Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/iXq0qrpCPo99PfUTjErWp7OhuBI.roa
File: iXq0qrpCPo99PfUTjErWp7OhuBI.roa (raw, json)
Hash identifier: X22zlHUhN0LvDPli4rURv75ZdIFsXhRBny1jLbjYx7g=
Subject key identifier: 89:7A:B4:AA:BA:42:3E:8F:7D:3D:F5:13:8C:4A:D6:A7:B3:A1:B8:12
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0199C2B1F705A29D40CEB13515FC10BB278D
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/iXq0qrpCPo99PfUTjErWp7OhuBI.roa
Signing time: Wed 08 Oct 2025 07:21:07 +0000
ROA not before: Wed 08 Oct 2025 07:21:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:b1:f7:05:a2:9d:40:ce:b1:35:15:fc:10:bb:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Oct 8 07:21:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=897ab4aaba423e8f7d3df5138c4ad6a7b3a1b812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:c4:8b:3f:35:5c:79:96:82:b5:85:80:6d:
bf:97:ca:56:5f:b3:35:4f:72:dc:45:0d:f1:c6:03:
47:8a:b5:cd:44:fb:4d:d4:fd:52:74:ac:81:fd:a4:
e4:2d:73:ed:91:9e:ad:bc:37:aa:f4:74:51:fb:5d:
fc:e8:4f:a0:28:e4:7d:85:85:1c:55:48:16:f3:53:
6e:56:73:7f:9b:dd:d2:f9:38:33:54:46:b5:d8:27:
65:06:14:e5:6e:a9:21:41:14:3f:0d:f1:3e:44:e2:
59:3c:3d:be:6f:a1:00:71:97:73:93:db:e0:17:52:
28:01:6c:ec:a5:98:7f:b7:0a:ec:f5:d6:e7:db:7c:
28:b2:13:04:3c:96:42:f3:ac:6a:05:6f:13:10:a2:
b8:8a:7b:c8:8b:87:8f:02:0b:df:2d:b7:86:37:b1:
79:b9:ba:3a:8d:93:1b:0f:da:5f:e8:ae:82:34:c0:
a6:3f:9f:94:76:ac:9f:16:8f:5c:da:d8:b6:78:56:
9f:d2:c5:9b:4b:f7:e2:40:bb:76:8b:0f:60:a4:31:
5d:87:08:59:dc:ef:4f:d0:44:da:63:09:f5:84:3d:
c0:87:97:0a:50:78:0d:3d:35:dd:53:24:8d:07:64:
5c:b8:df:ea:5d:9f:86:2c:89:d4:b2:ef:30:13:ad:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:B4:AA:BA:42:3E:8F:7D:3D:F5:13:8C:4A:D6:A7:B3:A1:B8:12
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/iXq0qrpCPo99PfUTjErWp7OhuBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/22
178.210.165.0-178.210.166.255
178.210.168.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
bf:e8:ff:89:bd:bd:e0:d6:3e:ca:e3:e4:54:a7:76:ba:cf:11:
58:f8:e1:bf:54:2e:67:1f:3e:2c:b3:66:7e:69:94:0e:fd:a0:
ca:0c:1f:c2:5d:34:5a:af:70:e0:cb:07:ea:3f:12:ed:45:82:
b4:0c:80:5e:73:70:4f:04:a6:cc:65:6a:71:ab:1e:1e:46:83:
a0:80:5f:69:7f:59:8f:c5:8d:91:68:c3:49:e8:7e:74:bf:ea:
6d:0c:67:f8:ed:fe:c1:8c:43:e7:aa:32:48:5f:71:bd:2f:b0:
2d:1a:b8:4a:65:ad:80:bd:70:16:83:8c:4b:71:0e:3b:22:79:
73:21:34:ad:73:42:7c:3a:10:08:d4:66:e2:ad:d5:e5:bc:60:
9f:3c:20:b4:2e:78:50:91:a2:a6:dc:6e:e8:65:6d:db:fa:6e:
96:10:0c:6e:2f:15:e2:c7:85:b7:fb:4a:62:98:7f:a1:35:48:
fd:e0:b0:35:a5:4e:c0:d6:b7:04:35:73:bf:6f:c7:07:e0:59:
9a:46:97:2e:99:54:4f:43:59:ef:34:8c:17:fa:3e:b0:ab:22:
ea:28:07:d4:f4:f8:91:90:b8:9a:3b:df:a0:8a:00:21:75:d1:
e3:74:25:a1:f8:cf:6d:b1:ca:3a:9e:98:c2:ba:3b:d9:dc:c2:
19:d2:f5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:58 2025 by rpki-client