Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/UJG7xhoXagyPYP-AXWbDky64CS4.roa
File: UJG7xhoXagyPYP-AXWbDky64CS4.roa (raw, json)
Hash identifier: +roS9IqTPAHnKFzUyJfjBxzQW44KpCUow04DXRbeIoM=
Subject key identifier: 50:91:BB:C6:1A:17:6A:0C:8F:60:FF:80:5D:66:C3:93:2E:B8:09:2E
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01A1A9B02EBA2E7151F18FDFA89E26A19DF9
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/UJG7xhoXagyPYP-AXWbDky64CS4.roa
Signing time: Thu 05 Nov 2026 03:10:58 +0000
ROA not before: Thu 05 Nov 2026 03:10:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 138.124.13.0/24 maxlen: 24
138.124.14.0/24 maxlen: 24
138.124.18.0/24 maxlen: 24
138.124.24.0/24 maxlen: 24
138.124.25.0/24 maxlen: 24
138.124.26.0/24 maxlen: 24
138.124.29.0/24 maxlen: 24
138.124.34.0/24 maxlen: 24
138.124.35.0/24 maxlen: 24
138.124.49.0/24 maxlen: 24
138.124.50.0/24 maxlen: 24
138.124.51.0/24 maxlen: 24
138.124.52.0/24 maxlen: 24
138.124.53.0/24 maxlen: 24
138.124.54.0/24 maxlen: 24
138.124.55.0/24 maxlen: 24
138.124.58.0/24 maxlen: 24
138.124.59.0/24 maxlen: 24
138.124.61.0/24 maxlen: 24
138.124.78.0/24 maxlen: 24
138.124.89.0/24 maxlen: 24
138.124.90.0/24 maxlen: 24
138.124.91.0/24 maxlen: 24
138.124.92.0/24 maxlen: 24
138.124.93.0/24 maxlen: 24
138.124.99.0/24 maxlen: 24
138.124.101.0/24 maxlen: 24
138.124.102.0/24 maxlen: 24
138.124.103.0/24 maxlen: 24
138.124.108.0/24 maxlen: 24
138.124.109.0/24 maxlen: 24
138.124.110.0/24 maxlen: 24
138.124.112.0/24 maxlen: 24
138.124.113.0/24 maxlen: 24
138.124.114.0/24 maxlen: 24
138.124.115.0/24 maxlen: 24
138.124.116.0/24 maxlen: 24
138.124.117.0/24 maxlen: 24
138.124.118.0/24 maxlen: 24
138.124.119.0/24 maxlen: 24
138.124.124.0/24 maxlen: 24
138.124.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:b0:2e:ba:2e:71:51:f1:8f:df:a8:9e:26:a1:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Nov 5 03:10:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5091bbc61a176a0c8f60ff805d66c3932eb8092e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:0a:a9:ed:e5:e0:c0:00:b1:cb:18:d1:e2:
cd:ee:74:26:c6:b6:8a:17:36:04:24:b8:f7:5e:9c:
96:86:18:70:5f:a3:62:ff:23:b6:90:7c:68:f6:53:
bf:d8:99:c6:52:e6:b5:03:ba:d0:d1:6a:19:5c:30:
3a:fd:97:b6:18:af:33:d5:02:d2:47:4d:76:37:eb:
35:bb:3d:e9:12:f3:fb:55:c2:a2:f1:96:fd:e5:43:
66:8c:93:22:b0:b9:97:6b:1e:23:21:19:b3:e7:fc:
ca:87:03:4e:f0:9f:ea:cd:00:49:44:53:30:2e:aa:
76:01:21:cb:a6:7d:3d:0f:ca:a4:96:2e:ef:6d:15:
6d:1c:47:3b:26:dd:20:83:c7:01:22:22:fd:0e:25:
60:cf:bd:52:1e:09:c5:20:a0:64:3d:12:ff:72:33:
18:c7:ec:10:4e:22:3c:34:82:12:20:c6:d2:6b:91:
59:3c:d0:f2:ae:25:5b:ef:1a:8a:3e:e3:58:d1:f5:
19:b9:01:ec:26:3a:6b:2d:ef:83:bd:f3:41:ac:81:
34:bd:30:e0:7d:8a:69:bc:61:0f:c0:b3:c1:1f:9b:
70:12:62:ec:32:39:fe:24:8b:62:32:8f:ac:67:20:
1c:00:32:99:b7:ad:e0:bf:b8:d1:99:7b:84:b9:5b:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:BB:C6:1A:17:6A:0C:8F:60:FF:80:5D:66:C3:93:2E:B8:09:2E
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/UJG7xhoXagyPYP-AXWbDky64CS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.13.0-138.124.14.255
138.124.18.0/24
138.124.24.0-138.124.26.255
138.124.29.0/24
138.124.34.0/23
138.124.49.0-138.124.55.255
138.124.58.0/23
138.124.61.0/24
138.124.78.0/24
138.124.89.0-138.124.93.255
138.124.99.0/24
138.124.101.0-138.124.103.255
138.124.108.0-138.124.110.255
138.124.112.0/21
138.124.124.0/24
138.124.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:2e:22:b0:86:9d:d7:13:17:bd:2b:41:17:49:e3:0d:3b:e2:
a5:8e:06:1d:ec:29:51:09:48:47:bb:08:4c:54:46:f5:51:61:
01:f2:c2:74:c1:7e:68:65:31:0a:e4:59:92:6d:43:43:6e:6c:
77:ee:2b:8a:27:50:08:80:ca:0a:00:ea:18:a1:32:9d:1b:ab:
a4:c6:2c:00:30:e5:fa:16:6c:05:5f:a4:f3:2d:82:1e:e5:3b:
5d:51:c2:e7:e1:a3:35:13:f3:2f:9e:a1:af:05:bd:71:01:53:
47:4a:ac:3c:01:fa:1a:f9:a4:25:08:d2:ed:c0:46:23:df:8d:
33:c6:84:b4:c1:7c:ce:72:11:2e:7c:d7:d2:43:e9:e1:f6:56:
1b:60:38:d6:44:0d:58:37:29:96:3c:2d:d0:e5:b6:61:01:2d:
76:b5:96:f4:5c:b5:83:d1:e8:ff:cb:08:07:01:05:fa:a7:04:
29:da:67:4b:56:19:6e:b7:b3:d5:13:a9:86:7b:77:cf:4a:6b:
95:96:37:b0:22:76:2a:0b:8a:5b:b0:f0:ce:bd:75:eb:33:5d:
77:a1:d6:3d:53:16:4a:c6:5a:4e:70:31:91:01:eb:94:59:de:
9f:31:34:63:30:75:a0:ac:22:a6:f2:b5:de:f0:35:38:5b:e3:
ca:d3:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:56:01 2026 by rpki-client