Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/5RV-6-Bl62jNzbXWPvh_gWaaMNI.roa
File: 5RV-6-Bl62jNzbXWPvh_gWaaMNI.roa (raw, json)
Hash identifier: MIt83MU6K+msVvlyXbT0aeXS8zaPOmLVzlB/Ie7kqeM=
Subject key identifier: E5:15:7E:EB:E0:65:EB:68:CD:CD:B5:D6:3E:F8:7F:81:66:9A:30:D2
Certificate issuer: /CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Certificate serial: 01A05753C636F49106A9AC4545F12E139EDB
Authority key identifier: 69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/5RV-6-Bl62jNzbXWPvh_gWaaMNI.roa
Signing time: Mon 31 Aug 2026 10:18:23 +0000
ROA not before: Mon 31 Aug 2026 10:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218859
IP address blocks: 2a0d:4ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:53:c6:36:f4:91:06:a9:ac:45:45:f1:2e:13:9e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Validity
Not Before: Aug 31 10:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5157eebe065eb68cdcdb5d63ef87f81669a30d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:de:8d:3c:52:61:e8:08:c0:86:55:b5:e8:
3e:49:e1:b2:04:b3:da:b2:64:39:58:6d:94:ba:56:
13:5b:e1:9e:21:16:c5:24:0e:4f:66:6d:5b:7d:c2:
c9:35:9d:7b:df:f9:12:71:7f:92:3a:55:36:95:8d:
78:8c:6e:f2:3a:9b:d4:9e:43:14:70:e5:3a:fb:13:
d3:3a:96:dd:4b:6a:a3:80:e7:50:e7:e7:8c:ed:47:
69:9a:2d:8b:d2:16:6c:aa:ca:bc:d7:74:c6:74:3f:
0a:d7:d6:e3:f5:2b:89:75:e0:80:87:6a:f1:b1:16:
a4:36:36:71:2f:ff:22:01:ea:cd:8d:d3:60:90:a6:
c7:db:61:b1:48:49:94:74:32:07:f8:ae:5a:87:1b:
97:2f:de:b2:ff:5e:31:fe:cc:da:ca:22:50:30:e3:
e2:67:a0:a1:15:31:b0:d6:1b:5c:24:c4:93:9b:1e:
0c:d6:8a:54:57:f8:21:0c:13:ff:07:90:1e:9a:6f:
0a:de:a1:f4:87:0b:52:66:eb:11:98:85:ae:cf:63:
b9:36:21:d9:fd:12:93:b8:d5:78:f3:a9:e7:de:1d:
cc:d5:91:4b:f0:de:24:a5:1b:6b:9c:68:ce:6f:b0:
e8:02:b0:14:19:4d:56:fc:a9:32:c6:ae:11:be:ee:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:7E:EB:E0:65:EB:68:CD:CD:B5:D6:3E:F8:7F:81:66:9A:30:D2
X509v3 Authority Key Identifier:
keyid:69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/5RV-6-Bl62jNzbXWPvh_gWaaMNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
93:27:d2:61:4b:97:40:23:a2:3c:3a:36:e7:ff:c3:2d:2c:d2:
d0:3b:b0:2b:c5:7e:a7:70:3d:a8:a2:14:0f:6a:cb:a4:97:b6:
df:cb:b3:a6:75:53:93:0d:d6:ef:cb:4c:c9:c9:3a:2e:1d:d4:
2d:b7:2e:9f:15:00:01:13:ce:ee:7d:3e:d0:51:27:e4:07:03:
eb:7c:41:aa:b3:fa:32:b6:07:c3:57:d2:a2:56:7f:87:fe:13:
47:d3:36:0a:2a:42:0f:cb:09:ff:c1:49:d9:2f:64:4c:9b:c4:
af:73:f3:26:63:2c:07:56:8f:f5:47:f2:50:f8:a2:f9:0d:e5:
f3:77:ce:26:9b:e8:15:a4:6c:9d:cd:f5:77:e3:bd:d0:ad:b9:
bd:62:fd:6e:ab:cd:31:49:0a:b9:cd:6e:bd:23:85:19:19:71:
99:0d:94:9b:78:4f:5d:af:35:9d:e0:bc:65:b2:b5:ad:8e:2b:
26:de:1e:6d:5a:4c:e9:b8:e2:4e:fc:7d:4c:01:1f:38:b2:8a:
2d:f7:74:4c:f5:aa:ab:1d:a0:27:45:99:d4:e0:55:0f:bb:06:
93:11:99:0e:2d:30:62:a2:5d:e0:a7:33:15:31:31:12:0e:9d:
46:bd:8d:97:53:92:dd:57:c4:28:5e:60:94:3d:e9:be:dc:37:
50:62:65:5e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBXU8Y29JEGqaxFRfEuE57bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YmMwMjAzNTA0NWU4MzJhMGUxZTVhY2Y4YTFmMmJlZTYz
NGU2YmMwHhcNMjYwODMxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTE1N2VlYmUwNjVlYjY4Y2RjZGI1ZDYzZWY4N2Y4MTY2OWEzMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxHejTxSYegIwIZVteg+SeGyBLPa
smQ5WG2UulYTW+GeIRbFJA5PZm1bfcLJNZ173/kScX+SOlU2lY14jG7yOpvUnkMU
cOU6+xPTOpbdS2qjgOdQ5+eM7Udpmi2L0hZsqsq813TGdD8K19bj9SuJdeCAh2rx
sRakNjZxL/8iAerNjdNgkKbH22GxSEmUdDIH+K5ahxuXL96y/14x/szayiJQMOPi
Z6ChFTGw1htcJMSTmx4M1opUV/ghDBP/B5Aemm8K3qH0hwtSZusRmIWuz2O5NiHZ
/RKTuNV486nn3h3M1ZFL8N4kpRtrnGjOb7DoArAUGU1W/Kkyxq4Rvu51UQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOUVfuvgZetozc211j74f4FmmjDSMB8GA1UdIwQY
MBaAFGm8AgNQRegyoOHlrPih8r7mNOa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJ3Q0ExQkY2REtnNGVXcy1LSHl2dVkwNXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82ZTJmODEtYzAzYi00YTJlLTgwZmMt
ZjNjN2JjODU0MTk0LzEvNVJWLTYtQmw2MmpOemJYV1B2aF9nV2FhTU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82ZTJmODEtYzAzYi00YTJlLTgwZmMtZjNjN2JjODU0MTk0
LzEvYWJ3Q0ExQkY2REtnNGVXcy1LSHl2dVkwNXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg1OwDAN
BgkqhkiG9w0BAQsFAAOCAQEAkyfSYUuXQCOiPDo25//DLSzS0DuwK8V+p3A9qKIU
D2rLpJe238uzpnVTkw3W78tMyck6Lh3ULbcunxUAARPO7n0+0FEn5AcD63xBqrP6
MrYHw1fSolZ/h/4TR9M2CipCD8sJ/8FJ2S9kTJvEr3PzJmMsB1aP9UfyUPii+Q3l
83fOJpvoFaRsnc31d+O90K25vWL9bqvNMUkKuc1uvSOFGRlxmQ2Um3hPXa81neC8
ZbK1rY4rJt4ebVpM6bjiTvx9TAEfOLKKLfd0TPWqqx2gJ0WZ1OBVD7sGkxGZDi0w
YqJd4KczFTExEg6dRr2Nl1OS3VfEKF5glD3pvtw3UGJlXg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:55:06 2026 by rpki-client