Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: zw6Hzuja7DQNUKngipJp08wNyWpfkmnOIenSjCCoqB4=
Subject key identifier: F2:AC:84:8F:92:A0:81:6B:DF:4C:B8:F9:8F:52:0C:61:6B:D7:BA:41
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 144831A557509A31C21E62B69CF1FAEEC2E96447
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
Signing time: Sun 16 Aug 2026 00:07:10 +0000
ROA not before: Sun 16 Aug 2026 00:02:10 +0000
ROA not after: Sun 15 Aug 2027 00:07:10 +0000
asID: 174
IP address blocks: 82.47.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:48:31:a5:57:50:9a:31:c2:1e:62:b6:9c:f1:fa:ee:c2:e9:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 16 00:02:10 2026 GMT
Not After : Aug 15 00:07:10 2027 GMT
Subject: CN=F2AC848F92A0816BDF4CB8F98F520C616BD7BA41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:5f:28:7d:65:12:e3:2c:f9:6e:3e:91:13:
13:b5:40:d0:19:da:d5:22:2a:90:2e:4c:51:44:be:
96:6c:61:c1:f4:9e:b0:48:c8:59:1f:d7:a2:e6:cb:
56:1e:0c:d6:36:18:4e:7f:04:f5:09:4b:de:44:a1:
aa:20:25:cb:3f:3a:33:60:26:e6:37:8d:e0:92:82:
f1:d0:a9:9b:3a:4b:64:6f:19:1a:12:de:3a:1d:a0:
0d:43:42:52:f8:f0:a4:47:d8:6b:b2:cc:db:72:b1:
9f:31:d1:48:5a:bd:25:da:d4:30:5f:c9:9b:d4:a0:
4c:aa:db:26:3b:3b:cb:a2:52:0e:16:49:24:a9:03:
c3:16:a0:9d:79:3b:3e:8d:ad:01:c5:6c:66:97:53:
f5:16:0f:57:93:01:20:82:36:89:af:6b:62:a4:21:
b5:b0:30:45:c3:a5:32:5d:af:99:2d:75:4f:82:45:
a1:42:54:5d:1d:94:27:7d:10:8d:a4:97:0f:a3:c5:
d5:6e:cd:0e:ad:be:2a:31:42:04:01:43:36:3e:1e:
63:c7:19:96:a2:59:10:08:db:e3:96:de:ad:c4:03:
ff:26:be:f7:2d:34:6e:e2:0f:88:23:15:6a:69:cd:
b9:37:66:43:77:27:d8:07:3a:b0:9b:5b:a3:25:f5:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AC:84:8F:92:A0:81:6B:DF:4C:B8:F9:8F:52:0C:61:6B:D7:BA:41
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.24.0/23
Signature Algorithm: sha256WithRSAEncryption
38:f7:fd:75:b9:d0:6a:7d:2b:15:f3:a0:aa:4e:0c:98:ea:23:
86:00:5f:ab:00:00:e2:ba:70:be:49:4c:63:7c:05:07:34:18:
60:f0:6f:b0:9d:3e:15:ec:50:2c:aa:cc:ba:76:6f:e1:14:af:
11:19:7b:16:00:50:c6:ef:f1:ed:d3:66:4a:0a:90:c1:57:b5:
f7:b2:b0:49:f6:3c:27:02:f8:f0:44:e2:eb:4b:4d:30:72:62:
63:f4:b1:c4:d2:99:ef:60:0a:81:83:20:10:67:2f:f3:f9:82:
e2:94:31:d5:cd:8b:c5:9c:3a:ea:1b:e3:0d:65:b4:46:75:4a:
8e:99:c4:fe:07:52:80:02:5c:aa:cf:8e:b0:e2:09:35:8c:de:
e3:91:6b:2e:9a:b7:07:5a:53:7e:ee:7e:5d:02:20:a2:db:02:
8e:83:56:a6:a5:27:1c:fd:1d:a6:82:06:17:15:44:46:19:03:
d5:5c:09:e8:c4:cd:89:61:5a:0f:37:31:f8:06:ca:40:b4:28:
d4:ba:37:87:29:f7:d1:31:50:ea:3b:3e:ce:7f:bf:08:90:8d:
7d:3e:63:e5:5d:fe:9b:8d:52:e0:fb:2b:9c:2a:4e:ad:fc:bb:
bd:00:a5:f8:1c:b6:2e:1c:ba:74:4e:3d:96:95:e5:16:33:88:
a3:32:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:30:06 2026 by rpki-client