Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OCPVGl1peHlEh5xCGuK3bL8qTL8.roa
File: OCPVGl1peHlEh5xCGuK3bL8qTL8.roa (raw, json)
Hash identifier: ODjW3HaeaPU7MMPg1i99Po/ddkSUNUhgFTUigxFDscw=
Subject key identifier: 38:23:D5:1A:5D:69:78:79:44:87:9C:42:1A:E2:B7:6C:BF:2A:4C:BF
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01981DEDE166FD1763FBEDC5F004AE94232C
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OCPVGl1peHlEh5xCGuK3bL8qTL8.roa
Signing time: Fri 18 Jul 2025 14:26:25 +0000
ROA not before: Fri 18 Jul 2025 14:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31631
IP address blocks: 5.39.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:ed:e1:66:fd:17:63:fb:ed:c5:f0:04:ae:94:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jul 18 14:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3823d51a5d69787944879c421ae2b76cbf2a4cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:b7:3d:15:69:9e:84:5b:a1:b9:03:48:78:
5a:26:f2:4d:29:d1:49:2a:19:4f:74:45:86:d3:fc:
39:f5:eb:e7:0f:9f:14:ff:c4:aa:15:c0:c1:51:87:
58:6b:4d:6b:50:5b:7d:e1:83:11:76:8b:47:6b:8d:
4e:a2:7c:50:61:ed:e6:69:b3:16:72:ab:13:b0:5c:
9a:67:2b:c1:5d:d9:99:9f:7d:28:20:db:8d:ae:67:
bd:d1:fe:db:92:c1:52:47:cb:3d:6d:6e:d6:ef:be:
36:74:8c:6a:f2:44:d8:63:f3:be:c0:92:a6:34:11:
de:28:f0:fd:bc:53:72:ad:fc:8b:9b:8d:d9:e5:07:
e8:3f:60:09:be:29:6f:61:5c:53:8c:0b:5f:d7:52:
86:ab:b0:32:dd:63:15:cf:69:ef:f5:6c:bc:11:f9:
a3:31:e9:f8:1e:a5:9a:9d:48:4f:59:ab:56:32:72:
dd:33:90:51:9b:43:97:1d:22:f5:ce:45:d3:19:3d:
cb:80:82:14:c2:fb:82:f8:83:71:f1:74:02:6d:14:
4c:07:85:b8:d8:a4:1a:30:00:fe:94:be:b1:39:00:
b1:f3:5e:ce:08:da:dd:6d:97:eb:4e:ed:24:97:6a:
92:17:05:9c:34:35:96:13:89:04:34:29:da:b5:32:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:D5:1A:5D:69:78:79:44:87:9C:42:1A:E2:B7:6C:BF:2A:4C:BF
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OCPVGl1peHlEh5xCGuK3bL8qTL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cd:d7:63:c2:ca:1a:41:4e:a4:e7:6c:02:e2:d8:d6:3d:21:
1f:78:82:4f:c2:26:87:c2:24:e2:66:72:a5:db:aa:0e:81:29:
60:a3:33:a0:04:21:7a:4c:48:60:6b:03:3f:d1:93:e2:e8:00:
9c:0b:a8:68:65:0c:bd:f3:7f:fd:72:a1:e2:9e:06:a5:0c:6e:
ae:5d:b2:20:48:d2:c3:63:38:ee:20:3b:15:c4:22:be:28:43:
15:6c:6c:12:a1:17:38:d1:2e:64:fd:ef:18:57:ad:c6:9f:f2:
9e:a0:06:a5:a5:2a:ab:d4:6d:05:ad:37:a7:1a:51:75:54:74:
cd:04:27:42:71:a9:93:eb:ce:40:3e:cf:1a:c4:75:d3:8b:1b:
25:46:60:64:b3:fd:ee:40:24:57:0c:ad:5b:74:a9:48:66:23:
23:fc:59:25:66:92:1b:a4:d9:43:07:e3:d1:2e:45:a2:22:9e:
45:39:5a:b1:48:87:3d:dc:61:8c:3b:dd:50:95:30:64:66:eb:
da:99:ed:11:c0:99:4f:29:33:70:9a:65:66:90:8d:57:6d:1f:
5b:c6:47:9d:2f:96:ce:1b:6e:b5:95:62:19:1a:ca:f0:3e:8c:
36:32:0c:6a:49:30:b6:80:47:f9:0c:3d:4f:47:7b:15:e1:62:
68:a0:6f:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgd7eFm/Rdj++3F8ASulCMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjUwNzE4MTQyNjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODIzZDUxYTVkNjk3ODc5NDQ4NzljNDIxYWUyYjc2Y2JmMmE0Y2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QK3PRVpnoRbobkDSHhaJvJNKdFJ
KhlPdEWG0/w59evnD58U/8SqFcDBUYdYa01rUFt94YMRdotHa41OonxQYe3mabMW
cqsTsFyaZyvBXdmZn30oINuNrme90f7bksFSR8s9bW7W7742dIxq8kTYY/O+wJKm
NBHeKPD9vFNyrfyLm43Z5QfoP2AJvilvYVxTjAtf11KGq7Ay3WMVz2nv9Wy8Efmj
Men4HqWanUhPWatWMnLdM5BRm0OXHSL1zkXTGT3LgIIUwvuC+INx8XQCbRRMB4W4
2KQaMAD+lL6xOQCx817OCNrdbZfrTu0kl2qSFwWcNDWWE4kENCnatTJ7tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgj1RpdaXh5RIecQhrit2y/Kky/MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvT0NQVkdsMXBlSGxFaDV4Q0d1SzNiTDhxVEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSf4MA0G
CSqGSIb3DQEBCwUAA4IBAQANzddjwsoaQU6k52wC4tjWPSEfeIJPwiaHwiTiZnKl
26oOgSlgozOgBCF6TEhgawM/0ZPi6ACcC6hoZQy983/9cqHingalDG6uXbIgSNLD
YzjuIDsVxCK+KEMVbGwSoRc40S5k/e8YV63Gn/KeoAalpSqr1G0FrTenGlF1VHTN
BCdCcamT685APs8axHXTixslRmBks/3uQCRXDK1bdKlIZiMj/FklZpIbpNlDB+PR
LkWiIp5FOVqxSIc93GGMO91QlTBkZuvame0RwJlPKTNwmmVmkI1XbR9bxkedL5bO
G261lWIZGsrwPow2MgxqSTC2gEf5DD1PR3sV4WJooG/e
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:30 2025 by rpki-client