Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/s_RGMMWdcp_4YV1fgVVcfe0YwFE.roa
File: s_RGMMWdcp_4YV1fgVVcfe0YwFE.roa (raw, json)
Hash identifier: lAuWMq1cGQyZ9D0atUq96A+o8jbNFO1Kvf9mZb1azHg=
Subject key identifier: B3:F4:46:30:C5:9D:72:9F:F8:61:5D:5F:81:55:5C:7D:ED:18:C0:51
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A17DD221D0194A8DF612458891517DD78C
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/s_RGMMWdcp_4YV1fgVVcfe0YwFE.roa
Signing time: Tue 27 Oct 2026 14:44:45 +0000
ROA not before: Tue 27 Oct 2026 14:44:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218537
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:d2:21:d0:19:4a:8d:f6:12:45:88:91:51:7d:d7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 27 14:44:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3f44630c59d729ff8615d5f81555c7ded18c051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:bc:ec:80:56:72:a5:94:89:9e:4d:5b:9c:
60:17:f7:65:72:5e:2b:be:c1:24:af:64:bd:3d:81:
7d:eb:0b:fe:0a:61:38:d1:1b:51:9f:10:63:2a:17:
29:9e:b2:0f:23:9b:98:3a:1d:fb:7c:c1:38:28:f0:
48:15:60:bc:bc:dc:b5:e6:e2:38:61:38:ab:dc:9a:
84:1e:14:72:9c:b6:ca:81:ad:9e:59:ce:4e:65:28:
8a:83:c6:f2:5e:c7:74:7d:e8:79:55:4e:b7:df:06:
b3:36:cf:9c:65:ce:a3:09:71:cc:7b:85:5d:9b:f1:
a3:49:d7:71:8f:69:4d:ca:80:f2:c7:33:3f:cf:8b:
85:16:36:b8:ee:7c:d1:27:30:e3:14:2d:e5:50:07:
09:47:10:ab:fa:1f:c6:fb:cf:e2:1f:99:68:42:a3:
96:98:d4:b2:54:f8:b0:e2:8d:97:d4:28:6a:8d:14:
63:ea:6d:51:3e:a6:31:d3:96:f1:21:64:f6:3f:94:
64:b1:95:da:09:5c:d1:c6:74:a1:7d:e7:fa:f9:30:
eb:92:4c:55:b2:75:79:0c:9b:82:27:39:e7:8a:21:
9b:e0:45:17:4c:da:ce:50:bc:f4:ea:65:56:c9:b7:
37:ae:e7:dc:5b:ad:8f:b6:df:fe:ae:df:b9:23:b5:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:46:30:C5:9D:72:9F:F8:61:5D:5F:81:55:5C:7D:ED:18:C0:51
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/s_RGMMWdcp_4YV1fgVVcfe0YwFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b7:d3:ed:b2:97:0e:30:f9:cb:b1:23:8b:66:8d:07:5d:f4:
6e:19:82:09:fa:54:94:d8:07:13:fd:5b:11:45:7d:f6:5b:14:
72:bb:75:b3:6c:88:4f:ed:bc:4f:7b:15:ce:e3:07:ee:4c:a4:
1c:54:0b:53:38:b6:94:45:55:ee:50:99:e3:53:ca:10:24:ff:
f9:48:ac:cb:0e:af:2c:3b:77:b0:1a:7c:8e:09:b0:a6:7f:39:
03:2d:b1:fd:b0:98:3d:ba:ae:00:ac:be:83:86:c0:eb:39:ef:
f7:08:de:5e:d9:49:86:5c:b2:5c:c6:3e:d9:52:48:78:37:ee:
60:c8:f7:c3:08:54:53:d0:89:9e:08:48:e8:eb:d6:a1:ee:78:
f9:73:78:55:5a:d3:44:9d:cb:62:b8:99:3d:7b:69:c4:a8:75:
34:a8:05:6a:9e:ad:0c:f7:5a:df:7e:13:b8:30:42:a9:18:17:
09:f4:ae:10:e9:76:ab:b0:0f:82:20:e5:15:14:a1:15:ac:39:
91:b5:be:7e:2d:dc:b0:ee:1b:50:aa:a3:90:57:1c:75:bb:d3:
8a:e7:0d:70:5d:f5:8d:59:14:e4:08:c9:b9:6b:57:8b:42:4d:
45:2e:e8:42:e2:c8:f9:f0:ad:a9:33:73:10:4d:3a:21:d1:cd:
f3:c6:16:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF90iHQGUqN9hJFiJFRfdeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjYxMDI3MTQ0NDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Y0NDYzMGM1OWQ3MjlmZjg2MTVkNWY4MTU1NWM3ZGVkMThjMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnki87IBWcqWUiZ5NW5xgF/dlcl4r
vsEkr2S9PYF96wv+CmE40RtRnxBjKhcpnrIPI5uYOh37fME4KPBIFWC8vNy15uI4
YTir3JqEHhRynLbKga2eWc5OZSiKg8byXsd0feh5VU633wazNs+cZc6jCXHMe4Vd
m/GjSddxj2lNyoDyxzM/z4uFFja47nzRJzDjFC3lUAcJRxCr+h/G+8/iH5loQqOW
mNSyVPiw4o2X1ChqjRRj6m1RPqYx05bxIWT2P5RksZXaCVzRxnShfef6+TDrkkxV
snV5DJuCJznniiGb4EUXTNrOULz06mVWybc3rufcW62Ptt/+rt+5I7XWuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLP0RjDFnXKf+GFdX4FVXH3tGMBRMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvc19SR01NV2RjcF80WVYxZmdWVmNmZTBZd0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEIbMA0G
CSqGSIb3DQEBCwUAA4IBAQCDt9PtspcOMPnLsSOLZo0HXfRuGYIJ+lSU2AcT/VsR
RX32WxRyu3WzbIhP7bxPexXO4wfuTKQcVAtTOLaURVXuUJnjU8oQJP/5SKzLDq8s
O3ewGnyOCbCmfzkDLbH9sJg9uq4ArL6DhsDrOe/3CN5e2UmGXLJcxj7ZUkh4N+5g
yPfDCFRT0ImeCEjo69ah7nj5c3hVWtNEnctiuJk9e2nEqHU0qAVqnq0M91rffhO4
MEKpGBcJ9K4Q6XarsA+CIOUVFKEVrDmRtb5+Ldyw7htQqqOQVxx1u9OK5w1wXfWN
WRTkCMm5a1eLQk1FLuhC4sj58K2pM3MQTToh0c3zxhbs
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:17:02 2026 by rpki-client