Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/GIL9uqecVqs2J_KF2ar2nbKLRYY.roa
File: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (raw, json)
Hash identifier: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=
Subject key identifier: 18:82:FD:BA:A7:9C:56:AB:36:27:F2:85:D9:AA:F6:9D:B2:8B:45:86
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019E7CF2CB5DF321CF9DBF9095B4CBDC782B
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/GIL9uqecVqs2J_KF2ar2nbKLRYY.roa
Signing time: Sun 31 May 2026 07:32:26 +0000
ROA not before: Sun 31 May 2026 07:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200140
IP address blocks: 149.170.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:f2:cb:5d:f3:21:cf:9d:bf:90:95:b4:cb:dc:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: May 31 07:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1882fdbaa79c56ab3627f285d9aaf69db28b4586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:bd:d2:12:6a:71:6a:36:02:a6:ad:19:31:
d2:76:38:62:c9:7f:96:f3:ed:e6:41:f9:42:70:2c:
44:da:d9:5d:14:82:6c:11:7d:68:3b:e3:5f:90:87:
e7:a5:53:08:d9:84:bc:e0:2a:db:30:ff:d1:fd:89:
c7:79:fb:24:78:cc:b4:e6:b7:0c:2b:71:05:84:6a:
9b:24:ba:3e:c6:52:95:d1:8c:80:d8:0f:bb:45:4d:
db:28:4f:1d:40:6b:8c:4d:fb:e9:d5:c2:63:2a:8c:
cd:bc:e8:7f:e6:97:6f:d8:6b:08:99:38:05:71:b1:
d1:b7:6f:8e:17:4f:05:f1:b8:68:bf:5b:6a:fb:5f:
a9:93:3e:a7:50:5d:3c:30:45:07:0e:27:d2:00:63:
7b:0d:48:a3:5e:eb:4a:04:7f:b2:2d:35:cd:1b:55:
9a:2b:37:05:57:90:24:94:ac:57:23:39:ea:75:0f:
c3:20:ad:e6:98:82:2e:36:3e:e6:de:e7:a2:c5:0a:
92:a1:4d:9b:47:80:96:5f:52:7b:03:63:eb:72:49:
e5:7c:7f:32:21:12:95:92:0d:55:c4:ef:ad:93:d7:
a7:fd:69:9b:a2:78:0b:c8:81:c4:05:fb:91:18:4d:
18:4d:61:35:20:cd:00:c2:69:69:20:95:a5:9a:68:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:FD:BA:A7:9C:56:AB:36:27:F2:85:D9:AA:F6:9D:B2:8B:45:86
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/GIL9uqecVqs2J_KF2ar2nbKLRYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.61.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:3a:df:d1:2b:79:aa:5b:0a:95:d9:14:a4:ae:95:57:0e:f5:
e2:52:04:cc:64:94:d2:22:57:d2:5d:25:e0:8d:69:92:d5:15:
6a:6d:28:63:8c:af:1d:fa:04:ac:fb:72:d5:13:a3:68:c8:b4:
df:41:e7:14:1e:2a:6b:b2:1a:83:58:57:06:ea:3f:40:d4:af:
cf:96:91:2e:08:e9:cf:e4:40:8f:c0:31:6f:97:c0:e6:96:82:
95:c0:01:a9:c2:24:f6:aa:ee:4c:c0:f6:ad:26:fd:66:66:41:
d6:a8:4f:14:45:d6:a3:27:ed:14:0d:d6:3d:53:0c:2a:78:7e:
ec:e5:de:58:d0:e1:0a:4f:9c:97:d2:1e:30:c2:5b:b3:6f:4e:
01:9c:69:bc:16:b5:b2:a9:35:4c:a5:2a:58:ec:26:77:f7:bf:
3b:16:0e:67:b5:ed:ff:f3:af:29:e2:98:b0:d4:d6:d8:3d:4f:
be:ac:52:05:75:aa:9b:d4:a7:45:8b:65:38:e5:77:5c:eb:35:
92:21:57:c1:88:ff:ad:8a:3f:00:46:1f:8a:b9:d0:80:0a:72:
86:0e:eb:7b:cc:a4:9d:1b:90:46:2f:4e:2f:11:c7:7f:a2:5e:
8d:e0:e9:f6:5d:b4:e7:eb:8e:44:9b:8c:cc:30:d7:54:57:98:
cb:23:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 11:13:59 2026 by rpki-client