Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: mCizbX/WdYhuWre4H+30OFv8n9uvBq/nn8yc0Sq/9Ig=
Subject key identifier: FF:96:DF:E0:E8:A6:D8:35:11:2C:2B:71:7D:5B:11:09:12:DA:1F:33
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 79F5CC4EEBFE21294DF519D7E7CE72E7A4C4FED5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
Signing time: Mon 07 Sep 2026 14:39:28 +0000
ROA not before: Mon 07 Sep 2026 14:34:28 +0000
ROA not after: Mon 06 Sep 2027 14:39:28 +0000
asID: 174
IP address blocks: 51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
51.241.62.0/24 maxlen: 24
188.220.89.0/24 maxlen: 24
188.220.100.0/24 maxlen: 24
188.220.108.0/24 maxlen: 24
188.220.184.0/22 maxlen: 24
188.220.188.0/22 maxlen: 24
188.220.244.0/22 maxlen: 24
188.220.252.0/22 maxlen: 24
188.221.4.0/22 maxlen: 24
188.221.24.0/22 maxlen: 24
188.221.48.0/22 maxlen: 24
188.221.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f5:cc:4e:eb:fe:21:29:4d:f5:19:d7:e7:ce:72:e7:a4:c4:fe:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 7 14:34:28 2026 GMT
Not After : Sep 6 14:39:28 2027 GMT
Subject: CN=FF96DFE0E8A6D835112C2B717D5B110912DA1F33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:3e:92:b3:c6:1d:97:ac:76:23:9d:9a:4e:
32:d7:5b:c2:b5:f4:ee:11:0b:ef:52:be:d7:b5:3b:
f9:32:a9:28:6d:5a:e0:20:95:ac:ba:74:64:99:5c:
ac:7e:57:39:37:3f:f4:a8:87:de:d6:ed:27:21:3b:
00:10:87:c5:2f:c9:3f:57:c1:d3:7c:b7:01:09:7b:
57:92:ec:0c:c2:b8:7a:98:6e:ad:65:05:f7:ec:ff:
ff:ea:48:63:f0:a7:fa:7d:95:5b:c1:dc:bb:29:56:
5d:12:f7:72:a3:3a:3e:c0:67:88:3d:17:eb:ed:28:
0b:b4:ec:93:34:a5:0d:6e:f4:07:88:3d:c4:81:0d:
72:71:59:fb:db:3b:62:4d:39:e1:31:45:7a:98:29:
b2:ed:29:d1:df:46:8c:f8:60:43:a1:7c:71:18:6e:
de:41:97:4c:87:30:57:53:e5:96:70:ba:28:d2:3e:
1b:58:66:1a:b4:ad:0a:8b:3a:74:fb:a4:d7:93:44:
86:b7:48:06:c4:fb:ea:0c:5a:7f:64:9f:fe:45:b2:
fd:f9:4a:05:0d:ea:7d:72:83:ef:70:72:77:3b:23:
b6:13:1d:a3:aa:31:b6:ec:7e:fa:25:b6:b0:46:27:
dd:12:67:60:f5:a4:40:9f:dc:b1:f3:bd:ca:79:93:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:DF:E0:E8:A6:D8:35:11:2C:2B:71:7D:5B:11:09:12:DA:1F:33
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.192.0/24
51.194.207.0/24
51.241.62.0/24
188.220.89.0/24
188.220.100.0/24
188.220.108.0/24
188.220.184.0/21
188.220.244.0/22
188.220.252.0/22
188.221.4.0/22
188.221.24.0/22
188.221.48.0/22
188.221.56.0/22
Signature Algorithm: sha256WithRSAEncryption
64:77:21:9f:b9:91:bf:1b:1b:9f:d4:42:89:4f:5e:af:2a:b3:
b4:7e:8c:6f:98:5d:2f:25:03:03:60:9a:d5:d8:b0:29:ce:dc:
4b:87:8b:ae:1e:af:9e:fa:6f:60:91:5e:db:09:ff:67:ad:72:
83:88:73:2e:f3:cb:b9:a4:9e:97:26:2c:a7:37:64:54:9a:9f:
5f:d8:f9:e9:76:f2:f0:fd:5d:af:ea:fe:b6:c3:57:42:1e:6d:
e1:66:b7:4b:55:4d:9a:ad:b2:91:6f:bb:d6:7a:96:be:65:15:
36:1e:d7:26:43:87:ee:bc:47:fb:aa:09:6d:56:fd:78:16:5b:
65:a8:43:ca:22:40:5b:3f:ff:dd:fb:ec:70:b5:e2:0c:c8:09:
b2:ff:4b:5e:2a:36:50:6c:f3:21:00:e0:54:98:92:4b:58:6c:
0f:c1:45:c0:c4:8c:b8:bf:5c:79:00:91:13:8c:79:f5:c2:c9:
6e:5f:b0:d4:9e:44:6e:ac:82:89:9b:b4:15:f8:df:ce:47:9d:
2e:3c:a6:dd:69:d1:2e:af:fb:2d:82:b9:62:63:44:db:59:b5:
f2:72:28:c1:8c:a3:26:40:37:15:c3:5d:7a:c2:08:27:fc:f0:
b4:28:0f:90:51:66:6f:02:50:d8:e4:c2:74:a1:dd:a1:c2:a2:
3a:66:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:31:53 2026 by rpki-client