
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/cJdu0V5pMBHO2m87So-B01Jh_Jc.roa
File: cJdu0V5pMBHO2m87So-B01Jh_Jc.roa (raw, json)
Hash identifier: 6fxmkYyCblDli/sa68IlSqPDlhmdfGTFCuG9dCmK83s=
Subject key identifier: 70:97:6E:D1:5E:69:30:11:CE:DA:6F:3B:4A:8F:81:D3:52:61:FC:97
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0199C2B1F79931C751A5F0D113EBFF89F4CD
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/cJdu0V5pMBHO2m87So-B01Jh_Jc.roa
Signing time: Wed 08 Oct 2025 07:21:07 +0000
ROA not before: Wed 08 Oct 2025 07:21:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:b1:f7:99:31:c7:51:a5:f0:d1:13:eb:ff:89:f4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Oct 8 07:21:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70976ed15e693011ceda6f3b4a8f81d35261fc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:46:67:26:b0:32:fb:e8:3e:ed:d5:27:31:ec:
6d:26:68:0e:c1:d5:94:a6:2d:e9:0e:0c:70:b6:8a:
e8:60:58:94:40:db:fd:8d:bb:90:d1:f9:d2:8e:a6:
57:fb:d1:96:5f:eb:24:b2:e0:7d:d7:bb:27:7f:09:
e1:4a:de:6a:96:1f:05:5a:e3:4a:2c:47:c6:a6:c7:
84:c5:db:b1:c9:13:b5:cd:82:ae:b0:87:64:50:f1:
9b:4c:1b:d6:46:2e:fa:c4:bc:6d:42:f5:97:dd:f0:
0c:74:b0:28:e5:e4:b4:3a:4d:73:db:42:ea:72:d4:
a3:fa:f9:7f:cf:66:bd:b8:78:cd:c2:1f:9d:fa:22:
c6:33:b8:2f:c5:03:41:33:ae:8c:b2:24:3a:a0:d5:
30:72:9c:b5:a4:53:5f:51:45:24:3d:0f:4a:fc:20:
75:18:49:e9:a0:67:9c:1b:f5:8d:c9:bb:c1:f5:f5:
62:e3:e4:23:19:cb:15:62:44:81:02:96:1e:d9:4e:
53:11:a8:2e:b0:91:c6:f0:ce:0a:4f:71:7e:eb:a0:
a8:31:56:fb:fe:72:9d:46:90:48:02:67:83:4a:d1:
e7:bb:7a:52:dc:0f:08:51:7a:c9:23:8f:a1:55:1a:
0f:fd:cc:89:27:ed:3b:da:4c:b3:f7:04:7d:cf:20:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:6E:D1:5E:69:30:11:CE:DA:6F:3B:4A:8F:81:D3:52:61:FC:97
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/cJdu0V5pMBHO2m87So-B01Jh_Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/22
178.210.165.0-178.210.166.255
178.210.168.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
33:6a:32:bc:fb:a2:be:94:46:21:25:12:27:20:b0:ac:74:03:
bf:83:02:4d:98:20:9f:3c:9e:22:4f:65:f5:c9:7c:92:48:6c:
6b:91:52:ef:68:3e:17:bb:57:24:c0:7e:8c:a3:f6:13:76:4a:
cb:20:eb:94:7e:7d:e3:37:1b:23:03:5f:ab:21:c1:89:35:83:
1a:26:1f:2e:6f:f8:66:d6:7d:27:ef:03:d3:c7:59:f2:e6:9b:
47:d7:f1:05:0e:65:c1:f1:26:d1:cf:9c:38:7b:1d:92:50:56:
0f:dd:89:a1:fd:22:2e:ad:21:7e:c5:39:6b:17:f8:78:53:ac:
23:6e:b5:3d:c8:0b:a5:29:53:25:fd:1f:73:ed:3b:fa:03:74:
d7:44:07:c8:99:1b:2c:e1:b1:75:7b:0f:db:c2:76:ee:51:73:
9b:b7:cb:17:8e:0b:50:8d:9f:76:bf:62:80:ee:f1:b1:9b:b4:
f3:5b:16:28:c1:33:4f:45:a6:7e:8f:e8:d4:42:03:32:94:2d:
99:34:35:40:23:18:c7:d3:6a:b4:57:89:59:40:fd:32:c5:67:
31:ed:62:37:91:15:97:bb:96:32:ab:2d:48:e2:71:ba:af:c3:
4e:98:12:84:4e:8b:41:4c:92:77:f7:82:d4:dc:30:8f:12:9f:
c6:be:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:32:42 2025 by rpki-client