A9:1B:89:C4:A2:1D:C0:EA:C6:9A:D7:07:84:D8:6B:26:5A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 207CBA4A12210F3FE09EED56E7477A681CB1C7C9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time: Thu 03 Jul 2025 13:26:42 +0000
ROA not before: Thu 03 Jul 2025 13:21:42 +0000
ROA not after: Thu 02 Jul 2026 13:26:42 +0000
asID: 174
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.85.0/24 maxlen: 24
46.202.86.0/24 maxlen: 24
46.203.18.0/24 maxlen: 24
46.203.31.0/24 maxlen: 24
46.203.33.0/24 maxlen: 24
46.203.35.0/24 maxlen: 24
46.203.46.0/24 maxlen: 24
46.203.55.0/24 maxlen: 24
46.203.57.0/24 maxlen: 24
46.203.61.0/24 maxlen: 24
46.203.72.0/24 maxlen: 24
46.203.75.0/24 maxlen: 24
46.203.78.0/24 maxlen: 24
46.203.81.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
91.124.17.0/24 maxlen: 24
91.124.36.0/24 maxlen: 24
91.124.68.0/22 maxlen: 22
91.124.72.0/22 maxlen: 22
91.124.76.0/22 maxlen: 22
91.124.84.0/22 maxlen: 22
91.124.92.0/22 maxlen: 22
91.124.96.0/22 maxlen: 22
91.124.100.0/22 maxlen: 22
91.124.104.0/22 maxlen: 22
91.124.108.0/22 maxlen: 22
91.124.160.0/24 maxlen: 24
91.124.161.0/24 maxlen: 24
91.124.162.0/24 maxlen: 24
91.124.163.0/24 maxlen: 24
91.124.176.0/24 maxlen: 24
91.124.196.0/24 maxlen: 24
91.124.197.0/24 maxlen: 24
91.124.198.0/24 maxlen: 24
91.124.204.0/24 maxlen: 24
91.124.205.0/24 maxlen: 24
91.124.206.0/24 maxlen: 24
91.124.212.0/22 maxlen: 22
91.124.224.0/22 maxlen: 22
92.112.65.0/24 maxlen: 24
92.112.66.0/24 maxlen: 24
92.112.104.0/24 maxlen: 24
92.112.105.0/24 maxlen: 24
92.112.108.0/24 maxlen: 24
92.112.109.0/24 maxlen: 24
92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.73.0/24 maxlen: 24
92.113.101.0/24 maxlen: 24
92.113.102.0/24 maxlen: 24
92.113.104.0/24 maxlen: 24
92.113.105.0/24 maxlen: 24
92.113.127.0/24 maxlen: 24
92.113.128.0/24 maxlen: 24
92.113.158.0/24 maxlen: 24
92.113.159.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
92.113.161.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.63.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7c:ba:4a:12:21:0f:3f:e0:9e:ed:56:e7:47:7a:68:1c:b1:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 3 13:21:42 2025 GMT
Not After : Jul 2 13:26:42 2026 GMT
Subject: CN=D5F8BEA91B89C4A21DC0EAC69AD70784D86B265A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:a6:ee:68:3b:24:e6:a7:30:82:ba:4a:8a:
64:30:0a:35:cd:58:b6:f9:e0:8a:47:00:85:f2:7a:
e8:0d:c0:bf:69:40:aa:c3:5c:a8:79:e3:e2:2d:f7:
40:18:e6:85:e4:0f:30:42:78:01:c4:b5:a4:e3:33:
32:12:d5:78:3e:5c:92:1a:e6:b6:8a:a0:02:59:02:
40:76:7d:7c:de:10:26:15:fc:46:4f:bd:d7:73:09:
a7:4c:84:50:3f:fd:c2:05:b8:42:4d:b5:75:b7:e7:
b5:da:ea:65:18:1b:12:99:6e:39:14:24:31:9e:33:
8c:a0:f4:91:3f:d5:94:da:de:94:ac:bb:cf:5b:1d:
bd:ad:45:92:4e:22:49:a9:e7:e2:f7:c1:f5:cf:1a:
d3:0b:23:77:a4:54:10:44:5f:90:7f:19:0d:cb:58:
97:16:bf:83:22:c6:3b:55:bf:19:b4:47:9d:37:cb:
e7:7d:d4:5e:87:e8:ca:cf:c7:74:07:71:89:84:a0:
f1:c4:bf:62:4a:b1:12:82:8c:b3:99:91:9c:05:5b:
40:43:2c:d5:fc:f2:f4:78:39:87:65:2d:2d:99:6a:
af:20:f1:92:b0:fe:9f:7e:5d:bd:6f:1d:2c:5f:f7:
66:0c:78:d5:32:3b:3e:4f:31:22:da:22:1d:f6:db:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:BE:A9:1B:89:C4:A2:1D:C0:EA:C6:9A:D7:07:84:D8:6B:26:5A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.85.0-46.202.86.255
46.203.18.0/24
46.203.31.0/24
46.203.33.0/24
46.203.35.0/24
46.203.46.0/24
46.203.55.0/24
46.203.57.0/24
46.203.61.0/24
46.203.72.0/24
46.203.75.0/24
46.203.78.0/24
46.203.81.0/24
46.203.148.0/24
46.203.178.0/24
91.124.17.0/24
91.124.36.0/24
91.124.68.0-91.124.79.255
91.124.84.0/22
91.124.92.0-91.124.111.255
91.124.160.0/22
91.124.176.0/24
91.124.196.0-91.124.198.255
91.124.204.0-91.124.206.255
91.124.212.0/22
91.124.224.0/22
92.112.65.0-92.112.66.255
92.112.104.0/23
92.112.108.0/23
92.113.70.0-92.113.73.255
92.113.101.0-92.113.102.255
92.113.104.0/23
92.113.127.0-92.113.128.255
92.113.158.0-92.113.161.255
95.134.12.0/22
95.134.63.0/24
95.134.79.0-95.134.80.255
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.151.0/24
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.45.0/24
178.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4f:4e:57:81:95:72:2c:4d:71:ef:b3:98:00:56:e8:16:db:
fe:cb:fc:36:f4:5a:bd:98:31:06:93:cb:0a:07:bf:56:dd:d4:
c9:9e:8f:a8:3d:44:f0:12:27:02:a9:1e:4c:a3:11:02:ab:b6:
18:4e:ad:96:95:6d:52:d2:bb:c8:a3:2e:f0:0b:f0:a0:1a:f8:
7b:1d:35:96:de:4b:1d:86:0b:46:a0:34:b5:d1:bd:a9:d0:1e:
95:24:e4:0b:98:6a:82:dc:9f:d9:6c:b5:23:00:38:ba:2e:1e:
f7:a2:a0:e1:2a:93:a3:23:26:e4:b9:31:52:91:76:86:13:b9:
e2:a4:df:ad:f0:de:51:81:58:ed:83:e5:7d:45:ce:a0:61:cf:
6d:52:8e:8f:70:ba:96:a1:b9:76:00:09:2e:75:34:74:0f:41:
f7:56:d5:a4:50:bd:36:c0:42:83:6a:eb:99:17:7e:1d:b1:e7:
55:59:6e:97:4d:31:65:45:d7:86:b3:d8:47:39:87:a8:69:11:
ec:f8:b1:d1:31:3b:90:3d:82:86:68:f7:02:b0:b2:b2:9e:cc:
03:7a:50:df:91:80:e7:bd:ff:2c:f4:b9:3d:66:1f:a5:b1:b3:
d2:fe:f6:a3:f8:8b:9b:ad:b7:53:9c:b1:71:2a:9f:a6:8e:88:
b7:eb:64:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:29 2025 by rpki-client