Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/SxEgzv57NjsKIOhIgGMSSPB31dY.roa
File: SxEgzv57NjsKIOhIgGMSSPB31dY.roa (raw, json)
Hash identifier: Eka7R9DlCQMme8qYnPdf1gGK8Vcy4Z0ZajCHahzY2Gc=
Subject key identifier: 4B:11:20:CE:FE:7B:36:3B:0A:20:E8:48:80:63:12:48:F0:77:D5:D6
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019D70C4366BBC0E637768A469E912AAB3D1
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/SxEgzv57NjsKIOhIgGMSSPB31dY.roa
Signing time: Thu 09 Apr 2026 05:43:20 +0000
ROA not before: Thu 09 Apr 2026 05:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 138.124.0.0/24 maxlen: 24
138.124.1.0/24 maxlen: 24
138.124.5.0/24 maxlen: 24
138.124.11.0/24 maxlen: 24
138.124.12.0/24 maxlen: 24
138.124.62.0/24 maxlen: 24
138.124.63.0/24 maxlen: 24
138.124.64.0/24 maxlen: 24
138.124.65.0/24 maxlen: 24
138.124.66.0/24 maxlen: 24
138.124.67.0/24 maxlen: 24
138.124.68.0/24 maxlen: 24
138.124.69.0/24 maxlen: 24
138.124.70.0/24 maxlen: 24
138.124.71.0/24 maxlen: 24
138.124.72.0/24 maxlen: 24
138.124.73.0/24 maxlen: 24
138.124.74.0/24 maxlen: 24
138.124.75.0/24 maxlen: 24
138.124.76.0/24 maxlen: 24
138.124.77.0/24 maxlen: 24
138.124.79.0/24 maxlen: 24
138.124.80.0/24 maxlen: 24
138.124.83.0/24 maxlen: 24
138.124.88.0/24 maxlen: 24
138.124.94.0/24 maxlen: 24
138.124.95.0/24 maxlen: 24
138.124.96.0/24 maxlen: 24
138.124.100.0/24 maxlen: 24
138.124.104.0/24 maxlen: 24
138.124.105.0/24 maxlen: 24
138.124.106.0/24 maxlen: 24
138.124.120.0/24 maxlen: 24
138.124.122.0/24 maxlen: 24
138.124.228.0/24 maxlen: 24
138.124.229.0/24 maxlen: 24
138.124.230.0/24 maxlen: 24
138.124.231.0/24 maxlen: 24
138.124.240.0/24 maxlen: 24
138.124.241.0/24 maxlen: 24
138.124.243.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.251.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
138.124.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:c4:36:6b:bc:0e:63:77:68:a4:69:e9:12:aa:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 9 05:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b1120cefe7b363b0a20e84880631248f077d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:1a:c4:85:81:1b:89:64:dd:93:90:90:12:
dd:dd:7d:8a:56:76:c0:5d:a4:d8:d2:92:ff:0a:a5:
99:96:fb:6b:6b:14:0f:9b:5c:c7:5a:22:7f:2e:12:
27:fa:fb:0d:a6:0d:5c:29:8f:ec:c6:4c:d4:27:6b:
27:32:d7:79:64:f6:16:b8:3d:46:a0:b4:d4:cc:72:
e0:89:5e:c7:f4:ee:b5:d5:a1:99:a6:55:f0:c7:6d:
48:0d:b7:bf:49:8b:52:4b:50:fd:82:90:a7:c5:20:
d4:a2:f2:19:88:b0:21:df:af:09:54:c8:35:18:08:
55:6d:90:78:54:18:f2:32:00:2e:3f:1d:77:c2:2f:
75:15:80:5b:97:f1:fd:83:00:bb:12:cf:57:a0:f0:
47:d7:db:0c:53:b0:2a:15:8e:52:b0:4a:46:20:ad:
47:11:23:f0:32:68:87:0a:88:79:41:ef:4f:59:74:
63:4a:b7:b3:3a:64:8b:56:79:80:55:77:b8:75:64:
a5:b2:51:ad:4c:55:59:80:a8:39:56:d4:9c:f7:90:
1b:b3:2a:66:1f:71:3f:c3:63:46:5e:30:9b:41:5a:
3f:67:66:da:6e:9d:09:99:25:1b:08:cb:ac:ef:d9:
79:3c:45:01:4a:e5:95:4e:2f:17:a4:97:27:89:6f:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:11:20:CE:FE:7B:36:3B:0A:20:E8:48:80:63:12:48:F0:77:D5:D6
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/SxEgzv57NjsKIOhIgGMSSPB31dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/23
138.124.5.0/24
138.124.11.0-138.124.12.255
138.124.62.0-138.124.77.255
138.124.79.0-138.124.80.255
138.124.83.0/24
138.124.88.0/24
138.124.94.0-138.124.96.255
138.124.100.0/24
138.124.104.0-138.124.106.255
138.124.120.0/24
138.124.122.0/24
138.124.228.0/22
138.124.240.0/23
138.124.243.0-138.124.253.255
Signature Algorithm: sha256WithRSAEncryption
1b:38:ba:c0:1f:7f:eb:af:58:59:fb:b9:36:23:b6:15:82:b8:
f0:68:21:a3:87:04:01:cb:14:ad:04:f6:16:85:cb:53:10:67:
d4:1b:b4:ff:51:42:a5:2f:04:51:1e:70:e8:af:28:10:a1:cc:
23:7b:17:0f:8e:2b:48:ec:28:64:5a:e2:70:45:61:dc:bc:9a:
d8:22:62:48:c3:2a:a3:d6:98:26:7d:85:6d:6f:75:58:0d:9a:
cd:d8:1e:c5:14:c8:3f:73:9e:c4:78:cf:e1:9e:60:09:b1:72:
6d:d1:09:e8:c0:51:a3:76:db:96:f5:00:af:97:5c:85:4f:e7:
b3:ca:e0:90:fe:71:86:28:10:8b:65:94:1a:35:a2:a6:26:c3:
c8:e8:53:b3:1e:c4:57:f2:31:b4:84:a9:14:ff:24:fd:44:15:
cd:2a:15:71:fe:be:47:ff:41:8a:74:b5:9f:4e:37:f8:90:ac:
f0:16:24:27:c4:9f:92:13:9c:53:c1:80:a5:d8:ee:fc:3a:fd:
d1:a3:19:dc:43:75:38:96:79:78:a1:ba:f8:34:97:a3:31:20:
23:82:83:2e:d7:71:0c:a3:11:c1:a6:d8:a4:32:c9:13:b3:03:
7d:06:e4:ef:c4:68:04:f4:70:01:9f:9e:7e:19:0e:de:c5:a4:
1c:83:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:10 2026 by rpki-client