Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: emkybcUOP7mXyXUP8EkhnVHXE5wFezPALIrQeEBfrag=
Subject key identifier: 11:46:EE:7E:AD:1D:16:03:EA:42:D3:74:AD:E8:93:F4:2E:AE:DB:E3
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 033F0E39C240F8F1552F319E4D3C0CF7A20A56B2
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
Signing time: Sun 04 Oct 2026 23:23:13 +0000
ROA not before: Sun 04 Oct 2026 23:18:13 +0000
ROA not after: Sun 03 Oct 2027 23:23:13 +0000
asID: 174
IP address blocks: 46.236.240.0/24 maxlen: 24
82.139.205.0/24 maxlen: 24
82.139.207.0/24 maxlen: 24
82.139.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3f:0e:39:c2:40:f8:f1:55:2f:31:9e:4d:3c:0c:f7:a2:0a:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 4 23:18:13 2026 GMT
Not After : Oct 3 23:23:13 2027 GMT
Subject: CN=1146EE7EAD1D1603EA42D374ADE893F42EAEDBE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:26:44:41:e1:50:64:96:14:6f:7b:4e:20:
4b:fc:17:b0:63:87:ba:b6:b8:fa:7f:33:16:88:52:
5b:ae:97:75:70:69:4f:63:86:61:8a:9b:c7:2e:94:
6b:cf:37:73:ee:3e:d7:33:dd:cf:a2:31:90:ce:c3:
ec:c3:4c:79:43:8b:d3:9e:a8:13:05:08:89:f4:cf:
87:5c:93:e9:50:0d:4d:49:61:c5:33:16:2f:dc:94:
1f:46:b4:dc:d9:13:38:4c:85:0c:a5:b4:93:7e:8f:
49:9f:c6:ed:96:27:71:5e:b0:3b:5d:b0:4a:a9:45:
cd:14:26:ae:ab:29:71:9d:5b:7b:af:ab:a2:a5:3d:
a3:87:1b:a0:6f:ef:3b:9a:2d:2c:b0:ba:72:c8:7f:
5c:ff:d2:ce:a0:98:36:b9:4d:f8:33:16:95:61:cd:
71:48:c1:8a:0d:29:26:1e:65:c3:11:ac:c9:ea:6f:
5d:09:32:90:91:26:92:11:fe:d8:7a:13:ce:3f:a9:
42:c4:7a:38:0b:26:71:c7:c0:34:4d:0b:30:01:20:
04:98:e7:04:50:b0:d0:98:6f:c5:88:f1:30:38:66:
67:62:be:0b:26:5a:d5:b8:70:bd:fc:e1:d6:14:53:
78:3d:b9:ce:69:9c:6d:de:d3:a2:45:b4:13:e6:fe:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:EE:7E:AD:1D:16:03:EA:42:D3:74:AD:E8:93:F4:2E:AE:DB:E3
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.240.0/24
82.139.205.0/24
82.139.207.0/24
82.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b4:83:69:f6:4b:6b:6c:80:d3:2e:15:e7:bc:91:34:31:8e:
9c:7e:54:53:25:4a:39:09:6f:44:da:04:ca:22:46:9d:d6:4c:
a1:b2:6c:13:0a:c6:55:fb:c4:28:21:77:95:8c:71:b2:27:f5:
96:1f:7e:c9:2d:86:b2:27:90:cf:b7:8e:4e:28:83:b4:e6:00:
11:e3:61:16:d0:c4:82:65:8e:95:ca:8f:2d:90:1e:f2:93:03:
4a:4a:a2:6a:21:34:6d:d5:fe:88:41:61:7c:9f:75:c1:0b:13:
39:ec:2f:8f:7e:ec:8e:ad:3b:0f:74:c1:38:f0:b5:87:26:39:
7c:a4:f2:f0:0c:ec:41:7b:52:ec:3f:6c:17:e7:0b:fa:21:69:
1c:84:3c:8d:4b:17:fc:d6:56:b7:80:7d:70:76:b1:cd:02:ba:
02:e9:f4:de:5c:76:80:0d:cb:c9:bd:e9:75:e9:23:d2:66:77:
61:89:28:c3:e5:dc:87:26:90:3d:b8:7c:6d:68:b4:ef:02:3d:
24:65:bc:25:c6:14:3d:7d:4a:c9:49:cd:34:df:31:28:12:da:
19:92:47:41:8c:8e:81:83:36:77:e5:57:d7:1d:44:47:2b:71:
bc:78:50:20:95:ab:79:61:16:9a:cd:2e:f4:31:70:74:2f:43:
bb:e4:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:52:13 2026 by rpki-client