Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OV81AimBr3IOra2_186K2YQ6aZw.roa
File: OV81AimBr3IOra2_186K2YQ6aZw.roa (raw, json)
Hash identifier: eliptKmQAe1v8DZ66jtE1QMS3zzrNLPVvZNounzZHMk=
Subject key identifier: 39:5F:35:02:29:81:AF:72:0E:AD:AD:BF:D7:CE:8A:D9:84:3A:69:9C
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01981E3F5DF60BA0A3B485C87DF93AF59E42
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OV81AimBr3IOra2_186K2YQ6aZw.roa
Signing time: Fri 18 Jul 2025 15:55:25 +0000
ROA not before: Fri 18 Jul 2025 15:55:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/21 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.144.176.0/21 maxlen: 24
5.178.96.0/20 maxlen: 24
5.178.97.0/24 maxlen: 24
31.192.240.0/21 maxlen: 24
45.12.216.0/22 maxlen: 24
45.12.216.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
103.136.68.0/22 maxlen: 24
185.5.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:3f:5d:f6:0b:a0:a3:b4:85:c8:7d:f9:3a:f5:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jul 18 15:55:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395f35022981af720eadadbfd7ce8ad9843a699c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:fe:fb:ba:08:0b:02:37:d4:5c:07:32:f1:
56:39:07:93:77:e9:ee:8f:aa:61:3a:4d:04:de:d6:
54:a0:85:5e:b2:36:2a:85:d9:3c:ff:f0:bf:37:80:
40:80:cc:da:33:4f:9c:0f:f6:f2:95:15:b1:2b:0e:
fd:08:59:2a:71:b5:07:d0:fa:34:8a:b6:8c:44:3f:
bd:4a:06:74:bc:a2:ac:e7:79:8a:2d:c2:01:5b:26:
b1:16:c7:a2:f0:b2:9a:ce:fd:3a:39:1e:41:8b:83:
ef:a8:6a:2b:10:94:f9:28:26:c2:b5:46:ee:3c:e7:
31:b9:e4:9e:40:aa:ba:8e:6e:ef:06:66:4c:d7:bc:
1d:d6:73:39:ef:8a:ab:8d:d0:e3:84:18:ba:1a:5d:
a6:61:8b:b7:8e:1a:8d:d1:01:53:29:6a:45:ab:ac:
24:70:ba:db:df:b0:b4:bb:f4:ae:34:c0:50:d2:c8:
91:f0:84:c6:c3:dc:80:9d:fb:fc:cd:ff:27:f5:e7:
fe:a5:5a:35:b9:29:02:02:1b:c0:45:7b:7f:cc:bc:
89:37:6b:dc:b7:89:9f:06:28:39:b5:40:73:83:0d:
88:7d:04:59:4a:57:df:67:db:ec:d4:a3:c4:1a:c9:
ce:6b:d0:c0:02:d2:b7:e7:7c:7a:a3:a7:fc:e8:d1:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:35:02:29:81:AF:72:0E:AD:AD:BF:D7:CE:8A:D9:84:3A:69:9C
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OV81AimBr3IOra2_186K2YQ6aZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/21
5.144.176.0/21
5.178.96.0/20
31.192.240.0/21
45.12.216.0/22
103.136.68.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
69:f4:d1:a8:1a:84:59:30:52:cc:d3:42:0f:ce:a2:06:15:51:
f0:1e:8e:1f:2d:0b:5c:c5:a4:19:b7:8d:6e:46:95:97:60:79:
f4:d2:6e:ae:3c:03:b6:85:e0:ab:ba:17:8e:e1:4d:ce:a7:40:
ac:27:56:37:33:7e:ac:51:4f:06:19:35:40:dd:42:0c:88:28:
70:f7:4d:39:23:8f:47:33:de:54:3a:2e:cd:59:b1:5f:2d:7d:
a8:41:2b:5a:54:52:71:8c:18:01:f4:6e:bb:bc:c1:82:52:a2:
40:e2:49:2d:34:af:19:b4:bc:43:51:cc:7a:b6:3a:f2:21:18:
64:58:d0:9e:98:aa:5b:ab:38:44:0f:e3:35:c5:cf:9b:b4:73:
69:94:09:2b:e9:c1:56:80:dc:be:60:0a:8e:05:ed:9b:4d:51:
7a:66:4a:46:df:e3:aa:6b:52:31:2e:d5:78:bd:b4:d4:07:da:
24:89:36:81:01:59:24:b3:dd:7d:dc:7b:1d:09:c2:09:53:ea:
5b:80:9a:88:8d:1f:fe:e7:78:65:63:54:b0:e3:3f:61:6e:34:
e1:42:12:cd:7e:71:8d:c3:c4:cc:b6:01:f0:bd:06:e2:98:95:
30:eb:f7:dc:2e:f4:dd:94:dc:83:25:60:0c:e0:75:a2:21:d6:
31:4f:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:07 2025 by rpki-client