Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/ys6iILu3_I7CA1cINOiWNhnSJmM.roa
File: ys6iILu3_I7CA1cINOiWNhnSJmM.roa (raw, json)
Hash identifier: qRVpWIwOKss/jcrKi+UW7mCwGaJx3pwZSGEHXYR+fPk=
Subject key identifier: CA:CE:A2:20:BB:B7:FC:8E:C2:03:57:08:34:E8:96:36:19:D2:26:63
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0198D1E1713C7F62C12B0B78A581B3A0922E
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/ys6iILu3_I7CA1cINOiWNhnSJmM.roa
Signing time: Fri 22 Aug 2025 13:04:29 +0000
ROA not before: Fri 22 Aug 2025 13:04:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:e1:71:3c:7f:62:c1:2b:0b:78:a5:81:b3:a0:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Aug 22 13:04:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cacea220bbb7fc8ec203570834e8963619d22663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:42:c3:bb:b6:b0:80:54:8e:de:25:63:1f:
c3:22:63:bf:19:57:58:01:d4:e4:10:9c:9c:8a:e0:
cf:61:1c:f8:e3:1f:2d:c9:48:4b:07:45:d6:6e:3d:
51:28:4e:35:51:33:99:fe:50:c7:ec:5e:8f:66:d0:
3e:ed:13:a5:38:90:3e:77:0d:5e:28:bf:c3:6b:e0:
e6:90:4b:af:c0:8a:ef:35:5d:dc:4f:61:bb:0f:dc:
05:6d:db:41:5a:71:cf:6c:9b:87:92:f0:92:e2:60:
3a:62:69:38:32:cb:e1:8b:75:41:33:b9:af:d3:8f:
e3:85:de:4c:ec:a7:3c:5a:4d:4c:de:db:a1:d8:a5:
82:4e:4f:f9:23:1e:f8:26:bc:ac:03:11:18:a1:c5:
9d:45:e9:16:14:f9:26:41:bb:c4:b5:de:18:48:80:
c2:81:5c:f3:74:5b:22:9b:6e:fd:04:13:9a:67:b7:
a5:de:35:39:bb:05:1d:65:88:32:7e:68:18:1e:3d:
82:fe:1a:c8:80:30:51:3f:01:13:73:71:16:fc:1e:
ef:10:93:cd:c7:41:3f:ae:61:e4:7e:00:e5:13:37:
8f:ce:b0:ac:33:8b:c8:ba:75:23:35:b8:ae:92:29:
91:bb:cf:71:d5:90:d7:20:44:39:b4:fb:20:df:5c:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:A2:20:BB:B7:FC:8E:C2:03:57:08:34:E8:96:36:19:D2:26:63
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/ys6iILu3_I7CA1cINOiWNhnSJmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0-178.210.166.255
178.210.168.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
36:91:6c:68:75:82:b8:97:7e:ee:66:ba:39:1e:8e:5e:b9:f3:
21:57:35:18:95:11:f2:03:37:99:0b:b8:5b:51:1d:e4:4c:32:
e4:4d:6f:40:2d:2c:ab:47:1d:60:c6:d6:2b:7e:92:ac:c4:55:
33:1f:ef:83:fd:1b:8b:7d:ec:71:05:db:80:f7:8a:df:e9:32:
f3:98:e2:f3:e4:cd:38:eb:d9:59:a3:41:f7:12:3e:06:46:95:
2e:32:cf:c0:57:36:1e:e9:2a:e1:d2:1e:ad:aa:ae:5c:45:73:
ac:03:5e:27:5b:6b:c9:06:b3:46:13:d1:81:47:38:24:d5:88:
85:3a:fd:47:e4:91:d2:cd:43:d3:c4:af:8e:6f:cc:3a:c9:31:
50:a0:0f:79:7b:3b:17:65:43:aa:40:e5:79:e1:8b:b6:96:22:
4f:d9:b2:fe:27:3a:b2:da:f9:94:29:ba:fb:fe:d3:2d:ef:88:
4a:a5:12:bb:d9:3e:4a:fa:85:6a:dc:3c:a4:26:0d:61:45:38:
f0:43:6c:ac:17:4d:c7:c9:7d:57:7e:e5:ed:57:5f:da:5c:31:
d0:1b:2e:4c:f8:2c:c5:9a:3b:ad:28:6e:0f:d3:38:97:24:6b:
ad:0b:c4:28:38:24:b4:9a:8a:6f:84:70:50:41:a4:92:a9:30:
1a:bc:f8:bc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjR4XE8f2LBKwt4pYGzoJIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjUwODIyMTMwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWNlYTIyMGJiYjdmYzhlYzIwMzU3MDgzNGU4OTYzNjE5ZDIyNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJFCw7u2sIBUjt4lYx/DImO/GVdY
AdTkEJyciuDPYRz44x8tyUhLB0XWbj1RKE41UTOZ/lDH7F6PZtA+7ROlOJA+dw1e
KL/Da+DmkEuvwIrvNV3cT2G7D9wFbdtBWnHPbJuHkvCS4mA6Ymk4Msvhi3VBM7mv
04/jhd5M7Kc8Wk1M3tuh2KWCTk/5Ix74JrysAxEYocWdRekWFPkmQbvEtd4YSIDC
gVzzdFsim279BBOaZ7el3jU5uwUdZYgyfmgYHj2C/hrIgDBRPwETc3EW/B7vEJPN
x0E/rmHkfgDlEzePzrCsM4vIunUjNbiukimRu89x1ZDXIEQ5tPsg31zI9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMrOoiC7t/yOwgNXCDToljYZ0iZjMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEveXM2aUlMdTNfSTdDQTFjSU5PaVdOaG5TSm1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAWy0qAD
BACy0qYDBACy0qgwDAMEAbLSqgMEALLSsjANBgkqhkiG9w0BAQsFAAOCAQEANpFs
aHWCuJd+7ma6OR6OXrnzIVc1GJUR8gM3mQu4W1Ed5Ewy5E1vQC0sq0cdYMbWK36S
rMRVMx/vg/0bi33scQXbgPeK3+ky85ji8+TNOOvZWaNB9xI+BkaVLjLPwFc2Hukq
4dIeraquXEVzrANeJ1tryQazRhPRgUc4JNWIhTr9R+SR0s1D08Svjm/MOskxUKAP
eXs7F2VDqkDleeGLtpYiT9my/ic6str5lCm6+/7TLe+ISqUSu9k+SvqFatw8pCYN
YUU48ENsrBdNx8l9V37l7Vdf2lwx0BsuTPgsxZo7rShuD9M4lyRrrQvEKDgktJqK
b4RwUEGkkqkwGrz4vA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:57 2025 by rpki-client