Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: D0kEEsEzhcvT45LuOex0lQadPAsERgqgPz0YfuDsElU=
Subject key identifier: 3A:61:B2:E1:7C:C1:EC:82:55:D8:57:DD:AD:19:4A:EF:A3:CE:38:51
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 548A22D6E05EDAD745CE3C8DCDE4822EBC77C824
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS174.roa
Signing time: Fri 21 Aug 2026 17:30:18 +0000
ROA not before: Fri 21 Aug 2026 17:25:18 +0000
ROA not after: Fri 20 Aug 2027 17:30:18 +0000
asID: 174
IP address blocks: 141.11.67.0/24 maxlen: 24
141.11.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:8a:22:d6:e0:5e:da:d7:45:ce:3c:8d:cd:e4:82:2e:bc:77:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 21 17:25:18 2026 GMT
Not After : Aug 20 17:30:18 2027 GMT
Subject: CN=3A61B2E17CC1EC8255D857DDAD194AEFA3CE3851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:e8:ef:52:c3:e0:7a:44:5a:da:40:61:09:
99:fc:bd:07:0b:31:07:bb:9f:7b:b3:ff:df:bd:3c:
26:76:69:3b:2c:17:ed:86:15:1d:7e:a7:fa:fc:5c:
91:37:6f:f3:af:76:ea:64:6a:4c:59:0f:8c:d9:cd:
19:12:b1:a6:b8:48:54:89:8b:4b:5c:a6:b2:54:47:
0f:69:ba:3e:f7:ac:ae:04:25:ef:b8:69:b4:d2:51:
83:8e:5f:3d:d7:be:f7:5c:74:fe:d6:7a:6f:c5:bb:
c1:a1:30:76:8b:23:f6:99:28:11:af:08:3b:11:44:
e4:3b:e7:4f:a9:b2:af:bd:15:9c:1a:06:fb:8b:ed:
90:e1:fe:a5:20:21:7e:41:2c:9c:08:3e:15:5e:db:
ba:a2:cb:bd:0e:b3:a5:d6:ed:9a:4a:4b:d8:e2:57:
40:4a:ae:b9:f8:9b:1b:bb:88:80:0d:11:d8:7f:06:
b7:2a:3e:b1:44:b6:76:11:e7:89:cf:81:b4:60:3f:
2c:6f:25:bb:9b:a3:fb:b0:56:4a:a6:21:54:00:fe:
8c:af:b6:43:c3:9a:e0:4b:cd:1a:b3:5c:20:6f:d6:
7f:d8:c4:8d:b7:90:12:bb:c8:b5:94:4e:0b:23:da:
17:41:77:9b:b4:35:d2:1a:2b:04:67:70:0d:fe:e7:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:B2:E1:7C:C1:EC:82:55:D8:57:DD:AD:19:4A:EF:A3:CE:38:51
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.67.0/24
141.11.229.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:e5:9e:ac:54:96:96:46:38:bd:f6:60:09:23:55:80:18:e0:
e3:f4:d0:23:ec:34:74:21:88:c8:b3:6f:4a:7b:84:f6:ea:1d:
73:2b:60:f6:f9:1d:8f:5e:9c:8f:0e:6f:28:38:aa:82:3d:bc:
78:3f:c8:a4:a4:59:90:ad:2c:88:e1:53:8c:fb:61:97:94:af:
43:40:96:7f:56:1c:e3:81:6c:54:22:6a:0c:1e:5c:4d:7f:86:
a6:71:d4:49:ab:cf:5d:32:e3:9c:d5:19:33:86:9a:6f:be:39:
a5:e9:54:60:d2:cb:b6:d2:eb:dd:e9:ca:87:92:0f:e7:bb:cb:
2f:98:70:2b:f7:60:a5:48:7d:e5:9d:67:2b:96:79:a3:35:8d:
56:5b:43:99:f4:9a:4a:83:b8:19:3d:4f:a9:fc:a1:89:31:53:
f3:8a:84:bf:13:63:77:ed:21:5a:7a:4b:21:d8:ca:87:b0:8b:
02:31:15:de:e9:30:e2:09:4c:50:6f:7a:a5:cd:3e:47:9b:8f:
51:1a:71:df:12:47:74:e9:71:2f:59:1f:88:7d:9c:ef:f4:2b:
c6:cd:40:d5:d7:e3:a5:91:27:69:ce:f3:ca:34:92:1c:c3:e3:
cb:bd:e4:05:ab:0b:18:47:01:bf:ab:0a:fd:3e:9b:54:5e:56:
70:82:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:58:52 2026 by rpki-client