Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GZZGCI-cibTch7nIn7f6zDGWm98.roa
File: GZZGCI-cibTch7nIn7f6zDGWm98.roa (raw, json)
Hash identifier: atzAtV0Jd8PpDnsnk5CP2en7jHymu05GtKFjP/nTTR8=
Subject key identifier: 19:96:46:08:8F:9C:89:B4:DC:87:B9:C8:9F:B7:FA:CC:31:96:9B:DF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE267AF727A6484C40ED6197C342A73A4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GZZGCI-cibTch7nIn7f6zDGWm98.roa
Signing time: Thu 12 Mar 2026 14:16:11 +0000
ROA not before: Thu 12 Mar 2026 14:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 163.5.87.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:67:af:72:7a:64:84:c4:0e:d6:19:7c:34:2a:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 12 14:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=199646088f9c89b4dc87b9c89fb7facc31969bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:2e:d0:ab:74:76:92:34:08:4b:fc:34:52:
06:a0:cc:e8:42:b9:bb:dc:83:62:d0:86:f5:08:d2:
ed:ef:43:22:93:1f:4f:fc:cd:78:5e:ed:b4:59:f0:
c2:d5:05:95:45:bd:ec:94:18:4b:c3:34:49:67:cb:
49:0d:66:a4:c0:85:70:71:6d:55:76:fd:97:bc:f5:
73:b4:38:dc:9c:33:6b:4c:fa:61:ff:37:fa:72:de:
e4:a8:c2:61:77:9a:87:60:7b:14:87:fe:44:29:68:
69:83:7b:a3:05:d2:ec:6e:99:40:ca:dd:76:fc:f8:
22:c5:0b:a2:49:b5:27:a2:73:ce:b9:40:d0:5c:70:
63:23:2f:36:12:cc:63:2f:50:c8:25:11:c7:ef:8b:
78:a7:e8:96:67:19:19:bf:58:7b:21:1a:3f:86:20:
35:a7:16:cd:1e:d9:1c:6e:0f:d8:78:b7:44:44:16:
ae:7f:d5:2b:df:4f:a8:ba:2d:25:7c:49:79:60:a0:
21:da:2a:7e:f2:bd:42:20:dc:1b:1c:fe:9d:d8:c4:
47:52:12:0c:a6:5d:4f:75:00:8f:29:6c:22:0a:85:
fd:46:dd:1f:b4:1e:bf:8c:ed:ef:25:b1:b0:ce:7f:
7b:d7:b3:92:72:a4:f6:07:c3:06:45:39:af:0a:9f:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:46:08:8F:9C:89:B4:DC:87:B9:C8:9F:B7:FA:CC:31:96:9B:DF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GZZGCI-cibTch7nIn7f6zDGWm98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.87.0/24
163.5.123.0/24
163.5.181.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c3:8b:d7:ef:fb:71:57:ec:d5:f1:22:f3:7c:e7:f7:58:6a:
63:ca:13:b7:d3:83:b2:71:f4:ce:f5:0b:59:d7:e1:0e:40:3b:
1c:df:68:eb:b9:a0:62:aa:4b:45:14:ab:cc:df:68:f5:9a:7c:
a8:3c:0a:64:58:f9:07:7b:53:3a:8b:2c:ba:d1:b8:53:7a:59:
44:2a:bb:89:af:d0:3b:9b:61:7a:1f:80:fb:40:0a:a9:b1:46:
5b:d4:1c:1c:37:9c:e5:04:93:69:fb:6c:5a:32:d9:66:19:00:
b9:54:cf:e9:4d:6b:08:e5:ed:61:ca:af:5f:e2:7c:57:bd:e8:
69:d2:69:fd:68:25:9c:3a:bd:0c:ff:50:e9:57:4c:c0:a9:2d:
7a:35:34:af:5a:c4:7a:2a:ac:26:31:9a:24:1f:54:8d:dd:2d:
eb:16:b6:88:2e:e7:09:80:00:14:11:44:7b:26:d2:1b:13:8f:
9c:e1:f1:92:5e:dc:bd:2c:91:e0:f0:e8:de:d6:ac:ac:1e:9f:
26:cc:31:28:e5:32:d3:a0:0c:e8:f4:d1:e2:c6:f0:b8:fa:2f:
6d:a0:ae:ea:30:2d:9f:9f:30:5d:79:2b:35:2b:34:16:a9:fe:
8b:35:f6:f4:b2:9c:0d:79:da:ad:1b:a5:79:c8:cf:87:8b:12:
77:be:b4:b4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZziZ69yemSExA7WGXw0KnOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMzEyMTQxNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTk2NDYwODhmOWM4OWI0ZGM4N2I5Yzg5ZmI3ZmFjYzMxOTY5YmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXYu0Kt0dpI0CEv8NFIGoMzoQrm7
3INi0Ib1CNLt70Mikx9P/M14Xu20WfDC1QWVRb3slBhLwzRJZ8tJDWakwIVwcW1V
dv2XvPVztDjcnDNrTPph/zf6ct7kqMJhd5qHYHsUh/5EKWhpg3ujBdLsbplAyt12
/PgixQuiSbUnonPOuUDQXHBjIy82EsxjL1DIJRHH74t4p+iWZxkZv1h7IRo/hiA1
pxbNHtkcbg/YeLdERBauf9Ur30+oui0lfEl5YKAh2ip+8r1CINwbHP6d2MRHUhIM
pl1PdQCPKWwiCoX9Rt0ftB6/jO3vJbGwzn9717OScqT2B8MGRTmvCp+vrQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBmWRgiPnIm03Ie5yJ+3+swxlpvfMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvR1paR0NJLWNpYlRjaDduSW43ZjZ6REdXbTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowVXAwQA
owV7AwQAowW1AwQAowXVMA0GCSqGSIb3DQEBCwUAA4IBAQAFw4vX7/txV+zV8SLz
fOf3WGpjyhO304OycfTO9QtZ1+EOQDsc32jruaBiqktFFKvM32j1mnyoPApkWPkH
e1M6iyy60bhTellEKruJr9A7m2F6H4D7QAqpsUZb1BwcN5zlBJNp+2xaMtlmGQC5
VM/pTWsI5e1hyq9f4nxXvehp0mn9aCWcOr0M/1DpV0zAqS16NTSvWsR6KqwmMZok
H1SN3S3rFraILucJgAAUEUR7JtIbE4+c4fGSXty9LJHg8Oje1qysHp8mzDEo5TLT
oAzo9NHixvC4+i9toK7qMC2fnzBdeSs1KzQWqf6LNfb0spwNedqtG6V5yM+HixJ3
vrS0
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:36 2026 by rpki-client