Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa
File: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (raw, json)
Hash identifier: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=
Subject key identifier: C7:1C:40:70:73:38:97:12:F0:99:A3:4F:F0:D3:F2:41:83:13:DA:17
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019DA351321AE36D74A669D8473B507C74EA
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa
Signing time: Sun 19 Apr 2026 01:18:20 +0000
ROA not before: Sun 19 Apr 2026 01:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.228.0/24 maxlen: 24
138.124.229.0/24 maxlen: 24
138.124.230.0/24 maxlen: 24
138.124.231.0/24 maxlen: 24
138.124.240.0/24 maxlen: 24
138.124.241.0/24 maxlen: 24
138.124.242.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.251.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:51:32:1a:e3:6d:74:a6:69:d8:47:3b:50:7c:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 19 01:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c71c407073389712f099a34ff0d3f2418313da17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:ed:d7:d8:32:2d:3f:68:9f:ff:bd:46:ea:
7a:c7:89:3c:9f:a8:78:6e:60:c8:1e:d1:35:f4:09:
73:1b:c2:51:7f:2e:4a:de:c1:5b:31:c0:6f:6e:d9:
f7:9f:32:b3:1c:f1:16:3d:ff:6c:75:cb:51:b1:a1:
bd:98:17:dd:6d:61:34:bb:59:b7:23:7d:a2:88:a4:
9c:14:2d:44:bc:79:d0:bd:2d:c6:97:76:99:01:6a:
4c:9d:c0:19:4c:ad:62:ff:2e:29:a5:82:fb:9f:e2:
6a:e2:22:28:c7:0c:2b:59:6e:8b:75:3e:b1:f2:4c:
22:48:8f:1e:95:a3:b5:34:2f:c2:f6:f9:2a:47:ed:
32:47:c3:e1:65:87:d9:7e:7e:78:9f:cb:97:f5:09:
37:bb:ea:a5:11:03:7e:96:05:9d:7b:93:68:59:4d:
a3:38:4b:12:19:fd:22:27:d6:06:fd:aa:e8:6d:55:
26:25:a2:c8:a3:17:c7:97:b3:0b:de:15:49:c4:15:
02:37:d0:f2:48:3b:b5:f5:fa:b7:05:4d:a6:4e:71:
76:5a:96:c6:43:26:40:c9:20:87:73:19:ed:46:df:
b5:db:f2:57:26:1c:5d:bc:cc:14:8d:a8:c5:be:7c:
07:9c:23:0e:f1:d8:a8:44:14:89:10:cc:8e:7a:b6:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1C:40:70:73:38:97:12:F0:99:A3:4F:F0:D3:F2:41:83:13:DA:17
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.228.0/22
138.124.240.0-138.124.242.255
138.124.244.0-138.124.252.255
Signature Algorithm: sha256WithRSAEncryption
9e:90:55:74:76:d7:27:a7:60:7a:11:bc:64:18:32:73:6a:da:
ee:9d:36:81:45:24:a3:54:07:22:a3:82:3d:3a:c8:7f:11:21:
1b:f1:40:b2:59:26:84:93:7d:17:ed:cd:86:c5:87:cf:95:a3:
4c:61:4d:b2:ff:3c:17:59:c3:db:2e:df:b4:d6:28:b9:48:3d:
04:d0:41:9a:67:8d:a1:dd:4e:f7:80:d9:16:bd:4c:04:a6:51:
75:bd:db:4a:7c:52:f4:cc:8d:e1:f2:48:09:49:70:e2:1a:a5:
54:bf:c8:5c:c7:83:c1:13:9e:f7:93:a9:39:b9:4f:2b:3a:fd:
37:01:94:5b:75:44:41:99:24:18:af:ca:15:f8:ef:06:9f:69:
01:92:fd:b8:66:b4:85:dc:44:3a:0c:be:22:20:b8:15:cc:6d:
45:d5:71:3e:6a:db:55:7c:0a:02:bd:70:58:1e:4f:3e:4c:f1:
61:07:66:31:b2:c6:2d:61:67:f2:d3:d5:5d:8d:5d:5d:40:37:
e9:57:8a:0f:08:92:e2:fc:4e:fa:fc:29:85:20:23:10:d8:10:
d6:1a:55:53:94:3b:c7:df:6d:78:13:08:84:75:09:29:46:5a:
a8:41:26:a7:3d:6a:bd:5c:81:98:64:a4:41:50:28:b9:7b:ea:
20:bb:9d:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2jUTIa4210pmnYRztQfHTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjYwNDE5MDExODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzFjNDA3MDczMzg5NzEyZjA5OWEzNGZmMGQzZjI0MTgzMTNkYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJLt19gyLT9on/+9Rup6x4k8n6h4
bmDIHtE19AlzG8JRfy5K3sFbMcBvbtn3nzKzHPEWPf9sdctRsaG9mBfdbWE0u1m3
I32iiKScFC1EvHnQvS3Gl3aZAWpMncAZTK1i/y4ppYL7n+Jq4iIoxwwrWW6LdT6x
8kwiSI8elaO1NC/C9vkqR+0yR8PhZYfZfn54n8uX9Qk3u+qlEQN+lgWde5NoWU2j
OEsSGf0iJ9YG/arobVUmJaLIoxfHl7ML3hVJxBUCN9DySDu19fq3BU2mTnF2WpbG
QyZAySCHcxntRt+12/JXJhxdvMwUjajFvnwHnCMO8dioRBSJEMyOerYQIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMccQHBzOJcS8JmjT/DT8kGDE9oXMB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEveHh4QWNITTRseEx3bWFOUDhOUHlRWU1UMmhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCinzkMAwD
BASKfPADBACKfPIwDAMEAop89AMEAIp8/DANBgkqhkiG9w0BAQsFAAOCAQEAnpBV
dHbXJ6dgehG8ZBgyc2ra7p02gUUko1QHIqOCPTrIfxEhG/FAslkmhJN9F+3NhsWH
z5WjTGFNsv88F1nD2y7ftNYouUg9BNBBmmeNod1O94DZFr1MBKZRdb3bSnxS9MyN
4fJICUlw4hqlVL/IXMeDwROe95OpOblPKzr9NwGUW3VEQZkkGK/KFfjvBp9pAZL9
uGa0hdxEOgy+IiC4FcxtRdVxPmrbVXwKAr1wWB5PPkzxYQdmMbLGLWFn8tPVXY1d
XUA36VeKDwiS4vxO+vwphSAjENgQ1hpVU5Q7x99teBMIhHUJKUZaqEEmpz1qvVyB
mGSkQVAouXvqILudew==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:20 2026 by rpki-client