Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/HB0mAnXIi3cdGWwy23VMRe8l_zI.roa
File: HB0mAnXIi3cdGWwy23VMRe8l_zI.roa (raw, json)
Hash identifier: wqAuEMrBfGTMifeXpjAaOd2i68cV7lsD/gjIWcG8fPk=
Subject key identifier: 1C:1D:26:02:75:C8:8B:77:1D:19:6C:32:DB:75:4C:45:EF:25:FF:32
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01A1AAD4368D39C2C86EB388F94D7148240C
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/HB0mAnXIi3cdGWwy23VMRe8l_zI.roa
Signing time: Thu 05 Nov 2026 08:29:56 +0000
ROA not before: Thu 05 Nov 2026 08:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:d4:36:8d:39:c2:c8:6e:b3:88:f9:4d:71:48:24:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Nov 5 08:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c1d260275c88b771d196c32db754c45ef25ff32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:d6:cc:18:c0:08:29:2b:79:1f:71:db:1d:
c6:35:52:07:96:37:c1:ee:6a:24:a8:c0:1d:93:f1:
45:dd:86:85:42:d0:1d:4c:94:e3:8f:ee:73:92:32:
a1:04:0f:39:7f:57:54:30:48:af:42:0e:45:6a:f7:
ac:fe:ce:df:d4:3a:4e:0a:b0:a4:68:fe:b5:eb:04:
bf:25:84:4e:cd:1e:2d:47:65:67:0f:91:9f:89:e7:
77:36:c0:b3:2e:bb:56:c9:90:66:8d:4b:00:fb:52:
51:59:00:71:ac:4e:3f:ff:a6:88:b3:3e:f7:4d:39:
d4:af:25:9f:09:c3:f4:81:bc:6e:a9:89:35:7c:c1:
8e:25:f2:a2:2b:8e:4b:96:ee:62:1b:7e:47:5c:e9:
24:1d:02:e4:95:f9:fa:09:5f:2e:6b:7c:f9:b7:04:
91:ed:55:a7:99:f2:3b:17:e9:1b:34:39:87:1f:42:
c4:cc:8e:5a:47:b5:39:6a:2f:72:14:e3:d7:2e:ba:
aa:af:86:6f:ce:6c:b4:eb:92:2d:9b:6c:48:32:eb:
24:64:3e:d4:b4:11:62:ad:58:3a:94:b6:37:47:bf:
38:7e:c8:ac:63:70:e4:60:d6:04:67:72:e7:cc:81:
aa:5c:b4:eb:7d:25:c3:c4:fd:4c:78:ff:32:a1:14:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:26:02:75:C8:8B:77:1D:19:6C:32:DB:75:4C:45:EF:25:FF:32
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/HB0mAnXIi3cdGWwy23VMRe8l_zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/24
178.210.170.0-178.210.176.255
Signature Algorithm: sha256WithRSAEncryption
74:5d:32:e8:37:6a:c2:a6:6e:92:df:6d:07:4b:23:c5:7b:09:
60:dd:37:02:da:44:84:27:5d:30:d8:23:ac:e6:0a:1b:a1:dd:
7e:16:1e:fc:4e:7a:ae:5c:95:88:31:aa:11:dc:eb:bf:8e:05:
d6:8d:bf:91:f7:77:4d:ee:36:27:4c:ed:df:9b:26:07:09:a0:
9a:32:0a:be:fd:06:cc:8b:8d:33:45:d1:bb:17:13:c2:5a:18:
ee:9a:10:86:62:1b:97:b3:ab:aa:8a:14:dd:d7:12:15:cb:93:
80:c1:a2:f1:59:8b:7e:e9:2a:a4:36:88:f6:e3:a3:5c:c0:4d:
fd:1a:1b:e9:0e:55:9f:cb:ea:ba:8b:91:c8:dd:a4:ed:b2:ba:
2d:e3:20:fd:57:a7:e5:97:44:24:97:61:9c:26:24:1f:df:1d:
eb:6f:03:3e:25:f5:83:5a:cc:78:4d:69:e8:3e:65:48:b8:93:
69:f3:a9:24:e7:71:dc:30:e2:0d:e2:c7:34:62:4f:6b:a1:0c:
28:31:f2:92:c3:e8:f0:4b:8f:a5:4f:34:e7:0c:68:5d:2d:28:
d1:48:bf:10:be:f0:a9:03:c5:a1:88:98:47:ba:e6:0c:62:b1:
e3:ff:d7:b8:76:cd:6e:ae:e2:96:59:8a:15:fc:dd:ad:c6:bd:
90:96:43:d8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGq1DaNOcLIbrOI+U1xSCQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjYxMTA1MDgyOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzFkMjYwMjc1Yzg4Yjc3MWQxOTZjMzJkYjc1NGM0NWVmMjVmZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35fWzBjACCkreR9x2x3GNVIHljfB
7mokqMAdk/FF3YaFQtAdTJTjj+5zkjKhBA85f1dUMEivQg5Faves/s7f1DpOCrCk
aP616wS/JYROzR4tR2VnD5Gfied3NsCzLrtWyZBmjUsA+1JRWQBxrE4//6aIsz73
TTnUryWfCcP0gbxuqYk1fMGOJfKiK45Llu5iG35HXOkkHQLklfn6CV8ua3z5twSR
7VWnmfI7F+kbNDmHH0LEzI5aR7U5ai9yFOPXLrqqr4Zvzmy065Itm2xIMuskZD7U
tBFirVg6lLY3R784fsisY3DkYNYEZ3LnzIGqXLTrfSXDxP1MeP8yoRQilQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBwdJgJ1yIt3HRlsMtt1TEXvJf8yMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvSEIwbUFuWElpM2NkR1d3eTIzVk1SZThsX3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAstKgMAwD
BAGy0qoDBACy0rAwDQYJKoZIhvcNAQELBQADggEBAHRdMug3asKmbpLfbQdLI8V7
CWDdNwLaRIQnXTDYI6zmChuh3X4WHvxOeq5clYgxqhHc67+OBdaNv5H3d03uNidM
7d+bJgcJoJoyCr79BsyLjTNF0bsXE8JaGO6aEIZiG5ezq6qKFN3XEhXLk4DBovFZ
i37pKqQ2iPbjo1zATf0aG+kOVZ/L6rqLkcjdpO2yui3jIP1Xp+WXRCSXYZwmJB/f
HetvAz4l9YNazHhNaeg+ZUi4k2nzqSTncdww4g3ixzRiT2uhDCgx8pLD6PBLj6VP
NOcMaF0tKNFIvxC+8KkDxaGImEe65gxiseP/17h2zW6u4pZZihX83a3GvZCWQ9g=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:57 2026 by rpki-client