Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/fJDlavYr0-NMC00ttEvY72-2RT4.roa
File: fJDlavYr0-NMC00ttEvY72-2RT4.roa (raw, json)
Hash identifier: yNHRWjXk0fcz5wbO2o3VOi+H81xn7Ikg9L039EJvkuA=
Subject key identifier: 7C:90:E5:6A:F6:2B:D3:E3:4C:0B:4D:2D:B4:4B:D8:EF:6F:B6:45:3E
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019C0E6B4889311902B61AD4DBA7E2603D1F
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/fJDlavYr0-NMC00ttEvY72-2RT4.roa
Signing time: Fri 30 Jan 2026 10:20:37 +0000
ROA not before: Fri 30 Jan 2026 10:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:6b:48:89:31:19:02:b6:1a:d4:db:a7:e2:60:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jan 30 10:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c90e56af62bd3e34c0b4d2db44bd8ef6fb6453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:04:fc:4c:7d:fd:03:cb:e5:46:59:f7:c6:
69:90:4c:31:ad:a2:e9:7a:27:5d:e3:25:34:4e:26:
24:7d:64:e5:ea:be:11:4a:00:32:90:f9:52:ed:d8:
36:ed:a6:f7:c8:dc:27:ad:32:bd:61:a3:f3:09:b7:
66:6a:0a:0d:a5:73:24:dc:66:a5:20:d0:32:72:de:
e7:67:6f:ff:ca:0c:1d:a1:72:13:64:78:a3:d2:a2:
48:97:47:9d:8e:40:23:a8:e7:cd:eb:e7:21:7c:90:
47:d1:a8:57:0d:60:1a:58:52:e2:01:4f:6d:af:9a:
ce:0d:22:82:64:46:0e:82:16:14:80:00:9e:20:1b:
f0:18:e4:ab:75:82:f2:07:46:5b:12:a8:81:80:f5:
93:25:7e:d9:7c:eb:46:bb:76:fa:4d:e7:33:30:2f:
df:73:3a:27:33:e2:90:93:23:32:e8:ad:85:c9:a8:
97:54:ff:71:c5:37:d3:72:86:05:6f:a5:de:c5:91:
ce:7e:69:e3:a3:91:dc:93:98:f1:6a:c1:11:a8:fa:
6a:b0:55:a2:08:e9:bd:a5:77:51:dc:e3:86:e7:d1:
63:95:68:65:bf:49:1b:ff:9d:cb:3b:ca:f1:ce:ad:
25:37:87:96:96:1f:67:28:36:66:58:48:ad:69:3c:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:E5:6A:F6:2B:D3:E3:4C:0B:4D:2D:B4:4B:D8:EF:6F:B6:45:3E
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/fJDlavYr0-NMC00ttEvY72-2RT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/24
178.210.165.0/24
178.210.168.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
98:6b:7a:1c:a4:51:90:f0:c7:d8:5d:dc:05:f0:f3:5e:98:c4:
6b:de:4d:2a:2a:32:de:64:1f:f1:36:5f:94:79:d3:fa:6b:63:
39:db:5e:60:5e:7b:ac:4a:21:d2:95:b7:2b:25:03:d4:22:65:
4c:de:72:c8:ca:65:55:c4:a0:46:bf:ba:fa:de:73:a5:ca:ac:
28:63:ba:8e:d6:43:f8:f2:f9:c9:b2:58:aa:24:fe:30:71:35:
bd:a9:93:0d:47:a8:f5:10:e4:09:1c:a0:58:ac:2e:28:d5:cb:
9f:b2:b9:11:df:d4:8f:b6:45:72:57:b6:58:c1:18:18:2e:a6:
b3:4c:c9:91:db:e3:8e:72:40:17:75:a5:7f:fb:57:c3:bf:bc:
e3:f7:36:3b:fb:5b:69:96:3a:dd:38:be:eb:b4:4a:16:fa:91:
11:3a:2b:7e:14:93:fd:45:e1:85:2e:53:a1:3a:7b:bc:07:c7:
70:de:71:a1:82:94:82:3e:41:7a:64:fb:a7:c7:a0:84:92:7e:
00:0a:91:5c:ed:b9:be:df:e5:bd:93:b1:55:c1:71:e2:d0:e9:
4f:89:99:31:72:91:61:cf:32:e3:05:17:0b:67:41:ef:74:74:
ac:ef:fc:25:48:a1:32:2d:29:5c:ea:58:3a:28:21:7f:ae:c3:
01:7d:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:50 2026 by rpki-client