Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/F7G_GWiGHM-ftUMTD-Pke8L8IdU.roa
File: F7G_GWiGHM-ftUMTD-Pke8L8IdU.roa (raw, json)
Hash identifier: qM8WGs05zAkWAsp0xqxA3NSL7e8011qxrQ8yMnI3sFA=
Subject key identifier: 17:B1:BF:19:68:86:1C:CF:9F:B5:43:13:0F:E3:E4:7B:C2:FC:21:D5
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A10AED749F210D5DEABA30F4BEFCC86A3F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/F7G_GWiGHM-ftUMTD-Pke8L8IdU.roa
Signing time: Mon 05 Oct 2026 07:18:16 +0000
ROA not before: Mon 05 Oct 2026 07:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49468
IP address blocks: 188.66.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:ed:74:9f:21:0d:5d:ea:ba:30:f4:be:fc:c8:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 5 07:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17b1bf1968861ccf9fb543130fe3e47bc2fc21d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:af:98:cc:bc:13:3c:ad:b4:8c:69:28:c9:
47:cc:24:43:07:7c:0d:e7:46:98:73:ea:91:ae:4e:
b0:27:e4:e4:a1:57:d1:df:57:57:fd:4b:5d:46:3e:
69:06:90:a8:f1:f9:f6:3f:d4:da:3e:02:2d:3e:b5:
6b:46:e0:b1:10:52:f4:6e:98:12:a6:18:66:38:2e:
0d:1a:a0:fc:69:b1:2e:8e:18:19:38:6e:67:ac:52:
64:2b:25:4b:46:2b:c7:b3:f9:ad:e6:3e:50:7a:7a:
c9:83:e3:0a:bf:a0:43:49:44:3f:37:14:a9:5f:ea:
5e:07:4d:25:b8:fb:1d:0e:35:da:7a:3d:a2:68:9e:
0e:73:f6:b6:45:c7:b9:93:f5:cf:c9:db:f7:56:b6:
c6:4d:05:d2:33:6d:93:eb:04:99:34:e6:d4:1f:f0:
40:68:75:05:90:48:92:c5:96:ea:ae:0e:d3:f7:13:
4d:59:4b:d0:c5:a8:80:6f:19:4c:a6:43:43:6a:7c:
7b:5b:37:a1:cc:1d:c3:08:13:93:98:31:61:38:9e:
64:24:96:e0:c5:81:3f:bd:55:d3:1e:c7:06:62:82:
54:df:07:92:4a:6c:7b:82:8c:21:67:2b:f8:68:b0:
a7:08:ab:6c:ac:ed:bf:f9:1c:8c:8c:49:98:6a:82:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:BF:19:68:86:1C:CF:9F:B5:43:13:0F:E3:E4:7B:C2:FC:21:D5
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/F7G_GWiGHM-ftUMTD-Pke8L8IdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7b:0c:02:9d:08:77:a7:4d:69:33:38:27:55:67:9d:e4:33:
6b:79:23:63:4a:90:24:0d:8e:0e:7f:8d:82:00:77:8b:2e:2a:
d1:f6:fe:2b:1f:50:2b:11:87:fd:1d:f9:09:61:ff:d4:ec:7a:
d3:6e:af:52:ce:4d:f7:9a:52:92:9b:69:d2:a7:2a:9b:6b:41:
bb:51:c5:39:8b:59:8b:0c:ed:b4:90:9c:97:af:f4:8b:d2:6d:
07:8b:31:6a:c0:82:41:fb:6f:0e:87:e4:47:64:49:d0:0c:bb:
8d:8c:24:10:e6:d4:85:df:e6:30:1c:cf:a0:dc:31:4c:59:16:
99:46:15:84:9b:c9:ae:2b:c8:60:e8:42:e7:1d:68:b0:c2:f7:
ac:2a:c2:d0:3d:2c:9b:9d:b9:2e:2a:2a:6b:dd:0f:0e:97:7c:
9e:d1:5d:af:bf:89:6d:c8:90:8a:e4:bc:d8:2f:f8:1c:ad:a3:
b6:df:80:a4:31:0d:22:2c:cd:e1:ed:15:be:55:95:fb:88:ff:
0b:d4:7c:a5:d4:16:4f:39:f2:ae:04:18:3f:4c:5c:fd:aa:97:
8b:68:e8:f4:6f:af:1e:82:75:ef:25:17:c6:0f:56:aa:69:94:
02:cb:85:2c:d6:71:2d:8e:74:8a:d2:9e:da:3f:89:84:bd:d9:
af:8c:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:08:29 2026 by rpki-client