Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: EtahDE97KOXzDNFd/cqaFHXaU/zZF03WrPcUIl/690s=
Subject key identifier: CF:55:FF:77:BB:2A:FB:DB:39:7C:3B:DC:69:0A:87:EF:2E:14:12:9A
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1FD4CD12C0C4B292C43EDCD8AFC23A9AD6A79CA5
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS174.roa
Signing time: Fri 24 Oct 2025 16:12:45 +0000
ROA not before: Fri 24 Oct 2025 16:07:45 +0000
ROA not after: Fri 23 Oct 2026 16:12:45 +0000
asID: 174
IP address blocks: 176.53.157.0/24 maxlen: 24
176.53.159.0/24 maxlen: 24
193.38.44.0/24 maxlen: 24
193.38.45.0/24 maxlen: 24
194.93.61.0/24 maxlen: 24
194.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d4:cd:12:c0:c4:b2:92:c4:3e:dc:d8:af:c2:3a:9a:d6:a7:9c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 24 16:07:45 2025 GMT
Not After : Oct 23 16:12:45 2026 GMT
Subject: CN=CF55FF77BB2AFBDB397C3BDC690A87EF2E14129A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:9f:d0:65:c6:00:e9:23:f9:18:76:b0:1c:
65:e3:49:14:44:53:9d:b1:4d:74:2f:7b:7c:12:da:
b2:6d:12:5a:e3:fd:8f:b4:58:13:2c:ce:4c:2f:81:
29:f4:6a:43:01:9e:29:fe:bb:6d:a6:40:c6:b6:11:
5f:10:8e:78:62:8e:72:f0:14:67:bb:35:2d:5d:d1:
4e:94:00:7e:be:ba:66:b8:3c:da:77:40:a6:cc:cc:
bf:9a:49:c1:c3:b7:75:24:f8:f2:bb:d0:ac:19:4f:
b5:2a:af:6f:56:ba:8f:ba:dd:06:7e:fb:77:72:c6:
5e:59:f2:a9:f0:70:16:e2:49:55:17:25:6d:0f:13:
90:2a:a3:c9:d9:a5:4c:5a:83:15:81:08:69:55:48:
e9:22:c2:1a:c1:bd:e4:f3:96:a8:d0:f2:9d:d1:81:
3b:5f:c6:c3:1f:97:48:0d:99:7d:43:e7:de:b9:9e:
e7:45:fc:ab:99:34:12:f9:63:a9:66:3b:27:1d:9c:
2d:a2:0b:c2:71:86:72:4d:cc:64:92:27:0d:e0:dc:
d8:4f:94:07:cc:f6:94:1d:0b:51:e9:5a:19:7a:18:
48:e9:10:a9:e4:b5:9a:cc:69:38:8e:2f:d9:0e:f1:
b8:d3:84:fb:65:92:26:d3:b2:40:77:ec:b6:9d:fb:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:FF:77:BB:2A:FB:DB:39:7C:3B:DC:69:0A:87:EF:2E:14:12:9A
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.157.0/24
176.53.159.0/24
193.38.44.0/23
194.93.61.0/24
194.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a1:56:b3:84:22:91:98:01:6d:0c:8a:ae:3f:b9:17:ab:51:
5f:b6:7c:c2:85:60:61:7e:d1:c4:0a:fc:ab:82:a9:5d:f0:fa:
cd:3e:81:a9:fd:2a:c8:a5:37:b1:12:98:31:c6:9a:a9:47:48:
6b:1f:5c:4f:16:b5:71:aa:fb:37:ca:eb:89:ab:7f:6b:0c:50:
dc:8e:54:38:74:a8:0e:cd:3e:02:8c:dd:df:54:a5:b9:53:e2:
2e:27:39:81:0d:dd:d1:6d:3b:9f:ba:ae:15:b8:47:97:9c:ed:
83:ec:44:1b:b9:d8:b9:43:c4:1c:0a:02:ab:01:26:70:d1:2a:
c9:dd:c8:ae:ac:e1:76:4c:6a:e6:e8:d2:07:ea:b1:63:24:73:
26:33:fc:78:1a:48:36:b5:d8:ee:b9:ae:b1:4a:ba:5e:e5:86:
1e:38:69:54:32:4e:67:88:69:7b:79:c6:8d:d6:98:20:cf:ff:
09:f6:89:48:fd:a7:af:b8:15:e3:2a:7f:99:0e:68:19:3d:e6:
1c:f0:fe:ce:a8:2c:0d:ef:74:a9:d5:91:00:9e:7e:28:cf:46:
88:8c:81:c0:bd:d9:f4:ab:bd:1c:7c:3a:a5:60:31:b3:19:ef:
0c:4a:4a:75:5c:3f:5d:f0:49:4d:5a:8f:82:6b:2a:09:23:3f:
82:e0:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:43 2025 by rpki-client