Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: wSYy2UG52kIWDG8OeOehsUyUu+lyLhy1AX2Y3j0EK/M=
Subject key identifier: 59:F5:3C:A2:7F:01:C7:87:83:60:4C:B6:09:B3:8A:E7:B9:59:7F:61
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 57DAABB4A5A4E235F07C76F8697322446BB9465F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
Signing time: Thu 06 Aug 2026 17:52:27 +0000
ROA not before: Thu 06 Aug 2026 17:47:27 +0000
ROA not after: Thu 05 Aug 2027 17:52:27 +0000
asID: 174
IP address blocks: 82.139.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:da:ab:b4:a5:a4:e2:35:f0:7c:76:f8:69:73:22:44:6b:b9:46:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 6 17:47:27 2026 GMT
Not After : Aug 5 17:52:27 2027 GMT
Subject: CN=59F53CA27F01C78783604CB609B38AE7B9597F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:ac:24:f1:79:1d:7a:0b:5b:f7:1f:fb:78:
7e:8e:f1:f4:eb:37:8d:d1:39:6f:0d:3d:40:bd:0c:
30:11:a8:3c:88:dd:26:95:39:b9:d3:48:ce:8a:0d:
5b:82:0d:e9:07:fd:60:cb:37:d3:72:f5:af:9d:08:
ae:f5:06:16:85:1f:97:d8:c0:cc:b3:e9:5c:04:5f:
31:18:1e:77:6e:25:72:c2:d4:43:c0:0d:5b:f7:13:
67:e7:e5:de:1f:3f:af:e8:12:e9:77:87:74:08:91:
0f:6c:ce:fc:ff:71:fa:ab:cd:1e:f5:22:31:9c:db:
c1:c3:83:51:48:cf:62:15:f1:45:a5:02:d1:9f:e4:
13:32:e3:ef:e5:6b:fe:bc:7a:90:ea:74:ba:65:3f:
e4:43:e4:34:81:8b:91:e4:3c:08:0f:f0:57:b9:52:
44:3f:7b:11:69:b7:a2:97:40:1e:aa:07:75:bd:4d:
23:e4:ff:ac:05:51:1d:3b:c4:34:cd:ba:03:fc:5d:
4b:2b:42:31:6c:1b:cf:37:0f:56:15:9c:67:11:95:
c4:0f:1c:35:08:e9:bf:45:0f:a1:29:c4:e3:db:a8:
b5:bd:1c:cc:3d:db:87:4a:97:e9:13:3f:30:de:49:
44:0c:1e:99:90:00:61:c9:9d:a6:a7:3b:48:fd:c7:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:3C:A2:7F:01:C7:87:83:60:4C:B6:09:B3:8A:E7:B9:59:7F:61
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.205.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:6e:40:eb:4f:fd:3d:24:a6:55:06:37:04:32:1d:96:08:
0c:ec:f4:6a:a6:01:9f:84:05:eb:18:d4:fe:96:8a:38:46:eb:
13:90:42:2c:1e:7b:18:d9:1e:55:59:ae:a5:6d:07:3c:ab:2a:
87:a1:e2:af:06:88:01:0e:35:2b:46:ff:eb:f0:59:90:cf:76:
ee:b8:6f:7a:3b:4e:c1:26:30:21:35:26:85:2b:db:49:89:48:
72:bb:09:4a:da:18:be:27:ff:d7:93:87:6f:2a:08:3b:77:51:
3d:42:80:8f:06:00:b2:0d:65:35:f6:38:dd:4a:3a:0b:ea:ea:
d4:9d:a6:ec:07:1f:b3:f9:a4:57:13:95:b4:cc:fb:32:d3:8f:
af:99:fa:98:18:2d:30:4a:be:87:81:6e:56:29:45:f8:31:06:
fe:87:c6:89:ad:e4:1a:87:ec:0e:64:af:62:53:fb:17:1b:ea:
4a:67:e5:76:78:8c:2a:8e:a5:12:1f:5c:8b:1e:3a:ed:21:e4:
3f:4b:90:90:92:47:fd:8a:20:98:82:1e:4a:ad:66:2b:00:d5:
9a:37:6c:1b:c2:e8:9e:90:56:36:42:37:b2:dc:e6:2c:fa:bc:
43:a6:47:59:9e:87:30:61:4e:b7:6f:3e:d4:4c:2a:46:17:3c:
af:c8:43:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUV9qrtKWk4jXwfHb4aXMiRGu5Rl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA4MDYxNzQ3MjdaFw0yNzA4MDUxNzUyMjdaMDMxMTAvBgNV
BAMTKDU5RjUzQ0EyN0YwMUM3ODc4MzYwNENCNjA5QjM4QUU3Qjk1OTdGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiKwk8Xkdegtb9x/7eH6O8fTr
N43ROW8NPUC9DDARqDyI3SaVObnTSM6KDVuCDekH/WDLN9Ny9a+dCK71BhaFH5fY
wMyz6VwEXzEYHnduJXLC1EPADVv3E2fn5d4fP6/oEul3h3QIkQ9szvz/cfqrzR71
IjGc28HDg1FIz2IV8UWlAtGf5BMy4+/la/68epDqdLplP+RD5DSBi5HkPAgP8Fe5
UkQ/exFpt6KXQB6qB3W9TSPk/6wFUR07xDTNugP8XUsrQjFsG883D1YVnGcRlcQP
HDUI6b9FD6EpxOPbqLW9HMw924dKl+kTPzDeSUQMHpmQAGHJnaanO0j9x8htAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUWfU8on8Bx4eDYEy2CbOK57lZf2EwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovNMA0G
CSqGSIb3DQEBCwUAA4IBAQCCUm5A60/9PSSmVQY3BDIdlggM7PRqpgGfhAXrGNT+
loo4RusTkEIsHnsY2R5VWa6lbQc8qyqHoeKvBogBDjUrRv/r8FmQz3buuG96O07B
JjAhNSaFK9tJiUhyuwlK2hi+J//Xk4dvKgg7d1E9QoCPBgCyDWU19jjdSjoL6urU
nabsBx+z+aRXE5W0zPsy04+vmfqYGC0wSr6HgW5WKUX4MQb+h8aJreQah+wOZK9i
U/sXG+pKZ+V2eIwqjqUSH1yLHjrtIeQ/S5CQkkf9iiCYgh5KrWYrANWaN2wbwuie
kFY2Qjey3OYs+rxDpkdZnocwYU63bz7UTCpGFzyvyENM
-----END CERTIFICATE-----
Generated at Wed Aug 26 19:21:41 2026 by rpki-client