Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: qCQTPYPEo9QpIfgSL9aX9nX6/l+WlafNS+9hf62Pp0I=
Subject key identifier: 03:34:AC:8F:B0:67:A4:E0:FB:4B:0C:1A:AF:A5:55:6C:98:3D:A8:71
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 32547C89921AD0A5DB90BD1DB2BBEB1620B600F8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS174.roa
Signing time: Wed 03 Jun 2026 08:16:07 +0000
ROA not before: Wed 03 Jun 2026 08:11:07 +0000
ROA not after: Wed 02 Jun 2027 08:16:07 +0000
asID: 174
IP address blocks: 2a14:7584:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:54:7c:89:92:1a:d0:a5:db:90:bd:1d:b2:bb:eb:16:20:b6:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 3 08:11:07 2026 GMT
Not After : Jun 2 08:16:07 2027 GMT
Subject: CN=0334AC8FB067A4E0FB4B0C1AAFA5556C983DA871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:e6:5a:f8:f7:c1:4b:48:ea:e0:b3:17:2b:
1f:db:ea:90:63:27:12:67:5a:46:da:fb:e6:7d:a4:
21:b6:09:07:47:6c:82:d6:ae:c7:9f:86:18:e0:e9:
5f:bd:05:4a:72:c5:91:26:06:9b:05:47:55:58:ca:
f7:e5:77:30:de:59:5e:c8:d8:d8:ed:4f:52:5c:f7:
40:1d:d4:98:c7:4c:10:27:02:24:45:19:c1:f1:f4:
a8:a9:ba:85:56:8c:bd:b1:95:68:4e:f5:a9:8f:e6:
08:8b:28:aa:c9:77:53:77:54:81:cd:eb:78:1b:f0:
63:89:01:7d:e1:e1:46:b0:2a:0b:f0:04:57:71:e1:
fd:4e:da:44:e5:b6:72:d2:82:3e:0a:7a:d8:c6:59:
38:36:28:79:40:aa:01:29:0d:08:a5:ae:7f:d0:86:
ae:f3:7a:52:05:f3:7f:1d:99:30:25:51:5a:1c:9c:
70:b0:6c:22:ef:e7:dd:54:8f:c2:eb:54:36:d0:9d:
9a:d2:78:34:a1:a5:9a:e5:ce:c8:d6:17:b4:0b:d7:
00:9c:fd:25:e3:90:2b:07:35:08:fe:ac:73:b1:95:
65:7f:bf:71:5b:a8:22:9e:f8:0a:ea:25:2d:c8:97:
48:33:f6:ba:25:0d:8e:d3:34:f8:c9:16:62:08:94:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:AC:8F:B0:67:A4:E0:FB:4B:0C:1A:AF:A5:55:6C:98:3D:A8:71
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:f000::/36
Signature Algorithm: sha256WithRSAEncryption
10:a9:1e:8d:04:94:fb:ac:56:5b:47:54:2f:e9:aa:50:53:32:
3f:3f:f6:84:1b:5e:a5:be:64:1c:f1:22:4a:9c:34:c1:0f:5e:
02:58:6f:53:e2:d2:71:4e:f7:00:39:80:d0:52:9a:9b:f9:d4:
3c:0c:74:f0:5b:68:1d:89:59:9f:d0:66:e9:e5:33:29:13:43:
56:11:56:69:64:fb:db:17:24:3f:d5:65:49:cc:0b:22:c7:5d:
57:c3:fc:10:27:d8:e5:00:87:89:79:40:3f:07:57:c2:ea:a2:
66:9f:77:d6:39:0a:68:68:70:aa:5b:f5:4f:73:71:ce:27:6f:
20:28:8d:5d:14:ab:0c:fa:9e:08:5a:39:f2:b2:5d:9e:90:ff:
90:53:ff:f8:6d:10:2f:17:57:b8:e6:dd:ff:ce:03:7a:79:7b:
3b:91:7a:6f:73:b4:3c:33:ca:cd:5b:79:2a:68:fd:9a:1a:ce:
96:e9:6c:5e:15:1b:f3:a5:44:15:a5:63:d5:ca:a3:7b:9a:49:
9b:03:65:3e:20:20:e8:9b:a6:dd:1d:a1:a0:8e:2c:3c:fc:91:
e8:a6:93:51:f6:f6:e0:44:c3:7f:f2:31:ef:73:38:e8:4c:ec:
10:b7:28:c4:08:17:22:26:0b:b2:1c:4a:89:61:c4:3f:ce:90:
d6:44:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:30:00 2026 by rpki-client