Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iqNYHokbWdD9At7vvUPES2k7860.roa
File: iqNYHokbWdD9At7vvUPES2k7860.roa (raw, json)
Hash identifier: H1yLdcQM3OY8t+2pYarn4z/XuWOcYEIzmTduWnsnULk=
Subject key identifier: 8A:A3:58:1E:89:1B:59:D0:FD:02:DE:EF:BD:43:C4:4B:69:3B:F3:AD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A097FD0495B4CCBD33BE23D0916ED506C5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iqNYHokbWdD9At7vvUPES2k7860.roa
Signing time: Sat 12 Sep 2026 23:38:56 +0000
ROA not before: Sat 12 Sep 2026 23:38:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136050
IP address blocks: 87.86.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:97:fd:04:95:b4:cc:bd:33:be:23:d0:91:6e:d5:06:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 12 23:38:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aa3581e891b59d0fd02deefbd43c44b693bf3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:75:bc:85:84:5a:45:c8:7b:f3:48:1d:3b:
0c:7c:5d:09:91:af:12:ce:59:9c:11:7f:84:51:e5:
8b:ce:ff:47:1e:9b:c5:01:82:1f:8b:e3:84:07:0e:
fe:e9:6d:fc:6c:8f:79:6f:1c:fc:72:69:b7:c5:5f:
8c:fa:56:0f:59:3b:22:57:63:f9:be:67:1a:21:13:
68:fd:88:79:dc:ee:d4:ce:ab:a8:fd:55:7b:82:09:
5a:37:4d:e4:bb:d6:ed:60:3e:08:a8:b2:3b:17:ed:
e1:f0:45:ce:07:5f:25:27:6d:ae:06:df:82:5b:61:
b6:51:7c:e1:85:1a:b0:43:c8:9c:27:d7:22:89:e2:
cd:95:1f:05:4c:3d:f4:1e:ce:a4:1c:3f:95:85:27:
50:ea:d1:be:9b:8f:17:a9:5a:f0:b6:7d:4a:b8:7c:
25:84:9f:0f:79:20:f8:6b:67:de:39:da:5e:7b:97:
d4:3d:74:9f:02:0c:df:95:a9:e4:36:b2:f1:f6:a2:
1a:27:fb:91:7b:1f:45:f2:85:ad:8b:7a:80:b8:92:
d1:99:ff:bb:ea:b5:b5:1f:30:0b:bb:e3:3d:69:e9:
76:ce:d7:b4:01:c3:04:af:ab:f9:18:0f:56:bc:95:
b4:d5:ab:f5:19:08:3d:aa:b2:fc:98:3e:46:1b:f4:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:58:1E:89:1B:59:D0:FD:02:DE:EF:BD:43:C4:4B:69:3B:F3:AD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iqNYHokbWdD9At7vvUPES2k7860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.95.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a4:7d:67:eb:58:c5:c0:fc:99:71:7f:3d:ec:70:c8:f5:68:
39:79:92:0f:b0:ce:d5:f2:9d:1b:fb:32:1e:0d:7a:a7:4d:cf:
21:df:ba:32:af:38:aa:cf:d5:7d:dd:ea:4a:fa:4b:00:4f:25:
c2:c9:3a:36:88:6a:c1:b6:ca:b0:a4:78:ee:8e:b7:eb:1d:fd:
9b:e4:a7:4f:4b:a0:65:b1:50:72:a5:6d:ff:aa:36:d0:49:99:
80:fb:6c:f5:4a:b3:d4:9d:18:4d:5a:75:77:b3:2c:14:c4:0f:
01:9f:b1:94:bf:a8:52:6e:44:66:ed:05:0d:32:11:21:76:a1:
48:0b:7c:9b:c2:9c:f2:ee:2d:9c:2a:cb:09:ed:7f:6a:5d:df:
47:88:3a:fb:1a:2d:c9:2e:ef:62:85:b3:67:fd:24:66:fa:3a:
17:4e:23:b6:e2:10:19:da:d0:b0:0c:3c:7e:4f:2d:31:ac:1f:
4b:46:98:c9:76:49:3f:98:d9:11:af:63:10:95:6c:c8:3b:70:
50:3f:9b:21:65:f7:fa:e0:51:cd:14:6d:c3:65:7b:ee:85:da:
b7:0e:b9:e0:2b:48:32:37:e8:b5:fd:c1:24:dc:b2:71:1c:45:
79:7e:5e:3c:18:30:92:55:2c:55:3b:1b:d8:9c:b9:9c:46:3e:
ed:42:96:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCX/QSVtMy9M74j0JFu1QbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTEyMjMzODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWEzNTgxZTg5MWI1OWQwZmQwMmRlZWZiZDQzYzQ0YjY5M2JmM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe91vIWEWkXIe/NIHTsMfF0Jka8S
zlmcEX+EUeWLzv9HHpvFAYIfi+OEBw7+6W38bI95bxz8cmm3xV+M+lYPWTsiV2P5
vmcaIRNo/Yh53O7Uzquo/VV7gglaN03ku9btYD4IqLI7F+3h8EXOB18lJ22uBt+C
W2G2UXzhhRqwQ8icJ9ciieLNlR8FTD30Hs6kHD+VhSdQ6tG+m48XqVrwtn1KuHwl
hJ8PeSD4a2feOdpee5fUPXSfAgzflankNrLx9qIaJ/uRex9F8oWti3qAuJLRmf+7
6rW1HzALu+M9ael2zte0AcMEr6v5GA9WvJW01av1GQg9qrL8mD5GG/RQsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqjWB6JG1nQ/QLe771DxEtpO/OtMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvaXFOWUhva2JXZEQ5QXQ3dnZVUEVTMms3ODYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1ZfMA0G
CSqGSIb3DQEBCwUAA4IBAQBEpH1n61jFwPyZcX897HDI9Wg5eZIPsM7V8p0b+zIe
DXqnTc8h37oyrziqz9V93epK+ksATyXCyTo2iGrBtsqwpHjujrfrHf2b5KdPS6Bl
sVBypW3/qjbQSZmA+2z1SrPUnRhNWnV3sywUxA8Bn7GUv6hSbkRm7QUNMhEhdqFI
C3ybwpzy7i2cKssJ7X9qXd9HiDr7Gi3JLu9ihbNn/SRm+joXTiO24hAZ2tCwDDx+
Ty0xrB9LRpjJdkk/mNkRr2MQlWzIO3BQP5shZff64FHNFG3DZXvuhdq3DrngK0gy
N+i1/cEk3LJxHEV5fl48GDCSVSxVOxvYnLmcRj7tQpZT
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:55 2026 by rpki-client