Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/MLjbVMiRwhEAuiBClDq7yIq_Cco.roa
File: MLjbVMiRwhEAuiBClDq7yIq_Cco.roa (raw, json)
Hash identifier: qjQLREPR53G7Hkk3HqQsejh4IBaZHidcZlNtBnhEo4U=
Subject key identifier: 30:B8:DB:54:C8:91:C2:11:00:BA:20:42:94:3A:BB:C8:8A:BF:09:CA
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019C0E6B47EC1394542D165E26BC5DC0A4BA
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/MLjbVMiRwhEAuiBClDq7yIq_Cco.roa
Signing time: Fri 30 Jan 2026 10:20:37 +0000
ROA not before: Fri 30 Jan 2026 10:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:6b:47:ec:13:94:54:2d:16:5e:26:bc:5d:c0:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jan 30 10:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30b8db54c891c21100ba2042943abbc88abf09ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:25:6b:83:7b:37:34:90:67:b8:90:5b:39:
02:13:a7:bb:9e:75:42:33:3c:f2:dd:47:50:f9:0b:
67:7c:99:b2:95:97:48:92:ba:ba:f7:22:81:4f:29:
15:a5:95:ca:e0:7b:c1:da:65:f0:02:e6:51:cf:d7:
45:1d:bd:52:3a:3f:a2:0d:ff:28:a9:52:d0:7d:76:
1b:3e:b0:9d:bf:2f:20:88:89:e2:7a:de:7e:ee:2b:
05:ca:f5:b9:2e:3b:5d:38:4c:9c:6b:e0:1b:1c:69:
8d:23:eb:7e:69:17:f6:d8:e9:3d:ac:71:73:e9:b8:
4f:7c:d6:e6:94:76:93:2b:6a:09:93:79:f1:c6:fe:
bc:e7:51:6c:fb:69:d1:82:79:ab:b6:48:39:77:71:
a7:45:7f:7f:75:e0:4e:52:38:87:c6:96:42:60:65:
2f:5c:82:0d:5b:7c:45:23:5f:b6:0a:b2:ed:f3:83:
91:00:4c:41:10:fb:d0:50:dd:c3:63:81:8a:49:90:
52:0f:f2:4f:95:02:16:67:f0:42:f0:82:dd:14:df:
b4:3f:9a:31:4a:10:10:05:65:a1:e7:78:19:59:ea:
45:50:b1:bf:34:2b:ad:1e:0a:b7:27:0c:f9:b3:a5:
8b:e8:a5:de:bb:6c:1b:7d:9b:05:c0:2e:96:f2:21:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:DB:54:C8:91:C2:11:00:BA:20:42:94:3A:BB:C8:8A:BF:09:CA
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/MLjbVMiRwhEAuiBClDq7yIq_Cco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/24
178.210.165.0/24
178.210.168.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
79:e8:98:56:27:96:0d:4e:30:75:f2:80:4f:ed:9e:2a:45:a3:
52:8d:62:fb:c7:68:a4:00:4d:9b:e9:e2:eb:f9:2d:60:ed:ed:
53:cc:fa:a4:4d:af:74:6a:fe:f3:2d:27:2c:ec:e5:e1:60:fd:
ff:b8:f4:d9:7d:fe:b2:71:5d:78:ac:93:61:7f:58:48:26:42:
7a:6c:0a:66:46:d8:91:2d:03:c9:51:cb:71:c9:2c:5d:00:91:
46:ec:1c:25:f9:96:74:61:ee:b6:51:d9:bb:ed:c6:d8:7f:19:
be:54:b9:78:84:e4:e3:29:71:26:f2:d4:d0:28:ed:34:4e:f1:
2d:bb:8b:96:58:9a:58:96:60:f0:bb:2b:64:22:88:2a:d0:91:
e4:65:e8:14:fb:8d:f1:81:ec:bd:63:14:35:1e:dd:01:c2:a1:
e0:59:54:c9:d2:7f:16:66:69:3b:e3:fa:8c:60:f9:15:0a:87:
63:92:bb:32:42:9b:29:4e:a4:ab:49:ea:99:9d:2b:36:32:34:
99:ed:ea:84:e3:21:5d:ac:7e:a3:8f:ee:72:b9:1e:b8:ba:c7:
8d:bf:7d:70:6d:c7:fb:6d:df:e3:c9:d6:ee:6b:c2:4d:7a:0a:
95:49:76:80:1d:2e:94:8d:2d:67:5c:0e:2a:76:11:fc:9d:c3:
63:f8:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:18 2026 by rpki-client