Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: tOMbGt2tnwvpt5gb/nComOvIB1OHhl7FWom72uaaCJY=
Subject key identifier: 1A:35:93:52:26:6A:E0:F2:67:BA:AF:27:D7:39:AC:C4:66:AF:7A:5C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 14E3CADA01FAD942783F58DC5D3B8CDFF0318B63
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time: Sun 20 Sep 2026 00:00:54 +0000
ROA not before: Sat 19 Sep 2026 23:55:54 +0000
ROA not after: Sun 19 Sep 2027 00:00:54 +0000
asID: 174
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.85.0/24 maxlen: 24
46.202.86.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
91.124.17.0/24 maxlen: 24
91.124.68.0/22 maxlen: 22
91.124.72.0/22 maxlen: 22
91.124.76.0/22 maxlen: 22
91.124.100.0/22 maxlen: 22
91.124.108.0/22 maxlen: 22
91.124.212.0/22 maxlen: 22
91.124.224.0/22 maxlen: 22
92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.94.127.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e3:ca:da:01:fa:d9:42:78:3f:58:dc:5d:3b:8c:df:f0:31:8b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 19 23:55:54 2026 GMT
Not After : Sep 19 00:00:54 2027 GMT
Subject: CN=1A359352266AE0F267BAAF27D739ACC466AF7A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:f1:c4:5d:5f:b4:81:6d:06:99:24:bc:c6:
6b:79:ed:0c:24:86:ad:9d:4e:4e:aa:5a:97:8c:25:
21:23:3c:8a:e3:03:a1:81:10:53:e4:f4:c8:8d:f4:
47:a0:fb:a8:5e:cd:d5:ed:c6:53:b8:43:71:04:22:
3d:b3:42:ba:3e:82:f3:88:23:69:af:c8:a6:78:3c:
76:89:4e:f3:ec:15:f1:e1:71:31:87:24:d3:ed:ba:
25:db:0e:3e:bf:c3:67:7d:3b:91:1a:19:53:60:d0:
31:73:3c:ee:cc:3c:ff:63:31:a1:de:d7:6a:f0:51:
84:41:6b:66:65:d6:bb:8b:d8:66:d2:23:3c:14:51:
36:98:0d:b7:50:cb:37:56:0f:3e:fb:c8:11:32:25:
6f:3d:ef:ea:b0:8f:17:cb:7b:8e:f4:55:57:77:2f:
a6:e0:f8:6b:8c:0e:be:2c:37:95:f0:a8:43:df:8f:
f1:74:16:30:16:f5:35:fb:7f:20:53:d3:2e:64:90:
a7:8f:8e:78:e4:e3:2f:14:46:79:00:04:9e:b3:7d:
bd:ae:d6:4a:a5:48:df:00:1e:e7:06:cc:15:36:e5:
02:a0:f6:c5:e6:39:96:16:19:90:8b:4c:e2:63:83:
b8:f6:d7:bc:41:8a:16:66:66:2d:07:db:ac:fa:60:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:93:52:26:6A:E0:F2:67:BA:AF:27:D7:39:AC:C4:66:AF:7A:5C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.85.0-46.202.86.255
46.203.148.0/24
46.203.178.0/24
91.124.17.0/24
91.124.68.0-91.124.79.255
91.124.100.0/22
91.124.108.0/22
91.124.212.0/22
91.124.224.0/22
92.113.70.0-92.113.72.255
92.113.160.0/24
95.134.12.0/22
95.134.79.0-95.134.80.255
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.151.0/24
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.45.0/24
178.94.127.0/24
178.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f8:ee:57:af:44:72:67:89:10:98:25:4b:b9:48:d0:c4:40:
34:6d:e8:f8:59:12:4e:69:d6:6b:3f:ab:d7:0e:6f:ff:05:0b:
e5:06:2e:aa:40:de:e6:28:64:df:38:c9:1a:e8:2e:bd:21:d1:
7a:9c:5a:2d:22:e4:50:83:c7:c6:53:4f:80:ab:d5:ff:b9:63:
cd:f0:f3:8b:96:d3:42:c7:a1:72:ce:d7:5e:db:32:82:b1:56:
e2:c3:46:a3:91:4b:be:7d:6a:62:24:04:5d:c6:d0:d8:87:92:
87:73:57:5b:cb:cd:58:11:91:66:95:cc:ec:07:39:e7:ce:7a:
e8:72:b3:8d:b6:95:b4:2a:3c:12:3f:0d:80:31:62:cb:12:c0:
da:10:86:88:10:30:10:7a:77:80:44:44:65:a7:88:18:8b:d3:
23:db:73:78:e1:bd:2f:19:f5:34:e9:59:d7:a4:5e:8d:c4:78:
79:aa:65:78:a6:fc:c8:8a:ca:ae:67:63:ac:de:a9:3b:c7:71:
ee:c8:47:71:5f:69:22:34:a8:4e:35:e2:86:8d:bc:05:96:bb:
fb:ec:d1:a0:be:16:d6:be:f3:8d:65:bf:91:26:e9:5f:27:66:
89:20:5f:cc:35:81:58:d0:5f:14:dd:ee:4f:85:6f:5d:6b:34:
7a:23:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:08:08 2026 by rpki-client