Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ltNJ04Wda1Y7KFfXKsX92_nNNlg.roa
File: ltNJ04Wda1Y7KFfXKsX92_nNNlg.roa (raw, json)
Hash identifier: Y6bsb5hAAgq4JxFkt7OR95qcM59C8zpIjAeeuzKIuRg=
Subject key identifier: 96:D3:49:D3:85:9D:6B:56:3B:28:57:D7:2A:C5:FD:DB:F9:CD:36:58
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019DCF384D2230900BD4D90F13441AEAD82E
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ltNJ04Wda1Y7KFfXKsX92_nNNlg.roa
Signing time: Mon 27 Apr 2026 13:54:26 +0000
ROA not before: Mon 27 Apr 2026 13:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:38:4d:22:30:90:0b:d4:d9:0f:13:44:1a:ea:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 27 13:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96d349d3859d6b563b2857d72ac5fddbf9cd3658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:0f:a7:b2:1e:ab:2c:96:24:dc:81:8f:53:
dc:fc:bc:8f:12:de:0c:49:2d:f0:c7:f1:de:e7:95:
c7:67:99:39:74:99:3d:c9:57:ae:25:88:26:a6:90:
f4:60:8d:c9:ca:f3:6f:45:b0:41:11:6e:d8:4b:d2:
ab:c7:a5:e0:25:f8:88:ac:07:46:05:1e:d1:77:31:
f5:6d:35:6a:38:59:10:49:bf:af:a4:6b:a8:83:40:
26:13:d9:7b:ad:51:ad:d7:6c:4b:e8:f5:fc:09:c3:
18:3e:c0:8f:95:53:e4:a2:35:a3:28:7b:08:d8:59:
b4:70:72:be:63:40:dc:ec:ea:49:23:43:e4:06:c3:
2c:3f:0a:4b:b2:a7:b5:67:fc:66:b4:ca:97:a6:24:
36:f7:d2:76:9b:3c:18:bb:8d:78:81:29:eb:05:96:
cf:e4:c2:36:31:7b:e5:d7:48:97:d6:9e:b1:43:a9:
e0:c0:e0:b4:7e:6f:a1:84:e8:1a:5a:0d:8e:7f:a5:
e3:eb:2e:a4:ba:9e:2f:ce:0b:a6:57:41:63:e0:44:
3e:76:c9:42:c9:80:70:bd:c4:b8:87:06:97:44:e0:
90:30:6f:d7:78:5c:f4:07:f2:21:c8:97:48:17:ab:
6b:47:1d:07:a4:ab:b2:89:ac:f9:0c:1b:3a:c6:fd:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:49:D3:85:9D:6B:56:3B:28:57:D7:2A:C5:FD:DB:F9:CD:36:58
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ltNJ04Wda1Y7KFfXKsX92_nNNlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:57:00:05:d6:01:89:48:b4:92:6e:7f:87:f6:fd:7f:ac:
c7:3e:97:e6:49:14:ba:a4:91:e4:87:e9:47:50:de:1e:11:6f:
f5:d5:5a:b0:41:99:7b:d3:cd:ff:8f:0b:0d:76:07:c8:89:38:
06:a2:aa:0b:a0:7c:7d:c2:b9:97:d0:6c:41:7e:50:3e:b3:22:
bf:a3:76:6f:da:df:1f:ba:59:60:12:52:8c:b8:8f:01:9c:bd:
6c:32:bd:0b:38:d3:12:47:08:10:14:c3:e9:78:91:94:86:63:
07:d0:3a:7b:80:29:66:dc:ab:02:e5:f4:44:f9:72:48:7f:d5:
63:0b:a5:a0:6e:f4:bc:4d:09:a2:12:f4:85:25:7a:7b:36:fc:
85:29:35:76:bb:69:12:d0:fd:40:b2:6d:52:82:3b:5e:9b:11:
90:b3:f7:7e:c3:88:1b:b6:71:7f:dd:2f:27:2e:f5:a7:9c:36:
50:1e:1a:b0:40:db:94:f2:62:2b:4b:2a:e9:e5:6a:73:48:4b:
e9:2f:b8:03:74:c2:42:30:4e:e2:c3:d4:d6:e3:72:cc:b5:c4:
59:b2:9a:f5:6b:a7:a3:14:4e:7a:00:0d:4c:8d:a4:40:6d:83:
6e:7b:ab:e6:a0:74:4a:43:90:e1:79:b7:5f:60:c1:4e:e2:72:
eb:71:35:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3POE0iMJAL1NkPE0Qa6tguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjYwNDI3MTM1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQzNDlkMzg1OWQ2YjU2M2IyODU3ZDcyYWM1ZmRkYmY5Y2QzNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34oPp7IeqyyWJNyBj1Pc/LyPEt4M
SS3wx/He55XHZ5k5dJk9yVeuJYgmppD0YI3JyvNvRbBBEW7YS9Krx6XgJfiIrAdG
BR7RdzH1bTVqOFkQSb+vpGuog0AmE9l7rVGt12xL6PX8CcMYPsCPlVPkojWjKHsI
2Fm0cHK+Y0Dc7OpJI0PkBsMsPwpLsqe1Z/xmtMqXpiQ299J2mzwYu414gSnrBZbP
5MI2MXvl10iX1p6xQ6ngwOC0fm+hhOgaWg2Of6Xj6y6kup4vzgumV0Fj4EQ+dslC
yYBwvcS4hwaXROCQMG/XeFz0B/IhyJdIF6trRx0HpKuyiaz5DBs6xv1Y6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbTSdOFnWtWOyhX1yrF/dv5zTZYMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvbHROSjA0V2RhMVk3S0ZmWEtzWDkyX25OTmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm45MA0G
CSqGSIb3DQEBCwUAA4IBAQAc11cABdYBiUi0km5/h/b9f6zHPpfmSRS6pJHkh+lH
UN4eEW/11VqwQZl7083/jwsNdgfIiTgGoqoLoHx9wrmX0GxBflA+syK/o3Zv2t8f
ullgElKMuI8BnL1sMr0LONMSRwgQFMPpeJGUhmMH0Dp7gClm3KsC5fRE+XJIf9Vj
C6WgbvS8TQmiEvSFJXp7NvyFKTV2u2kS0P1Asm1SgjtemxGQs/d+w4gbtnF/3S8n
LvWnnDZQHhqwQNuU8mIrSyrp5WpzSEvpL7gDdMJCME7iw9TW43LMtcRZspr1a6ej
FE56AA1MjaRAbYNue6vmoHRKQ5DhebdfYMFO4nLrcTWx
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:17 2026 by rpki-client