Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/d8tYjTMOm2iLi-JD46yX3lK67ec.roa
File: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (raw, json)
Hash identifier: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=
Subject key identifier: 77:CB:58:8D:33:0E:9B:68:8B:8B:E2:43:E3:AC:97:DE:52:BA:ED:E7
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019D9AFC04868AB8F11F37930A7F082BD010
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/d8tYjTMOm2iLi-JD46yX3lK67ec.roa
Signing time: Fri 17 Apr 2026 10:28:20 +0000
ROA not before: Fri 17 Apr 2026 10:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 138.124.62.0/24 maxlen: 24
138.124.63.0/24 maxlen: 24
138.124.64.0/24 maxlen: 24
138.124.65.0/24 maxlen: 24
138.124.66.0/24 maxlen: 24
138.124.67.0/24 maxlen: 24
138.124.79.0/24 maxlen: 24
138.124.80.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:fc:04:86:8a:b8:f1:1f:37:93:0a:7f:08:2b:d0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 17 10:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77cb588d330e9b688b8be243e3ac97de52baede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:1f:f8:91:47:06:35:ea:40:14:44:d3:39:
ae:03:f4:d7:16:cb:8d:b5:1a:63:b7:55:65:3c:86:
96:4d:91:af:4d:e2:27:3d:63:0c:e9:65:88:a3:9f:
97:e0:b7:2d:a2:56:9c:18:a3:0c:05:56:4e:13:a3:
d2:ad:11:a2:52:44:50:d6:0e:5b:17:d2:fc:63:e5:
fc:ba:aa:e2:49:2b:10:bf:62:2a:c5:02:ae:08:68:
73:69:bf:99:1d:55:b2:ce:16:3c:cb:43:86:40:6a:
bb:d4:4f:2d:52:98:2b:d6:37:4b:b0:ec:ac:4c:43:
e1:b0:69:49:3c:7a:47:9f:08:2f:69:cb:76:35:b9:
63:df:75:53:3c:55:0c:68:32:16:79:bf:47:2d:fb:
74:ce:b5:9e:51:55:d3:97:ff:04:9f:37:6e:31:e5:
58:69:10:6a:6a:ba:f2:33:94:e4:18:2c:08:02:63:
ca:63:07:27:d8:9b:da:c6:6c:3b:77:60:ed:be:a6:
0a:29:05:78:70:e3:0f:d8:c9:42:da:5a:de:45:74:
1b:b3:40:99:9a:3d:43:f2:a3:ff:4f:b0:d5:37:07:
d0:72:1d:f8:8b:3b:f3:93:d6:29:b7:10:32:6c:80:
9f:89:15:06:9a:0d:4f:6f:bd:dc:92:50:e4:99:2d:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:58:8D:33:0E:9B:68:8B:8B:E2:43:E3:AC:97:DE:52:BA:ED:E7
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/d8tYjTMOm2iLi-JD46yX3lK67ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.62.0-138.124.67.255
138.124.79.0-138.124.80.255
138.124.244.0-138.124.250.255
138.124.252.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c3:8a:18:45:46:50:de:e8:7b:12:6f:05:be:2d:a1:b9:83:
38:ec:cd:62:f6:ee:d9:ab:aa:64:f1:51:da:b8:ea:dc:65:0b:
37:a4:8b:ea:c8:9f:09:da:40:ad:27:bc:9f:92:d9:14:47:58:
97:da:10:5a:db:87:43:46:87:0a:39:25:98:f0:a7:e0:88:26:
b8:94:15:d3:2d:c3:ac:82:b9:ff:48:8c:da:79:1c:f8:42:03:
b8:10:5c:ad:72:f0:e8:92:0c:d0:e2:99:08:cb:64:20:09:42:
5f:99:37:f3:c7:9f:b3:04:81:22:4a:ba:b8:8c:bc:60:a1:6e:
48:34:21:90:fd:7f:f9:ea:30:df:ac:73:30:5d:53:d8:8d:f2:
3d:a9:71:0d:b0:1d:41:49:16:b0:97:a6:b0:ba:20:cd:0a:8a:
09:80:9c:de:01:b3:1a:fb:6f:7d:22:e7:e6:96:e9:9a:08:62:
3d:54:d2:eb:56:09:c9:c4:73:ea:f3:95:c0:97:bd:8b:4f:a6:
ec:eb:b8:e6:94:2a:d8:0c:b2:c9:55:ab:a5:9f:f7:ec:fc:88:
fa:13:26:c0:84:88:46:34:a5:68:82:ad:52:1c:be:a9:e5:79:
83:48:46:e9:4d:5e:83:d3:5d:cc:88:e6:3c:70:5e:82:13:1c:
c9:4d:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:34 2026 by rpki-client