Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: dThQguHakaTBMKpwoWRlrVr/vRHPegSu2Xogw9c41fU=
Subject key identifier: AE:28:EB:51:34:F3:5C:C4:EF:72:C1:4E:A2:3C:A4:5F:27:5A:06:A8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E95A6C61A3E1A5C4A0A3B676C24B1534FF94EE7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
Signing time: Thu 10 Sep 2026 10:31:46 +0000
ROA not before: Thu 10 Sep 2026 10:26:46 +0000
ROA not after: Thu 09 Sep 2027 10:31:46 +0000
asID: 174
IP address blocks: 82.47.24.0/23 maxlen: 24
82.47.190.0/24 maxlen: 24
82.47.208.0/24 maxlen: 24
82.47.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:95:a6:c6:1a:3e:1a:5c:4a:0a:3b:67:6c:24:b1:53:4f:f9:4e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 10:26:46 2026 GMT
Not After : Sep 9 10:31:46 2027 GMT
Subject: CN=AE28EB5134F35CC4EF72C14EA23CA45F275A06A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:96:9a:84:dd:ed:6c:76:83:48:4d:fb:7d:
cc:e5:11:ed:43:4d:49:be:0a:a5:ba:6c:8c:9a:47:
91:f5:37:4e:db:a4:e0:e9:f1:67:70:ba:61:94:61:
44:75:23:45:69:e0:19:9f:f3:c2:bd:57:6d:5e:73:
c1:79:39:39:48:3b:2d:bc:40:23:9f:09:ca:90:f2:
d9:df:1d:e7:7a:e4:94:c5:6f:75:de:71:37:ac:d4:
c1:6a:5e:b5:1c:a2:80:a6:65:60:96:c5:da:e0:28:
ec:a2:54:7c:2e:aa:d4:ca:f3:12:56:aa:2e:4d:20:
9a:c7:1f:10:c9:18:95:08:2d:5a:c9:bc:c3:d4:e6:
4b:af:23:fb:35:cf:2e:3d:3d:64:c8:ce:cb:dc:4b:
e9:8d:44:3e:f4:84:9d:8b:86:7e:eb:25:ef:26:bd:
86:5f:c3:b1:8d:20:da:31:0c:aa:8b:34:02:24:40:
2f:74:a2:ea:cf:04:49:c0:4a:4c:cb:d9:5f:df:1a:
cf:d7:cf:63:99:9c:69:27:bd:4d:77:8f:1c:87:b5:
e1:aa:be:f8:7a:2e:65:79:64:f5:8d:9e:36:dd:68:
99:14:a8:ea:e7:04:96:5a:0c:85:8a:ea:90:0f:d4:
a5:1e:6c:fa:ec:4a:83:6b:89:74:31:6d:fe:a4:40:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:EB:51:34:F3:5C:C4:EF:72:C1:4E:A2:3C:A4:5F:27:5A:06:A8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.24.0/23
82.47.190.0/24
82.47.208.0/24
82.47.228.0/24
Signature Algorithm: sha256WithRSAEncryption
18:44:64:67:08:20:3e:e0:60:79:31:f1:c7:c4:a9:09:0d:0d:
3f:ca:3c:85:b7:3f:99:11:ab:78:cc:ff:86:34:b0:68:5d:ba:
3f:f9:8c:d6:a4:59:bc:10:87:90:af:17:b9:56:ac:9a:73:c3:
5e:b1:98:8e:cd:8f:fb:d2:20:db:c8:11:98:32:fa:84:bb:89:
25:88:51:73:f6:3d:e3:43:79:3d:99:6e:d2:fc:43:04:f6:cc:
05:16:3c:19:1a:3d:52:f9:08:c3:4f:f5:17:e4:2c:29:2d:e3:
e6:12:00:b9:1e:48:75:38:15:c0:bd:25:93:0a:91:4d:7e:9a:
fa:03:c6:40:0b:38:e5:7b:96:82:38:ac:59:8b:00:5e:da:de:
3e:6e:3e:6a:27:df:f9:46:b0:9d:eb:60:aa:22:41:aa:21:1b:
6a:b8:3a:87:fa:6e:61:36:9c:ca:72:f7:93:a1:63:28:4c:ef:
b0:59:ca:6d:30:52:8a:b0:53:78:27:af:f1:a3:4d:0f:8c:82:
27:d6:17:e7:ac:88:0c:3f:54:db:7d:57:2d:14:22:b8:6d:39:
72:48:66:24:45:7e:65:7f:d0:17:fd:85:d6:5e:8e:83:c3:44:
b6:de:41:8c:d8:67:e2:2f:c7:05:13:d9:7c:10:8e:ae:82:dd:
3b:ce:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:40 2026 by rpki-client