Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: i14w+umZjQpm67fOecD1Jcr6AbYoE2CdZVqJ38Yr9d0=
Subject key identifier: 0F:DA:BF:1A:AF:53:CD:ED:9B:6C:33:1E:71:68:87:DF:11:AB:F2:C5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5A9683E8ED5280A6C78A6F6CBBE926F4CD81C922
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
Signing time: Fri 06 Nov 2026 15:58:12 +0000
ROA not before: Fri 06 Nov 2026 15:53:12 +0000
ROA not after: Fri 05 Nov 2027 15:58:12 +0000
asID: 174
IP address blocks: 46.202.35.0/24 maxlen: 24
46.202.85.0/24 maxlen: 24
46.202.86.0/24 maxlen: 24
46.202.218.0/24 maxlen: 24
46.202.226.0/24 maxlen: 24
46.203.148.0/24 maxlen: 24
46.203.178.0/24 maxlen: 24
91.124.68.0/22 maxlen: 22
91.124.72.0/22 maxlen: 22
91.124.76.0/22 maxlen: 22
91.124.100.0/22 maxlen: 22
91.124.108.0/22 maxlen: 22
91.124.212.0/22 maxlen: 22
91.124.224.0/22 maxlen: 22
92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
95.134.12.0/24 maxlen: 24
95.134.13.0/24 maxlen: 24
95.134.14.0/24 maxlen: 24
95.134.15.0/24 maxlen: 24
95.134.79.0/24 maxlen: 24
95.134.80.0/24 maxlen: 24
95.134.88.0/24 maxlen: 24
95.134.95.0/24 maxlen: 24
95.134.128.0/24 maxlen: 24
95.134.134.0/24 maxlen: 24
95.134.151.0/24 maxlen: 24
95.135.104.0/24 maxlen: 24
95.135.154.0/24 maxlen: 24
95.135.155.0/24 maxlen: 24
95.135.168.0/24 maxlen: 24
95.135.232.0/24 maxlen: 24
95.135.238.0/24 maxlen: 24
95.135.242.0/24 maxlen: 24
178.92.45.0/24 maxlen: 24
178.94.127.0/24 maxlen: 24
178.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:96:83:e8:ed:52:80:a6:c7:8a:6f:6c:bb:e9:26:f4:cd:81:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 6 15:53:12 2026 GMT
Not After : Nov 5 15:58:12 2027 GMT
Subject: CN=0FDABF1AAF53CDED9B6C331E716887DF11ABF2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:d0:6c:9e:e8:7f:01:83:77:2c:45:59:24:
9d:06:ec:34:a2:b9:9f:1e:ac:3d:69:dd:ad:03:1a:
0f:f6:24:b0:73:cd:49:93:f9:30:53:97:ed:15:de:
58:4f:3e:4c:07:c1:68:89:25:96:4b:e1:d6:d2:ac:
e3:6a:77:13:82:f6:3b:01:e9:42:d9:76:8c:eb:9f:
b0:7d:7a:f7:86:8d:50:f1:07:20:e7:70:a0:05:7e:
dc:5e:3c:89:80:ab:3c:08:b1:a7:49:bb:26:95:f7:
7f:04:41:69:9c:d7:35:74:94:35:07:4a:e4:84:08:
dc:09:04:82:10:07:b4:85:55:2f:6e:a4:54:b4:07:
04:2f:7b:9a:fe:dc:5a:30:f7:47:e0:f7:78:ad:bc:
ea:66:19:6b:ac:f4:ac:39:17:f4:66:a0:45:8e:a2:
17:61:1b:84:27:96:5f:d6:f1:8d:61:cf:30:97:df:
55:ce:62:92:e0:3c:3d:20:8b:79:d7:54:5f:fe:7f:
d7:cf:55:90:68:94:4d:bf:4c:2a:70:de:c2:88:f8:
77:6f:8f:85:12:de:ee:50:22:8b:a0:ae:98:07:52:
41:75:ec:b1:27:89:ef:8e:7f:f7:5a:a3:19:aa:79:
28:2d:dd:db:13:67:39:a8:00:15:70:2b:81:2c:ce:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:BF:1A:AF:53:CD:ED:9B:6C:33:1E:71:68:87:DF:11:AB:F2:C5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.35.0/24
46.202.85.0-46.202.86.255
46.202.218.0/24
46.202.226.0/24
46.203.148.0/24
46.203.178.0/24
91.124.68.0-91.124.79.255
91.124.100.0/22
91.124.108.0/22
91.124.212.0/22
91.124.224.0/22
92.113.70.0-92.113.72.255
92.113.160.0/24
95.134.12.0/22
95.134.79.0-95.134.80.255
95.134.88.0/24
95.134.95.0/24
95.134.128.0/24
95.134.134.0/24
95.134.151.0/24
95.135.104.0/24
95.135.154.0/23
95.135.168.0/24
95.135.232.0/24
95.135.238.0/24
95.135.242.0/24
178.92.45.0/24
178.94.127.0/24
178.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9e:d0:3c:56:5b:b3:c6:c8:42:26:da:ef:f2:f7:d9:72:b2:
84:0e:8e:21:ef:2a:6a:ae:79:a7:0e:e0:7b:7c:f1:6f:2c:3d:
2c:1e:a6:08:62:04:cf:af:ed:6b:7b:38:06:29:46:17:42:7c:
b7:8d:a4:16:6d:45:19:27:0c:16:ba:05:6e:90:ad:03:93:2e:
ce:59:a6:04:56:94:24:13:b4:1d:6f:f3:e3:13:7c:0e:49:d2:
58:05:65:ba:35:a3:68:c5:92:c6:61:e7:cf:9e:f2:fc:bd:ac:
c6:cb:d6:25:41:d0:31:c0:97:68:72:5d:48:8d:88:ab:52:5a:
7e:4c:ec:89:81:bc:f5:56:82:71:ff:02:8a:a0:ba:b9:af:68:
c7:92:9d:ec:22:78:e5:d5:f8:3f:24:86:eb:36:47:45:eb:94:
64:de:27:1f:ee:f1:d7:1f:b2:45:a8:45:59:ed:13:4d:f0:c4:
9f:22:fe:f9:1e:cf:74:1f:03:7f:5b:4c:54:2a:63:01:eb:9e:
29:67:42:f9:34:f5:73:72:3b:52:ba:d7:15:77:de:f1:c9:c8:
c9:b9:45:df:5a:d9:a7:5b:d3:97:0f:e4:bb:5f:15:b4:07:49:
33:d3:cc:01:cc:82:22:d8:bd:6a:b6:e5:50:08:e7:55:93:2f:
15:d8:51:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 8 05:15:29 2026 by rpki-client