Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 29kj05d04UmMdhSOlH0u5JE8RxI2gM6VL+8w/Cg0aDQ=
Subject key identifier: FE:44:2D:C1:5C:EA:C1:3A:C0:AF:B1:2F:90:D0:47:71:35:57:2D:5C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5DE52AF3365E8DECC98466AB5C9CA716B5945C20
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Fri 30 Oct 2026 15:07:14 +0000
ROA not before: Fri 30 Oct 2026 15:02:14 +0000
ROA not after: Fri 29 Oct 2027 15:07:14 +0000
asID: 174
IP address blocks: 51.194.191.0/24 maxlen: 24
51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
94.118.108.0/24 maxlen: 24
94.194.104.0/22 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
188.221.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e5:2a:f3:36:5e:8d:ec:c9:84:66:ab:5c:9c:a7:16:b5:94:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 30 15:02:14 2026 GMT
Not After : Oct 29 15:07:14 2027 GMT
Subject: CN=FE442DC15CEAC13AC0AFB12F90D0477135572D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:7b:95:9b:d1:a0:03:3b:45:a8:7c:06:8c:
fc:f0:ea:3d:14:9c:fb:fa:17:52:2f:ab:12:a6:ac:
88:30:d6:c4:c9:15:b3:d1:1c:1c:82:bd:27:ff:be:
93:c1:c9:f5:44:bf:42:5b:d9:b4:28:4d:59:73:63:
46:78:dd:87:8b:75:e5:43:bd:09:e2:5f:72:d4:d1:
1d:ca:b8:80:21:05:fc:66:37:21:cf:9c:1a:13:e8:
5b:13:fe:aa:42:66:d4:52:f2:3e:7b:d4:47:69:bd:
25:c5:31:81:ac:16:ac:65:b4:3e:95:70:17:90:f8:
72:0c:29:a7:bb:a6:da:d0:64:19:a9:69:1a:97:a6:
74:ce:fa:22:e5:52:95:15:93:35:2c:d6:b4:bb:08:
8f:0b:eb:f4:6b:d7:7d:f0:e5:0d:f5:11:7a:29:2d:
66:55:e3:72:32:b5:09:46:e3:34:fe:4f:60:9c:dc:
58:9d:09:63:48:45:0c:73:bd:7d:c5:fc:46:68:fe:
13:19:c1:b0:01:2b:bf:19:97:f3:6b:08:0f:16:ce:
96:bf:b6:1d:db:56:a1:18:8f:69:88:79:d7:3b:05:
c2:85:1b:c6:fe:16:ab:06:18:97:f0:1d:28:21:34:
83:6b:1b:e0:63:68:7e:d5:1a:b7:32:e8:af:64:7a:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:2D:C1:5C:EA:C1:3A:C0:AF:B1:2F:90:D0:47:71:35:57:2D:5C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.191.0-51.194.192.255
51.194.207.0/24
94.118.108.0/24
94.194.104.0/22
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
188.221.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4e:bd:f0:f9:3a:0c:0e:b2:66:be:aa:55:8c:6b:56:65:63:
67:e1:e3:3c:22:34:34:a3:97:40:f0:fc:02:4d:4e:e1:22:3c:
d5:9d:fd:98:72:f1:3c:c5:14:9d:04:fc:b0:aa:cc:18:e2:3b:
79:4d:d9:aa:af:58:16:52:89:e0:cd:8b:84:89:eb:8c:c9:89:
8f:2b:ef:d6:19:12:fe:6e:9e:ed:b8:d4:ac:17:8b:65:3c:15:
a2:b1:17:2f:de:e4:7b:c7:e8:2c:0b:90:9c:1a:d4:bf:32:0e:
a4:6d:59:0b:66:a4:0e:7e:a3:32:19:bb:b3:02:b9:58:c4:b7:
c6:79:8f:44:bb:d0:d3:24:88:7c:3e:13:f3:00:8f:4d:89:d2:
c3:aa:89:39:bd:de:d7:7a:55:4a:47:37:70:10:cf:43:e0:eb:
e6:0f:42:97:5f:67:c1:d9:ba:c4:23:cd:04:f3:4b:5d:2e:60:
cb:da:dd:bb:dc:0c:89:9f:9c:27:b5:39:64:f3:98:84:42:22:
f2:a4:0a:57:ec:c4:41:6b:e7:e4:71:60:6e:ad:3e:51:dc:39:
8c:53:34:e4:47:8b:f3:3f:8b:a9:18:91:ad:d5:1b:b4:bc:b4:
8f:cc:d4:1e:ed:24:86:34:1c:71:c4:fb:25:43:f2:8d:6d:00:
2b:85:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:17:32 2026 by rpki-client