Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/GiGclhLqZFLRsgCRYA0MC4_mt7U.roa
File: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (raw, json)
Hash identifier: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=
Subject key identifier: 1A:21:9C:96:12:EA:64:52:D1:B2:00:91:60:0D:0C:0B:8F:E6:B7:B5
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 019F2368DF714FFCD0C77BFCCCD3E29D306A
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/GiGclhLqZFLRsgCRYA0MC4_mt7U.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215489
IP address blocks: 170.237.6.0/23 maxlen: 23
170.237.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:71:4f:fc:d0:c7:7b:fc:cc:d3:e2:9d:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a219c9612ea6452d1b20091600d0c0b8fe6b7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:26:e5:16:e3:53:bc:54:90:bc:8e:9b:20:
95:9d:f8:55:04:db:98:08:6b:c7:0e:d4:39:ef:22:
50:f9:0b:50:d5:4a:1e:c8:ef:84:25:fe:af:c3:50:
3b:45:56:7e:e2:12:fe:22:e6:65:ec:cd:2f:4f:39:
0f:3b:b2:1f:37:1e:b7:22:ef:49:d1:cc:b8:a6:8b:
fd:0e:05:cd:13:a1:1f:d0:e7:42:de:93:91:f7:1c:
10:40:69:8b:ad:90:f2:5a:c5:33:47:73:e0:25:45:
b8:6f:eb:7c:e8:04:35:e4:fa:d3:19:a0:ce:14:de:
20:f2:af:28:2f:c6:b7:c2:cb:8a:90:b2:3f:21:b4:
7e:3c:7e:37:39:31:54:c1:35:b8:71:e2:36:99:45:
01:00:2c:18:75:2f:22:55:ef:52:c6:63:3a:f7:15:
16:21:5a:9a:9b:c8:5a:a9:40:16:4e:3c:e5:5c:82:
dd:43:42:54:f9:c3:44:43:6b:50:7b:ad:f2:b2:93:
fa:09:bf:d2:5a:c7:6d:4e:19:ae:ad:ac:02:3a:5b:
b4:f6:c9:1d:56:83:1e:1d:f3:e7:08:38:bc:9e:e0:
6f:1e:94:0d:17:c3:36:12:1d:2c:21:54:75:29:66:
cd:0f:16:3c:df:05:62:8d:71:35:a2:d7:82:7d:75:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:9C:96:12:EA:64:52:D1:B2:00:91:60:0D:0C:0B:8F:E6:B7:B5
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/GiGclhLqZFLRsgCRYA0MC4_mt7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.6.0-170.237.9.255
Signature Algorithm: sha256WithRSAEncryption
8b:78:e5:c1:e0:22:d8:31:84:a5:76:52:dc:5d:49:9c:b3:1a:
1e:6f:39:fa:48:b7:c4:4c:3f:33:ae:e1:16:f8:8b:1b:9c:9e:
9b:04:bc:ce:e4:7c:f6:76:4f:2f:21:b9:5e:a9:bf:06:2b:09:
ee:6c:40:b5:2f:fd:4b:97:6a:e0:b1:c6:6e:a6:8c:6b:b1:55:
38:96:77:46:21:f5:28:e8:38:6b:7b:ed:24:b0:1c:17:28:98:
27:b8:ac:9e:cf:df:0e:6e:32:72:08:ad:fe:b9:c2:6d:bb:42:
90:6e:41:b1:08:a2:75:22:07:aa:78:0a:30:8e:3d:a9:b4:f8:
40:fe:71:07:3b:ab:98:e3:95:d5:c1:ea:71:a6:3a:25:2e:2e:
2a:b9:ba:73:e6:bb:e2:ad:86:0c:ec:c1:bf:5e:da:55:01:30:
03:19:2d:6a:69:67:4e:01:ef:f4:42:a4:26:70:ad:a2:f1:82:
cb:cd:e2:05:3e:e8:1c:26:cf:2c:65:67:4b:6c:ea:c0:1f:68:
22:11:dd:f0:c6:52:b8:2d:dd:6e:e7:bc:dd:65:01:7a:d4:a6:
06:19:fc:39:10:ed:fa:b2:8d:d8:99:11:5e:0a:a2:da:53:96:
05:53:e0:21:04:67:e7:55:22:11:0f:b0:0f:9f:76:97:19:31:
fd:a3:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:44 2026 by rpki-client