Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa
File: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (raw, json)
Hash identifier: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=
Subject key identifier: 83:6B:4B:F1:0F:20:54:2D:C8:4A:C2:35:3A:E1:A8:0C:09:3F:AA:30
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019DA35132BFB0EFA8949D24514E27AD6E97
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa
Signing time: Sun 19 Apr 2026 01:18:20 +0000
ROA not before: Sun 19 Apr 2026 01:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207713
IP address blocks: 138.124.76.0/24 maxlen: 24
138.124.77.0/24 maxlen: 24
138.124.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:51:32:bf:b0:ef:a8:94:9d:24:51:4e:27:ad:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 19 01:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=836b4bf10f20542dc84ac2353ae1a80c093faa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:05:84:70:0e:44:d4:53:15:5a:9c:96:cd:
f6:9c:86:3f:a7:7b:f0:a8:da:de:6a:f8:0b:53:9a:
0a:65:f9:ac:1d:e4:ec:e5:ef:a9:1d:f2:28:1e:fd:
16:52:e1:7f:56:b3:7d:15:ed:62:64:9f:7b:63:9b:
51:9f:12:81:16:e5:44:d3:08:d0:85:eb:0d:dd:1d:
14:bd:c5:8d:5f:7a:70:93:6f:91:22:f1:8b:9c:bb:
62:e6:6a:78:63:38:1c:b6:21:aa:38:fb:f1:6c:07:
61:42:7e:10:5d:2c:f5:d6:63:48:0f:d0:fe:ea:6f:
17:d6:51:66:df:b5:4f:6b:cd:76:67:4c:34:fa:9c:
49:76:21:ad:da:db:91:11:84:5c:43:29:6b:f8:31:
55:2c:d4:3d:d8:ab:94:cc:9f:16:96:56:f0:cc:d1:
d4:5a:ac:40:02:6f:b7:61:98:0d:e7:59:55:f0:c2:
a7:38:27:98:a9:29:57:5c:61:c2:a8:78:ea:bc:3b:
76:2a:86:3c:24:d8:22:53:56:d2:88:7d:d4:06:30:
69:d2:fb:27:6f:7e:16:c7:ed:57:3a:1a:91:f0:68:
df:50:43:85:df:84:0b:c0:cb:8f:23:f9:4e:1d:65:
d8:b7:7c:46:67:2a:7e:e9:b9:a5:08:79:bc:a8:c9:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:4B:F1:0F:20:54:2D:C8:4A:C2:35:3A:E1:A8:0C:09:3F:AA:30
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.76.0/23
138.124.253.0/24
Signature Algorithm: sha256WithRSAEncryption
36:37:9c:53:54:59:26:76:8b:6a:02:c9:12:e7:05:06:e1:79:
1f:ee:72:4c:01:29:8a:b2:e3:38:fc:3e:12:da:f5:45:b3:b8:
3f:fc:d1:e3:72:df:70:31:71:90:d0:5c:09:1c:8b:a6:c9:4b:
0e:ed:d7:e6:7f:3e:00:aa:94:49:a0:a1:5c:29:fb:f7:ab:82:
4d:6f:52:91:90:13:40:82:29:cd:85:e2:b3:05:cc:94:ee:eb:
7a:80:22:5e:e8:3a:56:4e:d2:90:41:58:99:2c:83:94:a9:ea:
36:f5:8f:bc:33:a8:4c:54:a8:bb:37:e4:d8:29:4a:48:51:3c:
aa:e9:83:95:55:6e:02:f1:05:ab:4d:6e:f9:0f:81:eb:49:76:
f0:7f:79:cb:95:24:bb:fc:e2:aa:ea:d9:d2:c3:4a:03:cd:02:
df:94:36:b0:f8:00:cc:81:6b:39:a3:5a:ee:b8:3c:2c:c4:70:
42:4f:9d:a6:e3:f7:9d:36:29:f3:46:17:8d:65:08:a7:64:33:
11:72:af:40:6e:a7:fe:ff:c0:8b:0d:b7:61:bb:ff:1b:8b:6c:
12:fb:c9:18:b6:a3:b6:01:ce:c8:8a:54:6a:24:a3:f9:f1:82:
78:96:d5:cb:08:a9:d2:92:d3:85:dd:db:9c:24:8f:24:0b:e0:
6b:04:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:22 2026 by rpki-client