Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: p67y/3IBXKUnXc286QQ2gWaedsFnZGAeKNSjhIV/NjA=
Subject key identifier: 2B:A7:8E:75:60:68:29:11:64:5C:31:1E:6C:70:AE:34:52:41:8F:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6CA31860E63161DCC5243491DEEE03A37BF65C8C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Thu 20 Aug 2026 14:45:31 +0000
ROA not before: Thu 20 Aug 2026 14:40:31 +0000
ROA not after: Thu 19 Aug 2027 14:45:31 +0000
asID: 174
IP address blocks: 51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
51.241.62.0/24 maxlen: 24
188.220.23.0/24 maxlen: 24
188.220.89.0/24 maxlen: 24
188.220.100.0/24 maxlen: 24
188.220.108.0/24 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a3:18:60:e6:31:61:dc:c5:24:34:91:de:ee:03:a3:7b:f6:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 20 14:40:31 2026 GMT
Not After : Aug 19 14:45:31 2027 GMT
Subject: CN=2BA78E7560682911645C311E6C70AE3452418FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:e8:d3:89:56:40:0a:ce:6d:0c:b3:eb:6a:
23:e5:67:7a:e5:a2:f4:d4:e7:55:05:3c:46:6b:b6:
78:4d:6c:90:bc:be:e9:fd:41:a7:01:40:ad:d1:1a:
c7:3b:c9:f4:2c:be:0d:1b:e2:a4:f5:de:6d:8f:e1:
39:dd:fa:01:e2:4c:e3:c7:80:72:da:90:e3:43:8e:
2b:2a:45:b7:4e:b4:1b:49:47:4d:55:8a:83:e7:d9:
b6:a4:05:d5:45:2b:8d:8b:a2:9a:dc:20:40:34:64:
7a:ff:a3:83:1c:da:3f:47:1e:bd:1e:1c:4c:32:3c:
bc:4b:e5:81:98:31:87:8c:2c:7a:01:1b:29:93:a9:
97:25:61:5d:55:05:8f:25:73:0b:b4:58:a4:d4:85:
59:2c:cf:49:a6:96:32:00:34:86:b8:23:93:aa:f4:
e7:18:df:fd:4f:2b:6b:48:e5:e5:05:87:6d:56:32:
d2:2f:05:4f:03:7c:d0:b9:03:9a:65:92:9d:e5:51:
e7:db:fa:60:9b:f0:f4:4c:77:ff:b7:10:c8:64:5a:
32:ea:8c:49:08:66:1a:00:71:33:95:12:a0:a7:b3:
66:8b:cc:cb:d2:f7:57:db:20:8a:e6:4f:d1:5b:02:
4c:50:e3:d8:df:15:ec:37:07:94:e0:3c:ae:f7:5c:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:8E:75:60:68:29:11:64:5C:31:1E:6C:70:AE:34:52:41:8F:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.192.0/24
51.194.207.0/24
51.241.62.0/24
188.220.23.0/24
188.220.89.0/24
188.220.100.0/24
188.220.108.0/24
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a5:e6:32:13:05:06:13:9e:77:22:08:8e:50:d2:1d:d8:30:
e6:d4:41:04:d8:61:7d:b7:5f:14:cd:39:6b:6f:9b:43:1e:4c:
8b:8a:4d:8d:f2:72:7e:e2:1e:c8:4c:a6:c3:86:fe:e9:3a:27:
8b:9d:ab:f6:a2:6f:09:f1:01:d2:e6:5c:8d:f0:e3:93:96:c4:
81:79:58:c0:cd:b8:ae:a2:5b:10:f7:ae:49:38:a5:6f:38:3f:
dc:fd:40:7d:ff:04:08:25:8e:fd:0d:b9:04:a7:d8:2f:06:94:
ff:fc:cc:06:f3:55:cd:dc:cf:89:80:a9:af:a7:f8:c3:c7:54:
1d:6c:08:11:e2:f3:39:0b:41:80:b6:9f:7c:03:be:18:e5:5e:
9c:42:6b:3e:dc:a3:37:94:11:cb:b7:e0:88:b2:0f:14:29:48:
70:d7:73:f9:da:01:77:d5:29:b0:5a:fe:ab:d7:26:2c:42:73:
47:68:8d:35:cf:db:47:ce:81:5c:64:22:40:97:66:25:1d:09:
32:6a:de:9e:9b:48:6b:b9:ca:9d:41:57:ae:02:45:17:0a:4d:
ee:fa:fc:47:d2:7b:65:dd:25:ac:b9:e8:a2:13:91:0c:ee:5d:
10:e4:74:d6:0c:8c:ce:96:35:94:26:2b:8f:c3:fb:1c:35:f0:
5e:84:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:58:53 2026 by rpki-client