Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/dFUsEYWW8cUdCui6PDM05P1wfuk.roa
File: dFUsEYWW8cUdCui6PDM05P1wfuk.roa (raw, json)
Hash identifier: AL/iuu9lD2lbk6JUjTvJCA4F0UIgpReIGiy6fq4g99s=
Subject key identifier: 74:55:2C:11:85:96:F1:C5:1D:0A:E8:BA:3C:33:34:E4:FD:70:7E:E9
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019778820BC5F56B97A3F60E9A2C4E2D2B48
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/dFUsEYWW8cUdCui6PDM05P1wfuk.roa
Signing time: Mon 16 Jun 2025 11:31:17 +0000
ROA not before: Mon 16 Jun 2025 11:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:82:0b:c5:f5:6b:97:a3:f6:0e:9a:2c:4e:2d:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jun 16 11:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74552c118596f1c51d0ae8ba3c3334e4fd707ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:d7:2e:b0:6d:dc:89:f1:77:6b:98:a3:ea:
82:55:e9:ab:83:b5:f0:7c:3b:20:a1:a5:3c:70:a5:
ab:df:ea:a5:49:80:26:71:13:8e:eb:16:ce:0d:b7:
89:0d:d2:55:5f:a0:93:8b:fa:0b:38:2f:58:46:9f:
0b:3a:b6:2d:75:0c:d3:26:8a:71:ce:cc:17:97:a8:
2f:24:68:18:fe:37:9f:54:24:2e:91:96:01:3b:99:
2c:6a:0b:b2:9e:7e:03:b1:8d:52:98:aa:93:d6:d0:
6d:a1:ba:a3:48:da:93:a5:c2:71:8e:0c:3b:14:d4:
51:e5:73:5e:d6:56:99:4d:51:9f:3b:1f:80:e4:c1:
55:19:7f:97:d6:ba:1c:94:76:c2:36:b7:66:b9:c7:
99:7b:d6:8d:16:44:20:d7:2e:b5:86:ad:85:21:b8:
84:21:69:eb:51:fe:ed:d1:d0:68:fd:74:54:a3:cb:
ba:47:62:58:d7:f3:12:29:62:c5:8f:4b:35:ca:6b:
10:7a:af:84:bc:2f:00:2b:ab:4c:92:72:f4:d7:7a:
84:b4:f0:1d:66:d0:84:d4:44:c5:f9:ee:a0:cb:fa:
79:c6:2c:23:e3:ad:be:eb:36:58:30:b9:a5:16:4a:
08:ae:5a:35:84:37:93:94:49:40:19:46:4c:e5:33:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:2C:11:85:96:F1:C5:1D:0A:E8:BA:3C:33:34:E4:FD:70:7E:E9
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/dFUsEYWW8cUdCui6PDM05P1wfuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
81:7a:50:54:e5:b1:0d:99:d8:6f:8b:77:6b:26:c7:28:cb:26:
e6:f1:17:f6:c5:71:0d:6e:f8:e5:67:75:39:69:ca:5b:5c:1b:
1c:86:09:ab:6a:92:a2:a6:57:e5:28:80:df:69:e5:7b:c6:6e:
b1:1c:03:b5:bd:d2:4c:b8:4e:ce:a4:1f:3d:b0:13:1e:4d:91:
bb:35:3c:66:b6:be:a4:57:ae:a2:0b:ec:85:cf:02:9e:40:e5:
11:56:48:a1:f7:8d:22:2b:2e:a8:27:af:6a:fd:1e:22:bf:ff:
22:9c:f7:0b:4c:cd:52:f7:f5:77:bd:66:8a:df:46:77:fb:b6:
35:de:27:24:11:ab:be:19:57:1a:64:bb:b8:65:d0:17:2f:48:
ac:7b:92:1d:29:df:d1:a3:55:ec:35:51:ea:aa:49:30:72:e4:
26:79:a6:f2:6d:5d:2c:8b:00:68:cd:c3:0d:b7:2d:ef:a7:16:
31:24:04:10:76:7b:37:34:c1:0c:a1:f3:b4:9c:f0:9a:ec:bb:
76:b1:a0:d6:2c:92:21:ff:89:9b:59:f6:ca:03:c6:ed:2c:b6:
02:40:0e:46:6f:79:99:e3:b8:76:0c:7d:4e:bc:34:f4:63:01:
94:ec:90:db:d4:de:29:4b:18:a1:a5:cf:91:e3:02:19:a8:cf:
ff:99:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:33:44 2025 by rpki-client