Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: cbiirfuqQIti807dRSGouYMLuvS/iXGsyBXBKqgmzhk=
Subject key identifier: C9:30:8B:09:F3:E1:07:CC:21:C3:81:A9:03:5C:B9:68:BE:A7:75:26
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 68B8AEB0A434EA9592FE425A33EF58A4A2FBDD1B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS174.roa
Signing time: Sat 01 Aug 2026 00:13:10 +0000
ROA not before: Sat 01 Aug 2026 00:08:10 +0000
ROA not after: Sat 31 Jul 2027 00:13:10 +0000
asID: 174
IP address blocks: 179.61.197.0/24 maxlen: 24
181.41.202.0/24 maxlen: 24
181.41.206.0/24 maxlen: 24
181.214.153.0/24 maxlen: 24
181.214.173.0/24 maxlen: 24
191.96.36.0/24 maxlen: 24
191.96.106.0/24 maxlen: 24
191.96.150.0/24 maxlen: 24
191.96.168.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
191.101.31.0/24 maxlen: 24
191.101.61.0/24 maxlen: 24
191.101.157.0/24 maxlen: 24
191.101.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b8:ae:b0:a4:34:ea:95:92:fe:42:5a:33:ef:58:a4:a2:fb:dd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 1 00:08:10 2026 GMT
Not After : Jul 31 00:13:10 2027 GMT
Subject: CN=C9308B09F3E107CC21C381A9035CB968BEA77526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:01:bb:3b:43:d3:41:50:46:45:a9:7a:9d:
3d:ea:bd:5f:20:eb:cc:da:e5:f7:78:aa:e2:61:ad:
45:f8:7e:39:11:5b:62:c4:39:6c:29:d3:2b:00:bc:
9f:e3:49:e9:eb:c6:fe:68:8f:30:15:d5:36:dc:f7:
6a:4c:07:9d:4b:b6:8b:16:47:84:a4:e1:f6:d8:f3:
a6:a9:67:69:8f:73:98:10:ba:d8:30:46:90:29:96:
46:e8:ac:a8:43:2b:6b:c2:87:a9:06:d7:f2:81:54:
95:ab:bf:ee:dd:1e:7f:c5:bc:7b:a7:91:24:29:cc:
74:d6:40:a0:11:d9:8b:9e:b2:b5:ea:c0:7d:0a:91:
f4:c3:5b:0f:bd:5b:ee:35:82:f6:4f:f2:e8:43:bc:
1d:c5:a9:66:93:43:b3:09:0f:9a:43:60:58:d4:b3:
e1:8d:e2:82:82:d2:81:ee:d0:8d:ca:60:c4:db:df:
93:17:ee:aa:a9:d6:3d:22:ef:a5:cc:97:06:fc:df:
2d:0c:9f:6e:b4:a3:30:79:06:64:db:cc:d3:78:43:
bf:7b:b0:06:f8:2f:fc:c5:48:9e:b4:eb:cf:6d:f5:
79:8c:c9:59:7a:85:a6:f8:30:df:10:71:70:36:28:
cc:af:26:f3:26:7d:92:72:ed:0f:31:ee:13:c9:65:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:30:8B:09:F3:E1:07:CC:21:C3:81:A9:03:5C:B9:68:BE:A7:75:26
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.197.0/24
181.41.202.0/24
181.41.206.0/24
181.214.153.0/24
181.214.173.0/24
191.96.36.0/24
191.96.106.0/24
191.96.150.0/24
191.96.168.0/24
191.96.227.0/24
191.101.31.0/24
191.101.61.0/24
191.101.157.0/24
191.101.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ec:e4:ca:c0:11:ad:2a:8d:e6:5b:aa:68:65:cd:aa:43:de:
32:af:25:74:a9:09:f9:9b:02:e2:2e:f9:10:b3:fb:cd:a0:07:
c8:aa:87:48:10:97:13:27:ae:13:42:29:ad:b8:00:71:5b:4b:
4f:02:42:8f:60:fd:8e:e4:80:60:77:78:da:7a:9a:d7:f3:00:
d6:28:5e:df:14:66:cf:8b:bd:82:f6:0c:0f:65:22:48:60:b1:
26:db:f1:fb:7e:6e:30:c9:dc:a8:d6:55:6b:27:d7:2b:18:c7:
d3:f2:b9:2b:aa:3e:54:75:09:5f:52:8a:e4:3b:3f:23:04:f5:
f4:91:24:76:65:e7:07:04:2c:5f:fa:41:fe:63:03:99:04:06:
d0:7c:7f:c5:e4:46:f5:fc:6d:e1:6d:0c:f5:6e:54:11:71:cc:
1a:0e:07:75:ab:ac:ec:2c:78:35:ca:a0:6c:d5:64:25:7c:45:
72:66:28:34:31:02:55:c8:95:fa:65:4b:0f:75:a4:43:4f:e7:
c7:31:44:ac:d6:5b:50:f4:c5:57:76:63:73:0b:2d:8f:db:39:
41:7d:2e:f3:8a:58:15:33:ab:3d:86:04:a3:c7:84:46:46:2e:
60:78:89:68:62:bb:be:97:f8:80:ce:b2:f0:0c:70:9a:4b:0f:
7e:98:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:57 2026 by rpki-client