This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/RFUH8Se94cTKLvBRv8wEXbBHYIM.roa
File:                     RFUH8Se94cTKLvBRv8wEXbBHYIM.roa (raw, json)
Hash identifier:          tnWeZDFiUc2eDDyTxh9k49o1shED/chvJb8VqBMLwRw=
Subject key identifier:   44:55:07:F1:27:BD:E1:C4:CA:2E:F0:51:BF:CC:04:5D:B0:47:60:83
Certificate issuer:       /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial:       019BC632D72C76A2A7B35AD8831AD88F372B
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/RFUH8Se94cTKLvBRv8wEXbBHYIM.roa
Signing time:             Fri 16 Jan 2026 09:46:19 +0000
ROA not before:           Fri 16 Jan 2026 09:46:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208972
IP address blocks:        178.210.160.0/24 maxlen: 24
                          178.210.161.0/24 maxlen: 24
                          178.210.165.0/24 maxlen: 24
                          178.210.166.0/24 maxlen: 24
                          178.210.168.0/24 maxlen: 24
                          178.210.170.0/24 maxlen: 24
                          178.210.171.0/24 maxlen: 24
                          178.210.172.0/24 maxlen: 24
                          178.210.173.0/24 maxlen: 24
                          178.210.174.0/24 maxlen: 24
                          178.210.175.0/24 maxlen: 24
                          178.210.176.0/24 maxlen: 24
                          178.210.177.0/24 maxlen: 24
                          178.210.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c6:32:d7:2c:76:a2:a7:b3:5a:d8:83:1a:d8:8f:37:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
        Validity
            Not Before: Jan 16 09:46:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=445507f127bde1c4ca2ef051bfcc045db0476083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:9b:57:ae:78:b3:76:a0:dd:8e:5e:a0:05:
                    e3:e5:67:86:d8:98:7d:2f:58:33:5e:7c:16:3c:78:
                    0d:b4:d5:4f:83:4f:d4:39:4d:e2:76:0b:6d:e4:02:
                    39:7a:1a:8d:4f:4f:49:8c:09:21:a2:1f:d7:82:fb:
                    d2:4f:b8:88:35:5d:99:5b:8e:a7:df:9e:31:58:b5:
                    cd:bf:a0:d4:da:76:10:5b:76:12:32:38:44:9e:0c:
                    ce:01:81:39:23:76:96:1c:55:66:cc:02:f5:5c:0c:
                    25:0e:b2:25:3d:eb:5c:3f:92:12:cd:b7:89:e7:b6:
                    53:1d:fe:fc:d2:d0:ac:5c:12:75:ee:f4:bb:fb:d2:
                    0c:12:74:ee:c8:a3:fa:31:91:43:0c:50:ff:e1:ba:
                    a5:8b:63:98:27:d1:b1:fd:64:54:22:f5:65:33:e2:
                    c4:9c:ff:8b:3a:98:cf:3b:5d:95:cd:5b:6b:70:ee:
                    26:64:ab:93:69:28:6e:20:59:5a:d1:e0:72:97:36:
                    f6:cf:19:5a:65:53:a0:4d:ec:08:14:4f:8a:05:8b:
                    91:cf:3e:1d:23:79:bd:b9:32:76:14:86:00:cb:61:
                    db:8e:3e:b2:f8:5c:f6:35:f2:8a:4b:47:4c:be:12:
                    cd:50:c3:6b:03:31:90:00:59:08:ed:01:81:dc:c3:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:07:F1:27:BD:E1:C4:CA:2E:F0:51:BF:CC:04:5D:B0:47:60:83
            X509v3 Authority Key Identifier:
                keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/RFUH8Se94cTKLvBRv8wEXbBHYIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.210.160.0/23
                  178.210.165.0-178.210.166.255
                  178.210.168.0/24
                  178.210.170.0-178.210.178.255

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:49:fd:95:02:77:01:dc:19:80:2a:c7:06:f7:f0:bc:1b:
         58:be:49:f8:77:23:b9:e6:db:6e:a1:89:56:dc:64:a0:09:be:
         1e:64:ad:59:1a:74:11:20:a1:4a:1f:d3:f0:fc:68:08:36:6a:
         af:20:36:43:65:23:85:d1:36:4e:ea:01:54:3b:5c:b6:77:e8:
         0d:ee:1d:bf:61:96:29:27:67:9b:3b:ab:b1:cc:db:bd:be:f2:
         76:b4:1d:f8:d8:1d:81:1a:5d:53:55:ee:c1:f8:f5:ae:cc:aa:
         e3:5e:b2:cf:8f:25:c7:36:4c:f4:7d:ce:12:77:20:d7:85:dc:
         3f:ef:b8:66:d3:94:1e:cd:6f:2c:5b:c7:6c:f2:9a:26:4d:d8:
         25:eb:ff:e7:c6:55:1d:91:d7:33:be:33:44:75:f9:b9:8d:73:
         11:01:59:ce:31:b2:d5:66:2c:04:55:df:6c:bd:4a:04:f8:54:
         2f:66:f9:18:70:53:62:7c:19:40:f3:e2:48:cf:f5:e2:f2:c1:
         b0:1a:d4:31:56:34:dc:2f:9e:8f:1e:f6:ed:23:38:90:6d:a1:
         66:8c:ea:14:1a:eb:4f:df:26:69:e0:4b:f3:d5:a9:4c:f0:0d:
         5c:62:e6:a8:d2:22:4d:ca:24:65:3c:f7:fe:3c:d8:bf:3d:2a:
         8a:f6:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:22:23 2026 by rpki-client