Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 4ICPbEe/ZKPZqxHaQ7txgKfmU29Tl/Kv64vndeY2klE=
Subject key identifier: 84:FC:14:4E:45:94:64:49:B3:47:9C:7A:00:54:A1:D5:DE:93:4C:82
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3F7860F1907BCC9E3DCFD3BDC4ADA05CBA51D6B2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
Signing time: Wed 02 Sep 2026 12:17:04 +0000
ROA not before: Wed 02 Sep 2026 12:12:04 +0000
ROA not after: Wed 01 Sep 2027 12:17:04 +0000
asID: 174
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.32.0/24 maxlen: 24
96.62.33.0/24 maxlen: 24
96.62.34.0/24 maxlen: 24
96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.38.0/24 maxlen: 24
96.62.39.0/24 maxlen: 24
96.62.40.0/24 maxlen: 24
96.62.41.0/24 maxlen: 24
96.62.42.0/24 maxlen: 24
96.62.43.0/24 maxlen: 24
96.62.44.0/24 maxlen: 24
96.62.46.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.67.0/24 maxlen: 24
96.62.68.0/24 maxlen: 24
96.62.70.0/24 maxlen: 24
96.62.102.0/24 maxlen: 24
96.62.104.0/24 maxlen: 24
96.62.106.0/24 maxlen: 24
96.62.107.0/24 maxlen: 24
96.62.108.0/24 maxlen: 24
96.62.109.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.112.0/24 maxlen: 24
96.62.113.0/24 maxlen: 24
96.62.116.0/24 maxlen: 24
96.62.117.0/24 maxlen: 24
96.62.118.0/24 maxlen: 24
96.62.119.0/24 maxlen: 24
96.62.120.0/24 maxlen: 24
96.62.121.0/24 maxlen: 24
96.62.122.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.124.0/24 maxlen: 24
96.62.125.0/24 maxlen: 24
96.62.126.0/24 maxlen: 24
96.62.132.0/24 maxlen: 24
96.62.133.0/24 maxlen: 24
96.62.134.0/24 maxlen: 24
96.62.136.0/24 maxlen: 24
96.62.137.0/24 maxlen: 24
96.62.138.0/24 maxlen: 24
96.62.139.0/24 maxlen: 24
96.62.141.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.143.0/24 maxlen: 24
96.62.146.0/24 maxlen: 24
96.62.147.0/24 maxlen: 24
96.62.160.0/24 maxlen: 24
96.62.161.0/24 maxlen: 24
96.62.162.0/24 maxlen: 24
96.62.163.0/24 maxlen: 24
96.62.164.0/24 maxlen: 24
96.62.165.0/24 maxlen: 24
96.62.166.0/24 maxlen: 24
96.62.167.0/24 maxlen: 24
96.62.168.0/24 maxlen: 24
96.62.169.0/24 maxlen: 24
96.62.170.0/24 maxlen: 24
96.62.171.0/24 maxlen: 24
96.62.172.0/24 maxlen: 24
96.62.173.0/24 maxlen: 24
96.62.174.0/24 maxlen: 24
96.62.175.0/24 maxlen: 24
96.62.177.0/24 maxlen: 24
96.62.178.0/24 maxlen: 24
96.62.179.0/24 maxlen: 24
96.62.188.0/24 maxlen: 24
96.62.189.0/24 maxlen: 24
96.62.196.0/24 maxlen: 24
96.62.198.0/24 maxlen: 24
96.62.199.0/24 maxlen: 24
96.62.212.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.215.0/24 maxlen: 24
96.62.225.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
96.62.230.0/24 maxlen: 24
96.62.236.0/24 maxlen: 24
96.62.237.0/24 maxlen: 24
96.62.238.0/24 maxlen: 24
96.62.239.0/24 maxlen: 24
96.62.240.0/24 maxlen: 24
96.62.241.0/24 maxlen: 24
96.62.245.0/24 maxlen: 24
96.62.246.0/24 maxlen: 24
96.62.252.0/24 maxlen: 24
143.14.146.0/24 maxlen: 24
143.14.148.0/24 maxlen: 24
143.14.153.0/24 maxlen: 24
143.14.155.0/24 maxlen: 24
143.14.195.0/24 maxlen: 24
143.14.197.0/24 maxlen: 24
148.135.193.0/24 maxlen: 24
155.117.106.0/24 maxlen: 24
155.117.116.0/24 maxlen: 24
162.141.37.0/24 maxlen: 24
162.141.38.0/24 maxlen: 24
162.141.51.0/24 maxlen: 24
162.141.54.0/24 maxlen: 24
162.141.103.0/24 maxlen: 24
162.141.118.0/24 maxlen: 24
162.141.128.0/24 maxlen: 24
162.141.129.0/24 maxlen: 24
162.141.155.0/24 maxlen: 24
162.141.164.0/24 maxlen: 24
167.148.135.0/24 maxlen: 24
167.148.138.0/24 maxlen: 24
167.148.147.0/24 maxlen: 24
167.148.148.0/24 maxlen: 24
167.148.150.0/24 maxlen: 24
167.148.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:78:60:f1:90:7b:cc:9e:3d:cf:d3:bd:c4:ad:a0:5c:ba:51:d6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 12:12:04 2026 GMT
Not After : Sep 1 12:17:04 2027 GMT
Subject: CN=84FC144E45946449B3479C7A0054A1D5DE934C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:a4:64:1e:99:62:89:63:81:c8:9e:bb:73:
73:eb:0c:f2:f4:f0:94:6f:73:12:e5:7b:94:ee:9d:
9b:90:16:e1:d3:0b:7c:5a:c1:46:21:53:d2:48:40:
b5:6b:81:35:82:b0:8f:cf:7c:39:0e:84:48:ad:b9:
4c:a3:bd:ef:d2:00:ac:64:94:ac:4f:7f:ef:5e:5a:
e6:3b:d6:60:07:45:5f:58:9a:7e:cd:2a:a3:da:a3:
a0:00:a9:e7:9f:83:85:35:ce:02:bd:94:0b:56:bc:
c7:61:42:8a:c2:e6:c6:c3:74:ed:1a:ea:5b:6f:99:
91:75:98:9e:64:c3:4f:ea:ce:0a:17:7d:c9:ff:d1:
81:e9:36:6d:62:de:3b:c0:01:45:1f:f1:8f:8f:54:
cf:d0:93:81:9a:b6:ac:d0:76:18:e7:a0:13:2d:ae:
70:c6:1f:92:e6:9e:ce:3e:28:ff:ef:75:bc:c2:61:
d4:38:31:c2:67:42:7a:19:d7:fb:c0:0c:16:75:3d:
81:91:fe:56:fe:28:48:c0:94:19:b1:f3:c3:da:cd:
66:ae:f3:27:c9:1e:8d:9d:a7:76:c2:e7:8c:7b:0e:
de:ff:09:05:13:8f:19:79:d9:cb:6c:9a:ce:ec:a0:
07:ff:20:3c:80:51:98:ed:8f:f4:bc:ad:c3:86:7c:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:14:4E:45:94:64:49:B3:47:9C:7A:00:54:A1:D5:DE:93:4C:82
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0-96.62.36.255
96.62.38.0-96.62.44.255
96.62.46.0/24
96.62.64.0-96.62.68.255
96.62.70.0/24
96.62.102.0/24
96.62.104.0/24
96.62.106.0-96.62.110.255
96.62.112.0/23
96.62.116.0-96.62.126.255
96.62.132.0-96.62.134.255
96.62.136.0/22
96.62.141.0-96.62.143.255
96.62.146.0/23
96.62.160.0/20
96.62.177.0-96.62.179.255
96.62.188.0/23
96.62.196.0/24
96.62.198.0/23
96.62.212.0/23
96.62.215.0/24
96.62.225.0-96.62.226.255
96.62.230.0/24
96.62.236.0-96.62.241.255
96.62.245.0-96.62.246.255
96.62.252.0/24
143.14.146.0/24
143.14.148.0/24
143.14.153.0/24
143.14.155.0/24
143.14.195.0/24
143.14.197.0/24
148.135.193.0/24
155.117.106.0/24
155.117.116.0/24
162.141.37.0-162.141.38.255
162.141.51.0/24
162.141.54.0/24
162.141.103.0/24
162.141.118.0/24
162.141.128.0/23
162.141.155.0/24
162.141.164.0/24
167.148.135.0/24
167.148.138.0/24
167.148.147.0-167.148.148.255
167.148.150.0/24
167.148.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7b:a8:ba:2e:7b:da:a1:53:33:a0:9a:0b:14:94:f7:31:f7:
79:1a:28:68:a2:0e:da:5c:ac:3c:19:c1:1f:4f:0e:f6:3d:ef:
16:e1:62:cb:37:87:a5:7f:9e:e6:76:6e:a2:87:d1:10:85:4d:
94:50:39:40:3a:be:c9:dd:4d:4a:d7:f5:87:ff:a0:94:73:ea:
75:9f:c4:8f:52:62:06:21:ea:3b:4d:1f:5a:b5:4a:94:41:07:
29:33:a4:31:63:46:e4:d0:46:53:27:cd:3d:ee:fa:88:90:52:
e0:8e:b2:7b:e8:11:de:47:3d:4d:90:68:af:ae:70:23:b2:98:
5c:18:26:f5:c5:e1:1a:50:76:db:ba:e6:56:3d:07:33:60:60:
2d:bf:ea:cb:d3:fe:2a:22:74:17:7e:f4:63:37:54:40:97:63:
77:7a:c5:7c:69:1c:df:0f:66:ec:d5:45:41:5c:e5:42:28:43:
78:78:96:c6:ec:24:41:bb:e8:b5:d8:c6:fa:7d:40:b0:a2:20:
8b:d2:4c:b5:c0:ae:1b:c1:bb:93:01:1e:b9:50:84:07:32:dc:
d5:da:b6:0f:c3:33:f3:b7:a3:7e:4d:98:8f:78:8d:a7:df:40:
c0:c9:a1:1a:39:b6:cd:69:d9:ee:ea:8d:a3:4c:4a:e7:4a:21:
a3:71:80:fc
-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIUP3hg8ZB7zJ49z9O9xK2gXLpR1rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MDIxMjEyMDRaFw0yNzA5MDExMjE3MDRaMDMxMTAvBgNV
BAMTKDg0RkMxNDRFNDU5NDY0NDlCMzQ3OUM3QTAwNTRBMUQ1REU5MzRDODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeV6RkHpliiWOByJ67c3PrDPL0
8JRvcxLle5TunZuQFuHTC3xawUYhU9JIQLVrgTWCsI/PfDkOhEituUyjve/SAKxk
lKxPf+9eWuY71mAHRV9Ymn7NKqPao6AAqeefg4U1zgK9lAtWvMdhQorC5sbDdO0a
6ltvmZF1mJ5kw0/qzgoXfcn/0YHpNm1i3jvAAUUf8Y+PVM/Qk4GatqzQdhjnoBMt
rnDGH5Lmns4+KP/vdbzCYdQ4McJnQnoZ1/vADBZ1PYGR/lb+KEjAlBmx88PazWau
8yfJHo2dp3bC54x7Dt7/CQUTjxl52ctsms7soAf/IDyAUZjtj/S8rcOGfOsLAgMB
AAGjggOSMIIDjjAdBgNVHQ4EFgQUhPwUTkWUZEmzR5x6AFSh1d6TTIIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTc0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqAYIKwYBBQUHAQcBAf8EggGXMIIBkzCCAY8EAgABMIIB
hzALAwMBYD4DBABgPiQwDAMEAWA+JgMEAGA+LAMEAGA+LjAMAwQGYD5AAwQAYD5E
AwQAYD5GAwQAYD5mAwQAYD5oMAwDBAFgPmoDBABgPm4DBAFgPnAwDAMEAmA+dAME
AGA+fjAMAwQCYD6EAwQAYD6GAwQCYD6IMAwDBABgPo0DBARgPoADBAFgPpIDBARg
PqAwDAMEAGA+sQMEAmA+sAMEAWA+vAMEAGA+xAMEAWA+xgMEAWA+1AMEAGA+1zAM
AwQAYD7hAwQAYD7iAwQAYD7mMAwDBAJgPuwDBAFgPvAwDAMEAGA+9QMEAGA+9gME
AGA+/AMEAI8OkgMEAI8OlAMEAI8OmQMEAI8OmwMEAI8OwwMEAI8OxQMEAJSHwQME
AJt1agMEAJt1dDAMAwQAoo0lAwQAoo0mAwQAoo0zAwQAoo02AwQAoo1nAwQAoo12
AwQBoo2AAwQAoo2bAwQAoo2kAwQAp5SHAwQAp5SKMAwDBACnlJMDBACnlJQDBACn
lJYDBACnlJkwDQYJKoZIhvcNAQELBQADggEBACp7qLoue9qhUzOgmgsUlPcx93ka
KGiiDtpcrDwZwR9PDvY97xbhYss3h6V/nuZ2bqKH0RCFTZRQOUA6vsndTUrX9Yf/
oJRz6nWfxI9SYgYh6jtNH1q1SpRBBykzpDFjRuTQRlMnzT3u+oiQUuCOsnvoEd5H
PU2QaK+ucCOymFwYJvXF4RpQdtu65lY9BzNgYC2/6svT/ioidBd+9GM3VECXY3d6
xXxpHN8PZuzVRUFc5UIoQ3h4lsbsJEG76LXYxvp9QLCiIIvSTLXArhvBu5MBHrlQ
hAcy3NXatg/DM/O3o35NmI94jaffQMDJoRo5ts1p2e7qjaNMSudKIaNxgPw=
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:08:12 2026 by rpki-client