Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: mOT4N+X/qcGLK6LmVQE/Kmq2BwHsHrYImh7OXZwEwjI=
Subject key identifier: 87:D8:A7:CB:1C:64:33:18:24:8D:D2:3B:A7:93:15:0A:43:CD:D6:39
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 18C23C69172F94A3E3DF2A8AACBF8464477CA63B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS174.roa
Signing time: Thu 01 Oct 2026 00:15:09 +0000
ROA not before: Thu 01 Oct 2026 00:10:09 +0000
ROA not after: Thu 30 Sep 2027 00:15:09 +0000
asID: 174
IP address blocks: 179.61.197.0/24 maxlen: 24
181.41.202.0/24 maxlen: 24
181.41.206.0/24 maxlen: 24
181.214.153.0/24 maxlen: 24
181.214.173.0/24 maxlen: 24
191.96.36.0/24 maxlen: 24
191.96.106.0/24 maxlen: 24
191.96.150.0/24 maxlen: 24
191.96.168.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
191.101.31.0/24 maxlen: 24
191.101.61.0/24 maxlen: 24
191.101.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c2:3c:69:17:2f:94:a3:e3:df:2a:8a:ac:bf:84:64:47:7c:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 1 00:10:09 2026 GMT
Not After : Sep 30 00:15:09 2027 GMT
Subject: CN=87D8A7CB1C643318248DD23BA793150A43CDD639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:fe:8d:98:03:b8:40:36:6d:28:03:c9:59:
11:46:8c:6f:2a:b1:9c:c7:a8:17:13:2a:88:9d:91:
b1:58:20:0e:27:99:88:f5:71:a8:05:9b:07:da:55:
d7:e2:69:e1:16:34:c7:7e:49:27:9c:04:7b:52:c8:
5b:99:7e:1e:82:4d:a8:40:be:8a:49:9d:10:49:5e:
da:e7:af:74:c0:6b:3d:94:b4:e4:0e:a4:76:7b:1a:
b4:4c:6f:f1:ae:e9:c5:e2:f1:40:66:46:2e:d4:44:
21:81:cc:b3:66:a1:45:ea:15:1c:ff:f6:12:3b:0e:
fb:8b:95:72:5d:2a:3a:85:29:33:7d:64:f4:bf:64:
4d:61:77:73:29:a1:5c:68:ce:8f:c4:e1:e8:0f:be:
cb:75:9c:ac:3f:37:d3:81:3c:f8:fa:c2:05:d1:2f:
4a:58:bf:59:82:7b:03:d0:51:be:0b:92:5c:ad:64:
2f:5a:d2:44:f9:e8:54:c9:77:61:ff:ea:41:a6:5e:
7d:39:d2:d7:40:33:0e:85:eb:9b:18:d9:1b:75:c1:
b1:fa:84:aa:bb:58:bc:04:6a:e8:81:b5:4a:43:78:
4f:5d:b4:c6:a6:c2:5f:a8:cf:fb:9b:51:07:53:70:
91:73:00:cc:7e:f6:d8:97:61:c8:b3:8f:80:86:04:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D8:A7:CB:1C:64:33:18:24:8D:D2:3B:A7:93:15:0A:43:CD:D6:39
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.197.0/24
181.41.202.0/24
181.41.206.0/24
181.214.153.0/24
181.214.173.0/24
191.96.36.0/24
191.96.106.0/24
191.96.150.0/24
191.96.168.0/24
191.96.227.0/24
191.101.31.0/24
191.101.61.0/24
191.101.217.0/24
Signature Algorithm: sha256WithRSAEncryption
56:77:7e:22:b8:97:63:02:41:9c:e4:36:1d:b8:58:3c:79:63:
b5:75:3b:9a:84:db:96:30:7e:0a:86:30:c0:11:05:a3:d2:f8:
a5:c5:6c:34:c7:34:9b:e8:f1:27:3e:8d:ad:d7:0a:bc:53:9e:
5c:b2:38:7e:8e:6c:93:15:3d:d9:81:cd:c0:e8:e5:52:87:58:
95:19:6e:ed:46:14:aa:df:ac:7f:af:7d:94:03:82:17:65:0f:
be:b6:f4:d9:ef:3e:b6:0f:a9:b1:0d:a9:55:66:fc:2e:37:83:
d0:5c:46:c7:32:d9:64:b4:51:58:c3:af:6a:53:7f:52:df:fe:
b2:6d:07:f8:09:0f:f2:0c:b9:2b:8b:14:59:b8:1d:ac:fe:4d:
e1:bc:30:4e:c1:3f:5b:5e:c1:ae:2a:66:71:b2:07:5c:a7:91:
3a:11:2e:fc:97:f4:ee:b7:93:73:a0:6b:8c:ff:ca:50:b9:7e:
10:d7:d8:be:8e:6e:8b:07:48:4a:74:1f:18:31:4a:ea:67:e1:
4f:9e:24:15:96:6f:70:b4:50:6a:a4:e7:af:3f:8d:b5:f4:4d:
c6:a7:80:5b:ba:7f:30:f5:e0:6e:82:bd:5f:bd:d4:7d:e8:2c:
75:b3:89:29:50:bd:2c:e4:e6:f9:40:fc:87:d1:1c:82:7a:b0:
d7:f9:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:26:23 2026 by rpki-client