Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ls86L-LSNvfiReMNCeR4bDois2Q.roa
File: ls86L-LSNvfiReMNCeR4bDois2Q.roa (raw, json)
Hash identifier: tXFI5WWXWiSnVp7h+f2Fmn/+0OgcdnWj+8IFmvaa2js=
Subject key identifier: 96:CF:3A:2F:E2:D2:36:F7:E2:45:E3:0D:09:E4:78:6C:3A:22:B3:64
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDA3D65A5C928D083D857149D52BDD35C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ls86L-LSNvfiReMNCeR4bDois2Q.roa
Signing time: Wed 29 Apr 2026 17:15:49 +0000
ROA not before: Wed 29 Apr 2026 17:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200283
IP address blocks: 2.27.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:3d:65:a5:c9:28:d0:83:d8:57:14:9d:52:bd:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 29 17:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96cf3a2fe2d236f7e245e30d09e4786c3a22b364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:e8:9b:e2:43:78:cb:6f:70:77:94:82:05:
3e:cc:07:d7:50:1f:07:3e:4b:04:ff:f2:19:44:fa:
b4:dd:fb:24:0b:d6:97:71:68:5d:a5:10:39:db:f1:
29:32:24:1f:df:b6:d2:d6:d6:de:72:3b:3f:72:4e:
e2:85:45:bf:b8:66:76:e9:c7:50:3a:b4:19:d5:66:
d0:eb:1d:e5:1e:4f:70:ea:7f:a9:1d:98:aa:46:2b:
2d:6a:f2:36:cf:8b:a6:b9:43:42:8c:d5:7a:b6:5b:
eb:82:df:f7:a4:de:9e:9b:f6:75:3a:40:bb:5a:dc:
6f:8a:b0:3a:32:2d:55:0d:d4:a4:1b:8a:c5:fb:31:
22:8b:78:28:cd:14:26:4f:d2:b7:a2:aa:31:ec:70:
5a:73:b8:53:88:85:eb:89:1b:7c:5a:1c:5e:2e:fe:
63:e2:dd:ea:15:83:5d:ad:8c:4b:40:47:bb:73:cd:
0a:63:84:fa:25:82:de:7b:5d:f0:7e:f5:c8:8b:43:
c4:ca:58:67:2c:8a:e1:78:21:bc:74:88:69:f9:46:
b7:a6:21:5c:32:b9:bc:9d:2a:d3:13:44:e7:00:98:
b1:45:94:16:da:ab:b6:3d:c1:9d:48:f6:81:4a:5b:
3b:11:ea:dd:f3:f6:1c:22:31:c6:37:ae:4c:14:e9:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CF:3A:2F:E2:D2:36:F7:E2:45:E3:0D:09:E4:78:6C:3A:22:B3:64
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ls86L-LSNvfiReMNCeR4bDois2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3b:81:70:e0:1f:d0:f2:49:c2:c3:43:b9:19:cc:b4:3d:31:
f0:a8:8d:0c:fa:ab:c7:0b:96:a4:ee:2c:7a:8f:5d:82:4d:20:
a2:18:ec:91:2a:c4:c9:cf:70:17:d1:2b:7c:a9:23:16:f4:1b:
00:cd:29:92:21:d9:e8:cf:f8:95:3d:de:b4:c0:5b:c7:7e:09:
4b:29:2b:f3:bd:b4:20:39:23:58:19:19:ba:44:d0:1b:f5:d4:
31:cf:10:0e:a9:ea:1f:73:6a:6f:95:1f:57:31:ca:58:03:c1:
22:df:5d:fb:a1:c1:12:34:a9:c8:8c:47:45:29:11:7e:2b:90:
99:0f:35:91:58:ae:5b:55:b8:32:17:fa:fe:4e:8b:40:89:e6:
7d:03:6f:8c:87:45:b3:36:14:82:97:49:62:74:23:c3:d6:16:
46:87:a4:39:0a:9a:3a:d1:fd:7b:6d:f0:93:b2:88:67:15:73:
9f:55:18:41:84:1b:fc:44:6a:d8:54:66:96:5f:10:8f:45:7e:
56:45:28:a5:7b:88:bc:e8:d4:bb:67:fa:38:48:67:50:8f:94:
14:ce:7e:77:97:9f:26:2b:1c:56:77:93:5f:e0:6d:46:de:df:
22:2c:07:e4:c6:ad:fc:e3:a9:ce:04:dc:5d:55:98:ea:cf:ad:
d5:9b:40:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3aPWWlySjQg9hXFJ1SvdNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDI5MTcxNTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmNmM2EyZmUyZDIzNmY3ZTI0NWUzMGQwOWU0Nzg2YzNhMjJiMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HTom+JDeMtvcHeUggU+zAfXUB8H
PksE//IZRPq03fskC9aXcWhdpRA52/EpMiQf37bS1tbecjs/ck7ihUW/uGZ26cdQ
OrQZ1WbQ6x3lHk9w6n+pHZiqRistavI2z4umuUNCjNV6tlvrgt/3pN6em/Z1OkC7
WtxvirA6Mi1VDdSkG4rF+zEii3gozRQmT9K3oqox7HBac7hTiIXriRt8WhxeLv5j
4t3qFYNdrYxLQEe7c80KY4T6JYLee13wfvXIi0PEylhnLIrheCG8dIhp+Ua3piFc
Mrm8nSrTE0TnAJixRZQW2qu2PcGdSPaBSls7Eerd8/YcIjHGN65MFOlkPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbPOi/i0jb34kXjDQnkeGw6IrNkMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbHM4NkwtTFNOdmZpUmVNTkNlUjRiRG9pczJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhtVMA0G
CSqGSIb3DQEBCwUAA4IBAQBbO4Fw4B/Q8knCw0O5Gcy0PTHwqI0M+qvHC5ak7ix6
j12CTSCiGOyRKsTJz3AX0St8qSMW9BsAzSmSIdnoz/iVPd60wFvHfglLKSvzvbQg
OSNYGRm6RNAb9dQxzxAOqeofc2pvlR9XMcpYA8Ei3137ocESNKnIjEdFKRF+K5CZ
DzWRWK5bVbgyF/r+TotAieZ9A2+Mh0WzNhSCl0lidCPD1hZGh6Q5Cpo60f17bfCT
sohnFXOfVRhBhBv8RGrYVGaWXxCPRX5WRSile4i86NS7Z/o4SGdQj5QUzn53l58m
KxxWd5Nf4G1G3t8iLAfkxq3846nOBNxdVZjqz63Vm0CT
-----END CERTIFICATE-----
Generated at Tue May 5 16:48:49 2026 by rpki-client