Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: WxJp4oXASlOnSxeVUyf+ZHLLZdwlP91YPLB6b2AgSb8=
Subject key identifier: 48:0E:81:25:F4:31:38:67:9B:5D:AF:6F:12:24:BF:CF:A7:D7:C3:2A
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 299D5BF00AB06169FD3AB5103A876A98A69668CE
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS174.roa
Signing time: Thu 06 Aug 2026 09:59:10 +0000
ROA not before: Thu 06 Aug 2026 09:54:10 +0000
ROA not after: Thu 05 Aug 2027 09:59:10 +0000
asID: 174
IP address blocks: 77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:9d:5b:f0:0a:b0:61:69:fd:3a:b5:10:3a:87:6a:98:a6:96:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Aug 6 09:54:10 2026 GMT
Not After : Aug 5 09:59:10 2027 GMT
Subject: CN=480E8125F43138679B5DAF6F1224BFCFA7D7C32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:7d:cf:3f:7d:20:63:0d:98:b5:92:2b:64:
de:2c:41:1a:f3:ce:09:06:7f:c1:d0:de:a6:51:bd:
37:0f:91:b5:38:19:8d:13:57:5a:00:e8:fd:c2:14:
1d:1c:52:90:2f:dc:97:49:31:e8:62:4e:92:b7:60:
8c:03:c7:2b:da:a9:59:f5:0d:9f:74:81:b5:f5:71:
06:ea:c1:89:3d:a1:58:35:32:6a:a8:8f:43:84:26:
f8:e5:71:78:1d:59:b2:bc:19:e3:1d:47:e4:91:e1:
8a:7b:ad:74:16:fd:b2:ce:60:72:2f:b4:b9:63:f3:
b5:94:8a:41:17:c0:f7:1e:fe:2c:4e:78:40:5a:d9:
38:5e:a6:0b:c0:8c:0f:05:1e:2f:3b:8e:45:02:e9:
d2:81:cb:f7:cb:f9:59:63:18:d7:d0:d4:44:d8:9d:
e2:d2:81:44:93:0e:51:2b:d2:c9:3b:33:c5:46:c1:
ff:b0:af:44:9d:1d:cd:79:38:8b:8b:43:6f:ae:d2:
57:24:70:33:39:3c:0f:18:e0:03:33:1b:14:48:0a:
9c:51:4f:58:bd:d9:c4:fc:a7:d6:a8:fa:a9:e1:16:
53:76:44:e3:06:43:71:02:15:da:e1:2c:72:9c:7f:
c4:1d:48:30:0e:86:81:a6:0a:11:95:8e:87:ac:0c:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:81:25:F4:31:38:67:9B:5D:AF:6F:12:24:BF:CF:A7:D7:C3:2A
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
Signature Algorithm: sha256WithRSAEncryption
e7:7c:4b:26:de:4f:d0:83:69:d0:e8:a0:f9:1c:32:4f:96:a2:
13:1f:39:5d:7a:3d:4e:9b:48:81:c6:80:2b:7f:69:55:1f:6b:
71:98:12:a2:d1:b2:40:57:6c:1c:bd:a7:5d:e3:af:78:5b:61:
a0:f5:8b:43:71:1a:e0:74:56:79:94:15:30:4a:11:41:c6:93:
2f:2a:59:60:61:4e:bd:af:92:61:2b:12:e3:ef:5a:3d:78:c4:
ee:33:dc:ce:c5:da:d6:1b:1b:20:da:4a:4c:bf:9c:5b:69:ec:
2e:04:db:60:43:b1:5b:9d:3a:2d:20:ad:83:80:c8:84:41:4b:
71:5d:b2:8c:d3:18:7e:e9:ee:70:9f:7c:43:2f:a8:7f:d3:36:
bc:8f:98:dd:9b:1a:83:ba:5e:f1:e9:2d:22:62:db:2a:f2:ea:
a0:b3:cd:8a:3e:81:9f:1e:46:d1:2d:74:71:da:53:74:02:56:
1d:53:43:08:79:b5:2a:4f:0a:9a:b7:84:6b:c8:4d:33:aa:16:
21:4b:a4:cb:eb:ab:9c:47:47:f4:f7:5f:cc:59:75:92:ec:31:
55:f3:0c:da:5f:7a:0f:fa:5d:b5:99:cd:54:b8:df:57:6b:d3:
8f:0a:ea:26:c8:d6:ec:28:f0:a8:24:ea:c1:09:62:71:e1:db:
16:dd:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:50 2026 by rpki-client