Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/tLFRg_bTx97O6i5WBrjpjR1Uclg.roa
File: tLFRg_bTx97O6i5WBrjpjR1Uclg.roa (raw, json)
Hash identifier: tAKe6SFpNg6TVOf+ij5N/AwpZZGW6IDo9qGmcBBSkj4=
Subject key identifier: B4:B1:51:83:F6:D3:C7:DE:CE:EA:2E:56:06:B8:E9:8D:1D:54:72:58
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019D8656CCFA894AEDD9FB7EEF65EC27906B
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/tLFRg_bTx97O6i5WBrjpjR1Uclg.roa
Signing time: Mon 13 Apr 2026 10:15:28 +0000
ROA not before: Mon 13 Apr 2026 10:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:56:cc:fa:89:4a:ed:d9:fb:7e:ef:65:ec:27:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Apr 13 10:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4b15183f6d3c7deceea2e5606b8e98d1d547258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:8b:2b:c8:0a:12:a5:66:fa:0a:b4:89:fa:
f0:6c:fa:d0:c4:10:76:1d:cf:73:a5:71:96:8f:68:
04:bc:4b:a9:a4:35:4c:68:9d:53:c4:11:af:ae:af:
9c:5e:ce:52:53:66:b0:7c:56:bd:d5:18:fe:8d:d6:
f1:fc:50:f9:a6:0a:e5:2d:ed:6a:87:2d:b3:fa:c1:
ac:e5:62:ca:4e:67:36:00:9a:4c:35:55:12:4c:7d:
a5:61:c9:d4:f1:84:25:dc:b8:98:81:02:26:23:7c:
45:9a:9d:34:8d:84:d0:47:3c:36:f1:13:da:4e:b4:
4e:82:82:25:e9:60:24:89:70:c3:f3:b9:d4:76:58:
a0:46:18:57:7f:e6:fe:de:3e:e7:42:e0:3b:cf:26:
af:2e:e8:b7:b2:76:17:01:0d:51:b3:73:5a:46:46:
44:f9:05:d1:5c:c4:e6:05:df:b3:09:3e:bb:d2:d1:
22:e5:ba:cd:be:b3:4e:58:c5:a7:22:ba:8a:ff:1d:
75:40:8d:9b:60:eb:b2:46:18:c4:a3:db:df:6d:bc:
73:88:b4:0f:dc:56:83:0c:3e:e4:c0:e5:e6:37:e2:
d8:ae:96:28:79:fd:6c:61:47:94:06:7f:c7:bc:88:
d1:31:02:8f:1f:99:03:eb:3a:c9:46:f8:3f:3d:7e:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B1:51:83:F6:D3:C7:DE:CE:EA:2E:56:06:B8:E9:8D:1D:54:72:58
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/tLFRg_bTx97O6i5WBrjpjR1Uclg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/24
178.210.165.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
12:68:93:93:8e:0f:93:6a:80:10:30:b7:9b:0f:ad:2c:dc:d1:
21:a9:b1:b6:8b:c6:ae:9d:64:03:81:92:0c:00:0f:70:73:d2:
16:4c:ee:af:b2:a7:85:45:12:72:f8:ce:e6:f8:de:50:b2:f2:
7f:94:c9:ff:b1:3f:03:37:c6:0f:71:58:17:2d:62:96:b1:f1:
ca:72:08:c3:5c:85:30:5d:80:9c:0c:07:e1:c6:8c:24:e6:76:
a7:d0:3a:5a:37:00:93:36:b8:bf:d7:71:bb:79:b6:fa:e7:e5:
8c:bc:5c:a8:9f:7d:54:9d:87:b9:f6:39:78:84:0b:2a:83:48:
39:96:81:1f:8b:5d:92:4f:11:dc:04:f8:30:a4:a5:76:a4:98:
cf:a1:9d:5d:ab:51:d2:3b:c0:ea:9f:fd:8e:18:34:b7:d4:40:
79:71:a5:2a:0e:44:ae:1a:dc:2f:23:44:44:6a:f6:95:dc:a9:
07:61:d1:59:ed:8d:e3:c1:22:20:ff:df:75:8b:9d:73:ab:9f:
c5:25:70:ac:97:d2:a2:3d:1e:ef:3f:9e:3a:77:31:45:44:1b:
4b:d4:58:f7:ca:06:f2:c2:2c:62:d2:94:ee:7b:36:b0:da:ed:
cb:af:af:03:17:55:0f:83:84:e8:ac:2d:6d:0a:1c:6c:3d:f1:
fb:f9:4c:b9
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ2GVsz6iUrt2ft+72XsJ5BrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjYwNDEzMTAxNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGIxNTE4M2Y2ZDNjN2RlY2VlYTJlNTYwNmI4ZTk4ZDFkNTQ3MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgiLK8gKEqVm+gq0ifrwbPrQxBB2
Hc9zpXGWj2gEvEuppDVMaJ1TxBGvrq+cXs5SU2awfFa91Rj+jdbx/FD5pgrlLe1q
hy2z+sGs5WLKTmc2AJpMNVUSTH2lYcnU8YQl3LiYgQImI3xFmp00jYTQRzw28RPa
TrROgoIl6WAkiXDD87nUdligRhhXf+b+3j7nQuA7zyavLui3snYXAQ1Rs3NaRkZE
+QXRXMTmBd+zCT670tEi5brNvrNOWMWnIrqK/x11QI2bYOuyRhjEo9vfbbxziLQP
3FaDDD7kwOXmN+LYrpYoef1sYUeUBn/HvIjRMQKPH5kD6zrJRvg/PX6CFwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLSxUYP208fezuouVga46Y0dVHJYMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvdExGUmdfYlR4OTdPNmk1V0JyanBqUjFVY2xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAstKgAwQA
stKlMAwDBAGy0qoDBACy0rIwDQYJKoZIhvcNAQELBQADggEBABJok5OOD5NqgBAw
t5sPrSzc0SGpsbaLxq6dZAOBkgwAD3Bz0hZM7q+yp4VFEnL4zub43lCy8n+Uyf+x
PwM3xg9xWBctYpax8cpyCMNchTBdgJwMB+HGjCTmdqfQOlo3AJM2uL/Xcbt5tvrn
5Yy8XKiffVSdh7n2OXiECyqDSDmWgR+LXZJPEdwE+DCkpXakmM+hnV2rUdI7wOqf
/Y4YNLfUQHlxpSoORK4a3C8jRERq9pXcqQdh0VntjePBIiD/33WLnXOrn8UlcKyX
0qI9Hu8/njp3MUVEG0vUWPfKBvLCLGLSlO57NrDa7cuvrwMXVQ+DhOisLW0KHGw9
8fv5TLk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:30 2026 by rpki-client