Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa
File: GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa (raw, json)
Hash identifier: pErOAng/hMAVplt5BEW7zkhrPBcrawDRAlwBfNH3YGU=
Subject key identifier: 18:F1:93:80:5C:22:62:C5:49:59:B4:AA:3B:5F:95:CB:86:00:E7:E5
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019D8656CE514A0C1C28CC8EACC34DFAE300
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa
Signing time: Mon 13 Apr 2026 10:15:28 +0000
ROA not before: Mon 13 Apr 2026 10:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:56:ce:51:4a:0c:1c:28:cc:8e:ac:c3:4d:fa:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Apr 13 10:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f193805c2262c54959b4aa3b5f95cb8600e7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:0e:37:f2:ea:e5:05:f1:79:a0:10:9d:74:
e2:65:56:ca:53:0d:6d:de:45:9b:b1:35:0b:9b:2d:
ea:cf:98:b0:ec:ab:fb:70:5f:40:7c:82:a7:8d:36:
77:7f:d8:1a:5c:51:5d:2a:2d:a6:ff:42:4a:b1:54:
15:52:01:ac:49:25:1c:4a:3f:66:d5:33:49:86:e3:
23:fa:ca:d6:73:30:f5:3b:fd:58:79:30:14:7f:aa:
a8:cb:17:6e:6d:0b:5e:49:ca:5a:4c:f4:cc:1b:fa:
df:d0:93:56:ac:25:a5:3e:0b:92:02:ee:80:43:36:
90:4c:f6:5b:2d:35:57:be:a8:9b:05:a7:3a:30:60:
fc:19:ad:9f:5e:0c:46:5b:26:94:34:62:b3:82:73:
1f:35:0f:cf:8f:1e:bd:d4:0d:52:60:3f:ba:b8:da:
06:fe:67:77:50:db:2c:ae:a4:1c:47:7d:6d:e3:71:
6c:58:41:f0:5f:ad:06:03:f7:82:e1:17:80:b0:66:
88:c6:95:bd:0c:5b:3c:33:15:7e:52:08:d1:b1:f4:
20:e6:4e:b2:c5:32:a7:6e:fc:93:01:29:26:0b:73:
5f:9f:0f:0c:26:6c:e0:36:ea:c3:4d:56:4a:7b:5d:
53:a4:c0:c6:57:eb:53:b1:15:8f:1e:29:f0:ef:86:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:93:80:5C:22:62:C5:49:59:B4:AA:3B:5F:95:CB:86:00:E7:E5
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/24
178.210.165.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
a3:d7:1a:cd:13:5e:11:c1:05:d0:5c:1d:8a:9a:db:2b:ca:e3:
a0:f2:85:cd:57:a0:8d:10:31:b0:b6:5a:e7:e1:42:f9:25:42:
53:be:35:e2:a7:8d:05:86:d0:9d:48:0f:7f:58:79:78:bc:7c:
5b:03:d1:54:aa:51:d1:a2:9f:d8:5d:0e:91:5c:37:1e:34:73:
7a:34:8a:8f:33:9b:4e:73:39:ed:02:cd:26:fe:9c:38:4a:30:
2b:00:10:a5:86:a2:0f:72:92:da:ee:0d:6b:d3:73:4c:92:2d:
42:c8:16:b3:95:24:2f:5e:2e:53:e1:6a:4a:db:ec:f4:c1:f0:
13:b0:17:c9:09:4f:b7:d4:5c:7f:a3:bc:1b:27:87:aa:7d:06:
83:8d:12:58:00:80:e5:6e:fd:76:90:10:f5:80:79:16:97:46:
7e:07:3f:39:2d:ee:6c:b3:76:09:13:09:65:f8:2a:ad:63:ef:
46:e2:f2:09:ce:78:a0:d3:0f:d7:cf:c4:d7:bd:38:e1:e6:b0:
90:06:b9:b3:04:c5:84:e9:fe:72:09:69:95:ea:4c:44:59:7c:
79:6d:cb:4d:bd:a2:1f:d7:28:7d:8c:bb:c3:94:01:0d:40:ce:
bb:1c:82:cc:c7:69:17:52:ab:71:7c:6f:30:3a:67:db:48:b7:
ec:c4:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:49 2026 by rpki-client