Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/My7QqCOY7fYvyVcQeu--_4PFBaw.roa
File: My7QqCOY7fYvyVcQeu--_4PFBaw.roa (raw, json)
Hash identifier: IIt+7wRgpJyloKVExAr0NQlezCDdd3IzSOZo6EB211c=
Subject key identifier: 33:2E:D0:A8:23:98:ED:F6:2F:C9:57:10:7A:EF:BE:FF:83:C5:05:AC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A04D26090651E26E2199B9386921007B40
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/My7QqCOY7fYvyVcQeu--_4PFBaw.roa
Signing time: Sat 29 Aug 2026 10:52:13 +0000
ROA not before: Sat 29 Aug 2026 10:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11421
IP address blocks: 87.86.0.0/22 maxlen: 24
87.86.22.0/24 maxlen: 24
87.86.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:26:09:06:51:e2:6e:21:99:b9:38:69:21:00:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 29 10:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=332ed0a82398edf62fc957107aefbeff83c505ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:26:ce:13:a9:3b:75:6d:38:5b:9b:06:11:
ea:56:1a:ce:ba:a0:a7:36:9e:4a:65:35:12:14:31:
b6:e3:e3:c1:5c:85:f7:8d:0e:a1:66:a8:91:3b:a8:
1c:f3:3b:28:ba:74:cb:29:c2:a1:3e:7e:1d:73:28:
06:36:1e:69:f3:2d:95:3b:46:bf:19:dc:53:b9:68:
9e:d7:47:67:0f:fb:bd:e4:2d:b3:2b:92:45:1f:1c:
a3:83:be:2a:7b:ef:2e:c6:11:a8:2f:55:7d:93:4d:
3f:6f:f4:9f:d0:7b:64:e4:87:a9:26:c1:36:02:b2:
5c:e7:46:20:dc:2e:75:ad:ed:75:e7:70:e7:38:a5:
31:a7:2f:62:24:e2:a9:f7:05:64:3a:5f:f9:3d:af:
a6:20:02:a0:ec:e8:8d:8e:82:58:23:10:51:08:7b:
38:b2:8d:2d:0a:4a:75:a5:a1:53:16:ab:8d:89:f2:
ac:5f:f0:84:0c:28:32:d9:6a:a4:7e:eb:57:4e:aa:
60:3f:6c:e7:13:ea:a1:bc:f5:2e:98:1a:df:53:aa:
a7:25:6f:69:4f:f6:ef:52:7f:f2:df:56:4d:ce:aa:
a9:e0:56:d5:56:1a:3f:31:7e:d4:e9:b2:cc:9b:04:
b6:de:55:81:74:2b:9e:14:9f:c7:d3:f3:cb:6b:0d:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:D0:A8:23:98:ED:F6:2F:C9:57:10:7A:EF:BE:FF:83:C5:05:AC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/My7QqCOY7fYvyVcQeu--_4PFBaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.0.0/22
87.86.22.0/24
87.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f0:50:a2:e6:e3:6c:f3:c3:b4:88:d7:54:2c:9c:a8:06:89:
ff:03:5b:8b:b0:36:11:5e:dc:bc:a8:b3:4c:6d:3a:89:53:7c:
a7:10:db:f5:c3:c1:d0:32:24:f7:ce:44:0f:e4:f1:c4:71:61:
4a:1b:72:cc:1e:a0:91:dd:63:f8:b5:2c:ea:8c:2c:b5:18:d6:
ca:33:a3:43:32:c6:84:73:72:3a:3f:ff:11:64:a9:f7:c7:a5:
33:dc:b9:79:9c:6b:5e:3d:4c:56:a3:57:12:7c:67:7f:ba:3c:
ef:af:ae:32:99:8f:48:d3:45:d6:4e:4e:8f:8e:75:e6:86:1b:
99:af:ba:1b:5f:96:fa:bc:fc:0e:ab:d3:a4:27:1a:84:a4:4c:
f9:8d:a7:bc:03:fb:4d:c0:9e:d7:98:4c:1c:50:28:db:20:8a:
60:3a:2b:38:84:34:d2:ff:7d:c9:f5:63:d6:44:9a:20:23:13:
88:2e:00:31:c8:ac:f1:f5:ee:b5:c7:c4:90:f1:24:20:0e:e3:
82:64:ed:b6:08:e9:16:c0:5a:db:d1:d5:5d:04:04:6d:48:b9:
4e:df:4e:fc:d9:99:7a:a3:74:e5:97:49:f3:c2:40:58:a5:b6:
f5:6f:07:02:22:16:0d:f4:93:10:56:84:d5:d9:f4:6d:d8:1c:
80:c8:bb:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBNJgkGUeJuIZm5OGkhAHtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODI5MTA1MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzJlZDBhODIzOThlZGY2MmZjOTU3MTA3YWVmYmVmZjgzYzUwNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm4mzhOpO3VtOFubBhHqVhrOuqCn
Np5KZTUSFDG24+PBXIX3jQ6hZqiRO6gc8zsounTLKcKhPn4dcygGNh5p8y2VO0a/
GdxTuWie10dnD/u95C2zK5JFHxyjg74qe+8uxhGoL1V9k00/b/Sf0Htk5IepJsE2
ArJc50Yg3C51re1153DnOKUxpy9iJOKp9wVkOl/5Pa+mIAKg7OiNjoJYIxBRCHs4
so0tCkp1paFTFquNifKsX/CEDCgy2WqkfutXTqpgP2znE+qhvPUumBrfU6qnJW9p
T/bvUn/y31ZNzqqp4FbVVho/MX7U6bLMmwS23lWBdCueFJ/H0/PLaw2qVQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDMu0KgjmO32L8lXEHrvvv+DxQWsMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvTXk3UXFDT1k3Zll2eVZjUWV1LS1fNFBGQmF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCV1YAAwQA
V1YWAwQAV1ZXMA0GCSqGSIb3DQEBCwUAA4IBAQAV8FCi5uNs88O0iNdULJyoBon/
A1uLsDYRXty8qLNMbTqJU3ynENv1w8HQMiT3zkQP5PHEcWFKG3LMHqCR3WP4tSzq
jCy1GNbKM6NDMsaEc3I6P/8RZKn3x6Uz3Ll5nGtePUxWo1cSfGd/ujzvr64ymY9I
00XWTk6PjnXmhhuZr7obX5b6vPwOq9OkJxqEpEz5jae8A/tNwJ7XmEwcUCjbIIpg
Ois4hDTS/33J9WPWRJogIxOILgAxyKzx9e61x8SQ8SQgDuOCZO22COkWwFrb0dVd
BARtSLlO30782Zl6o3Tll0nzwkBYpbb1bwcCIhYN9JMQVoTV2fRt2ByAyLsN
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:55 2026 by rpki-client