Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/OV-AMO3Wew1LOASAO_xSAQJuMvc.roa
File: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (raw, json)
Hash identifier: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=
Subject key identifier: 39:5F:80:30:ED:D6:7B:0D:4B:38:04:80:3B:FC:52:01:02:6E:32:F7
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 01979BFCC5F54770637E90F03A844609E1FD
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/OV-AMO3Wew1LOASAO_xSAQJuMvc.roa
Signing time: Mon 23 Jun 2025 08:52:03 +0000
ROA not before: Mon 23 Jun 2025 08:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 188.241.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:fc:c5:f5:47:70:63:7e:90:f0:3a:84:46:09:e1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jun 23 08:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395f8030edd67b0d4b3804803bfc5201026e32f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:a6:e6:3d:40:e9:2a:5e:e9:d6:1f:56:0a:
0f:9f:d6:7f:70:90:06:77:8f:3c:4a:43:17:e4:fb:
2d:da:ff:4f:ff:53:ef:4b:4e:68:12:24:01:77:ff:
cc:44:57:0f:67:2c:d8:c2:2a:86:49:0c:94:a8:0f:
87:85:8a:d3:fe:db:73:10:d2:b4:4d:ac:de:ae:fc:
3f:e1:d9:a1:fa:16:04:19:a9:85:78:93:65:37:68:
a3:dc:bb:60:cb:db:ad:81:12:56:cb:d0:01:48:0f:
fc:93:e2:de:86:1a:73:7d:60:e1:5f:70:cf:4a:7d:
92:1c:5d:3e:17:6f:40:14:ab:9e:00:f3:64:de:3d:
b7:98:7f:ec:9f:65:4c:08:d7:63:02:6b:68:2c:c0:
b8:aa:83:a4:8a:79:8e:c4:49:5e:d1:dd:aa:71:20:
20:ee:20:c7:a7:04:57:9d:f3:93:cf:00:2a:f0:e6:
06:4a:6e:5d:53:ef:c2:1a:87:54:e6:f7:3d:77:b5:
8a:90:8b:26:7c:5f:5e:77:86:7a:46:75:2a:ff:1e:
8c:df:a7:b2:35:c9:31:03:83:85:e0:6c:8a:f0:93:
c2:17:da:fc:03:1d:74:7a:f6:3c:8b:1c:c2:7d:99:
ae:32:73:ef:b5:b4:53:b5:f7:56:46:fc:43:9b:7e:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:80:30:ED:D6:7B:0D:4B:38:04:80:3B:FC:52:01:02:6E:32:F7
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/OV-AMO3Wew1LOASAO_xSAQJuMvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1a:39:e5:48:fe:8d:0b:f8:bf:39:73:0b:32:74:51:9c:5f:
71:68:0d:68:67:f2:8a:cf:cf:ee:7c:50:d6:93:59:1d:63:15:
b2:58:9b:6c:b9:dc:b4:21:8d:23:7e:c0:a3:5a:d1:ab:40:46:
cb:42:24:c7:fa:64:00:6c:86:4b:01:6a:67:e8:4f:29:e7:22:
2d:47:58:ee:1d:1b:e2:78:9f:8c:fa:ea:ce:e4:e9:bc:77:b2:
36:d5:b0:b3:50:86:d8:e4:31:59:1e:ac:a5:c0:8a:d7:e9:de:
39:5e:80:90:21:de:c2:4d:01:68:61:c2:ef:b9:ec:1d:df:ee:
2a:87:ac:a6:28:8b:5c:b7:b7:03:67:43:52:6d:d7:6c:b9:c4:
1d:99:2b:d2:55:75:71:a4:69:4e:19:a9:7f:63:52:01:35:c1:
e5:c3:46:78:7c:84:57:3c:20:b4:c8:52:2c:5c:99:56:03:43:
88:ad:64:41:39:fc:41:64:71:03:cb:9b:12:9a:8f:a8:82:6e:
10:4a:27:25:14:be:02:5f:86:28:80:88:c9:43:17:79:9d:c5:
3c:01:2e:a9:d9:f8:e6:da:3f:79:7c:aa:ea:f7:65:b6:08:4f:
08:d4:d6:20:49:94:13:55:9b:c2:67:c4:9f:fa:e2:de:f2:fa:
52:1f:18:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeb/MX1R3BjfpDwOoRGCeH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy
ZTFlZjIwHhcNMjUwNjIzMDg1MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTVmODAzMGVkZDY3YjBkNGIzODA0ODAzYmZjNTIwMTAyNmUzMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz2m5j1A6Spe6dYfVgoPn9Z/cJAG
d488SkMX5Pst2v9P/1PvS05oEiQBd//MRFcPZyzYwiqGSQyUqA+HhYrT/ttzENK0
Tazervw/4dmh+hYEGamFeJNlN2ij3Ltgy9utgRJWy9ABSA/8k+LehhpzfWDhX3DP
Sn2SHF0+F29AFKueAPNk3j23mH/sn2VMCNdjAmtoLMC4qoOkinmOxEle0d2qcSAg
7iDHpwRXnfOTzwAq8OYGSm5dU+/CGodU5vc9d7WKkIsmfF9ed4Z6RnUq/x6M36ey
NckxA4OF4GyK8JPCF9r8Ax10evY8ixzCfZmuMnPvtbRTtfdWRvxDm36D4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlfgDDt1nsNSzgEgDv8UgECbjL3MB8GA1UdIwQY
MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt
ODNhNDQzMTBhOTY0LzEvT1YtQU1PM1dldzFMT0FTQU9feFNBUUp1TXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0
LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPE0MA0G
CSqGSIb3DQEBCwUAA4IBAQAfGjnlSP6NC/i/OXMLMnRRnF9xaA1oZ/KKz8/ufFDW
k1kdYxWyWJtsudy0IY0jfsCjWtGrQEbLQiTH+mQAbIZLAWpn6E8p5yItR1juHRvi
eJ+M+urO5Om8d7I21bCzUIbY5DFZHqylwIrX6d45XoCQId7CTQFoYcLvuewd3+4q
h6ymKItct7cDZ0NSbddsucQdmSvSVXVxpGlOGal/Y1IBNcHlw0Z4fIRXPCC0yFIs
XJlWA0OIrWRBOfxBZHEDy5sSmo+ogm4QSiclFL4CX4YogIjJQxd5ncU8AS6p2fjm
2j95fKrq92W2CE8I1NYgSZQTVZvCZ8Sf+uLe8vpSHxi9
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:52 2025 by rpki-client