Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: hz7pmGqeHKNN2EEupCg180jI8vBAcefkctX7h4uYR2o=
Subject key identifier: A4:0E:F5:D1:D9:50:2B:39:36:C6:C8:C8:59:92:3E:7E:3B:D0:6D:B2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 02D973415032E732A95EB146CBE296E24E9E1C0C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
Signing time: Thu 16 Jul 2026 00:01:23 +0000
ROA not before: Wed 15 Jul 2026 23:56:23 +0000
ROA not after: Thu 15 Jul 2027 00:01:23 +0000
asID: 174
IP address blocks: 82.47.24.0/23 maxlen: 24
82.47.200.0/24 maxlen: 24
84.75.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d9:73:41:50:32:e7:32:a9:5e:b1:46:cb:e2:96:e2:4e:9e:1c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 15 23:56:23 2026 GMT
Not After : Jul 15 00:01:23 2027 GMT
Subject: CN=A40EF5D1D9502B3936C6C8C859923E7E3BD06DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:93:b9:13:fb:5c:01:38:4b:53:6f:98:14:
90:81:02:d1:cd:72:f3:da:31:a2:3d:9a:8b:7d:d4:
75:e7:41:09:df:7c:c0:dd:95:1d:7e:12:12:7c:73:
7a:1e:e1:7c:1a:f5:ca:58:a2:39:09:63:df:75:2f:
65:0e:19:6d:2b:cf:2a:b5:c2:15:ea:1c:aa:96:e8:
b0:5f:ed:00:4f:a0:12:ac:3f:51:57:1c:b6:29:d2:
be:5b:b5:79:d7:7f:6e:16:73:6e:ab:df:08:0b:69:
1c:07:48:fa:58:e0:1c:94:f8:12:3d:8d:bd:31:68:
0c:76:09:2a:70:c4:39:ab:2c:00:c8:1f:e8:77:26:
b7:b3:54:b6:72:f2:2b:b7:16:a1:89:1f:83:da:2b:
72:7e:9c:1b:26:00:28:3d:eb:21:21:66:ac:90:72:
33:cb:32:c2:57:e8:7d:0d:33:84:02:1d:e0:22:d5:
1b:d3:e3:83:3c:38:76:09:57:65:37:8e:7b:a1:f0:
41:15:23:91:ee:34:3e:ee:d4:af:6f:c7:cd:96:6f:
fd:f6:47:e9:a8:be:56:e6:3e:d3:91:51:7b:33:02:
c6:2a:78:58:7d:42:2e:93:f0:00:b2:6f:ed:e3:45:
f8:65:e6:01:3a:06:7a:a6:23:83:ff:34:53:40:73:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:F5:D1:D9:50:2B:39:36:C6:C8:C8:59:92:3E:7E:3B:D0:6D:B2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.24.0/23
82.47.200.0/24
84.75.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:af:62:a1:40:35:25:ff:5e:1c:bd:7c:5d:82:97:d3:06:ea:
91:82:f4:c4:9e:cb:c9:a9:25:35:ef:c9:a0:4c:4a:d0:f1:52:
1e:e2:79:e0:7a:a3:df:d4:5a:df:58:e0:63:71:18:e4:38:15:
5e:c1:01:6d:ac:5e:c8:10:38:e0:f3:10:1f:7d:42:d1:53:07:
14:5c:01:59:fd:f7:65:28:31:47:da:fd:33:c7:30:5b:ae:17:
4e:27:ea:10:0d:b4:1c:9e:50:40:b5:23:a3:4f:c0:b9:25:8d:
b8:56:5c:65:69:6e:ea:fd:b0:4f:cd:8f:3b:9b:14:72:9a:bb:
1a:1b:6d:6f:a3:3b:40:15:b6:4c:da:39:6e:4b:e1:fc:d8:3f:
69:10:0e:a9:cf:bb:43:5b:35:4b:d5:f7:ee:2d:20:47:03:f3:
e8:9f:20:ad:33:81:0e:b2:4c:c4:78:48:e6:38:c5:44:c3:ea:
b0:5e:12:dd:4d:af:5a:a9:44:d6:04:aa:a0:15:05:9f:3a:38:
86:45:6b:7b:3b:a5:69:57:8e:2d:d0:56:74:e3:06:77:e9:86:
c5:8b:57:e1:29:89:4a:cd:75:bd:fe:37:29:77:dc:74:bc:15:
d6:f2:f2:c8:16:17:ff:b4:c7:7f:29:f6:0b:d5:dd:95:7c:1e:
a5:19:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:44 2026 by rpki-client