Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa
File: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (raw, json)
Hash identifier: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=
Subject key identifier: E6:DB:E0:E9:1F:9A:34:51:C0:98:39:BC:86:C0:61:1C:89:1D:33:FA
Certificate issuer: /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial: 019F23690C55A05F5A316A3EF258AE0F72A8
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15440
IP address blocks: 2001:67c:2ffc::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:55:a0:5f:5a:31:6a:3e:f2:58:ae:0f:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6dbe0e91f9a3451c09839bc86c0611c891d33fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:ef:5f:b0:7e:7b:99:d2:ed:5d:2f:b8:d0:
6e:8f:eb:3a:25:ae:7c:23:72:42:ee:e8:c2:49:62:
4e:53:76:45:79:97:10:7e:e8:29:42:cb:3a:f6:c9:
6e:92:f6:2a:65:e4:2a:02:c8:92:bf:7e:3f:b8:a5:
c4:b0:1f:87:eb:bc:ba:ca:00:f9:d6:1b:5d:31:97:
65:28:f6:01:0b:ac:01:09:4a:3f:87:6e:2e:d6:04:
51:70:d1:16:2f:35:6e:1d:32:91:cf:55:83:fa:9a:
5a:5c:3b:4c:32:e1:95:54:c3:98:9a:72:4a:66:c7:
4d:ef:70:45:b7:56:88:8e:00:47:a0:66:8e:a8:e7:
2a:70:7c:b4:f0:c7:a0:35:04:b1:18:34:76:6b:bd:
cf:a2:f5:82:83:c0:37:25:39:32:1d:b2:08:b6:21:
ec:49:98:c9:a5:f0:62:0b:d6:d6:26:7b:21:0d:1a:
85:52:bc:7f:e8:13:1d:2d:ec:66:c4:08:76:13:35:
bf:69:a2:a0:51:86:1b:c8:d3:94:a9:08:2a:9e:f5:
1d:1a:59:0d:70:cb:7d:2e:c1:66:cd:fe:8d:c2:e3:
d4:4a:87:f2:9c:66:d2:a9:56:1a:64:5b:d1:16:e5:
5c:81:0f:e9:73:7c:b9:32:df:f2:c8:3d:4a:9c:d8:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:E0:E9:1F:9A:34:51:C0:98:39:BC:86:C0:61:1C:89:1D:33:FA
X509v3 Authority Key Identifier:
keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ffc::/48
Signature Algorithm: sha256WithRSAEncryption
2a:71:6d:b3:43:e7:6a:f3:2f:a5:08:64:ee:9d:8c:02:0e:08:
17:a2:28:1b:8e:91:30:e7:83:f7:0d:a2:ff:ad:d8:38:bc:ad:
90:78:00:19:86:db:27:08:a6:29:f4:64:00:da:01:36:ea:93:
90:d9:7d:6f:d4:6f:38:8a:9b:d7:bb:dc:5a:86:0d:7f:5d:b9:
7c:03:05:fc:b7:ef:f7:76:bd:ac:dc:8c:66:68:fc:c0:8c:c6:
cf:05:4c:d8:a1:9a:4e:5f:90:bb:16:b2:2a:e6:53:af:a3:da:
23:0e:28:1e:90:03:68:eb:5c:72:6d:d5:ef:9e:9e:f1:10:f3:
4b:ef:40:37:af:4e:74:7c:ca:61:98:ba:6f:8b:7c:9b:ad:fe:
a0:dd:59:35:70:35:2c:64:5d:4d:22:49:a8:47:c0:84:23:43:
1d:4f:89:27:9c:b7:f0:b0:05:0f:6e:94:bc:62:e6:19:93:6d:
c8:a0:22:6f:04:82:1b:7d:e5:87:eb:1f:8d:80:1c:b5:2d:b4:
60:57:eb:32:9b:ae:0a:68:11:81:aa:f3:a2:fa:57:07:6d:42:
2a:4f:ab:96:c5:30:c4:f6:d8:af:ab:8e:ab:44:85:5d:66:2d:
53:09:fe:bb:c9:c2:22:38:b0:3d:5e:5a:ba:91:fa:f1:85:62:
aa:d9:5b:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaQxVoF9aMWo+8liuD3KoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWExYWU5Yzk0Y2RlMzczM2IxNGNmNzFkMmU0NTAyMzYw
MjFiZTcwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRiZTBlOTFmOWEzNDUxYzA5ODM5YmM4NmMwNjExYzg5MWQzM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyonvX7B+e5nS7V0vuNBuj+s6Ja58
I3JC7ujCSWJOU3ZFeZcQfugpQss69slukvYqZeQqAsiSv34/uKXEsB+H67y6ygD5
1htdMZdlKPYBC6wBCUo/h24u1gRRcNEWLzVuHTKRz1WD+ppaXDtMMuGVVMOYmnJK
ZsdN73BFt1aIjgBHoGaOqOcqcHy08MegNQSxGDR2a73PovWCg8A3JTkyHbIItiHs
SZjJpfBiC9bWJnshDRqFUrx/6BMdLexmxAh2EzW/aaKgUYYbyNOUqQgqnvUdGlkN
cMt9LsFmzf6NwuPUSofynGbSqVYaZFvRFuVcgQ/pc3y5Mt/yyD1KnNgxgQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFObb4OkfmjRRwJg5vIbAYRyJHTP6MB8GA1UdIwQY
MBaAFD9aGunJTN43M7FM9x0uRQI2AhvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFvYTZjbE0zamN6c1V6M0hTNUZBallDRy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt
ODQwODgxYTRkMzBkLzEvNXR2ZzZSLWFORkhBbURtOGhzQmhISWtkTV9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk
LzEvUDFvYTZjbE0zamN6c1V6M0hTNUZBallDRy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/8
MA0GCSqGSIb3DQEBCwUAA4IBAQAqcW2zQ+dq8y+lCGTunYwCDggXoigbjpEw54P3
DaL/rdg4vK2QeAAZhtsnCKYp9GQA2gE26pOQ2X1v1G84ipvXu9xahg1/Xbl8AwX8
t+/3dr2s3IxmaPzAjMbPBUzYoZpOX5C7FrIq5lOvo9ojDigekANo61xybdXvnp7x
EPNL70A3r050fMphmLpvi3ybrf6g3Vk1cDUsZF1NIkmoR8CEI0MdT4knnLfwsAUP
bpS8YuYZk23IoCJvBIIbfeWH6x+NgBy1LbRgV+sym64KaBGBqvOi+lcHbUIqT6uW
xTDE9tivq46rRIVdZi1TCf67ycIiOLA9Xlq6kfrxhWKq2Vv0
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:52 2026 by rpki-client