Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: fkjU4wKkvtOrHPzna8Tcm3hqHT4iRAIPbtNoZi3OzgQ=
Subject key identifier: 3E:3A:1F:FF:C3:3D:EA:BC:F1:71:46:36:E0:F3:2D:7D:0A:AD:44:CA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 07662DDEC12D23FB3CBA1AA8D5E69414A6AA122A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Thu 18 Jun 2026 10:11:38 +0000
ROA not before: Thu 18 Jun 2026 10:06:38 +0000
ROA not after: Thu 17 Jun 2027 10:11:38 +0000
asID: 174
IP address blocks: 51.194.140.0/24 maxlen: 24
51.194.247.0/24 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.249.0/24 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:66:2d:de:c1:2d:23:fb:3c:ba:1a:a8:d5:e6:94:14:a6:aa:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 18 10:06:38 2026 GMT
Not After : Jun 17 10:11:38 2027 GMT
Subject: CN=3E3A1FFFC33DEABCF1714636E0F32D7D0AAD44CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:b7:f9:eb:ed:63:ce:40:19:9d:b6:33:1d:
a9:12:b5:f5:d3:54:5c:d9:12:83:df:15:7e:63:d0:
d2:44:2d:56:c0:89:64:e6:ae:58:e2:08:5e:24:be:
87:12:22:43:f8:e7:00:c8:7f:c8:4a:79:ee:6d:a2:
04:7a:64:75:62:28:f0:bf:15:42:df:30:ee:2c:e0:
da:85:e4:9a:18:5b:5e:62:40:a7:c6:a3:82:53:44:
44:fe:ff:b2:35:45:72:38:76:c9:20:90:24:fd:fc:
a9:73:d9:bf:0b:c4:dc:fa:ad:8e:02:24:09:af:70:
14:03:c1:f1:bf:b6:7d:23:c2:fe:08:d4:3b:ce:b9:
ad:ab:00:5b:f6:32:c2:b5:87:8b:2a:c6:50:7c:13:
2c:03:a8:1a:70:50:2b:bf:29:c1:ae:89:af:97:c5:
c2:87:2b:1d:fa:d6:0c:c3:57:68:eb:25:58:6f:e4:
70:70:2b:6e:34:4c:97:f8:ec:c6:9a:ed:6e:46:11:
34:f7:10:e9:ca:e6:4c:b1:17:04:c8:81:6c:fc:b8:
63:3c:e4:d0:e4:35:ca:1e:c3:11:0b:48:a8:13:d8:
e8:5d:3c:2a:3d:4c:5c:b1:08:fb:91:29:04:4f:3c:
40:75:eb:d2:41:f5:c9:71:51:c2:70:58:d4:3f:47:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:1F:FF:C3:3D:EA:BC:F1:71:46:36:E0:F3:2D:7D:0A:AD:44:CA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.140.0/24
51.194.247.0/24
188.220.184.0/21
188.220.244.0/22
188.220.249.0/24
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:20:97:e7:72:ff:36:07:10:03:16:f1:3c:56:e3:b6:4b:0e:
e5:b7:0c:9c:62:01:ff:42:51:a5:64:37:5b:b8:82:22:ea:92:
44:cf:e3:f8:09:a3:8d:ca:e8:dc:e9:4d:a6:fc:f7:b7:8f:7f:
d8:8c:70:91:c8:61:8a:94:39:87:5f:d2:7b:26:f2:59:14:50:
63:14:c4:77:64:5e:4a:5a:ca:90:bd:72:59:68:c4:c7:1d:6b:
de:34:e3:65:ff:3d:20:ac:9f:69:05:a8:d7:53:41:1c:5b:8c:
e7:6c:bf:6b:2c:08:67:bc:dd:bb:1b:62:6e:01:be:4f:00:9f:
00:13:82:57:a5:d0:3e:f2:da:9d:32:11:e2:c7:db:25:46:93:
d3:f2:fe:30:e6:29:40:85:8b:87:ce:ba:d8:d9:74:95:fd:bd:
3e:d3:a3:2f:7b:20:38:01:e3:40:96:5a:d7:77:1f:ec:ad:a8:
a4:0c:e8:66:89:30:59:6d:08:f9:8b:e5:9e:c1:c2:f1:f9:93:
8e:dc:c4:45:59:39:5e:f2:c7:a7:c7:1b:54:5c:e3:82:2f:84:
75:da:bb:c1:02:48:dd:79:92:9b:0d:4f:7c:8a:99:82:4d:02:
98:3e:67:c7:37:c1:b0:14:51:ce:f4:50:f3:05:44:99:25:cf:
ac:9b:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 10:16:25 2026 by rpki-client