Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/pP2Eqoq22dtdkWjab3oZAROYYF4.roa
File: pP2Eqoq22dtdkWjab3oZAROYYF4.roa (raw, json)
Hash identifier: da24Wj5a2cpI62MpsJZPfy8BAzcyJwxfNfWbY87N+KQ=
Subject key identifier: A4:FD:84:AA:8A:B6:D9:DB:5D:91:68:DA:6F:7A:19:01:13:98:60:5E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F80B997408CB1151F28457B340D948DAC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/pP2Eqoq22dtdkWjab3oZAROYYF4.roa
Signing time: Mon 20 Jul 2026 18:11:14 +0000
ROA not before: Mon 20 Jul 2026 18:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 138.124.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:b9:97:40:8c:b1:15:1f:28:45:7b:34:0d:94:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 20 18:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4fd84aa8ab6d9db5d9168da6f7a19011398605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:b2:2c:29:7f:88:bc:65:28:97:6d:fd:26:
b2:ca:89:bd:bf:f9:29:76:2d:4e:d8:b0:62:98:cc:
82:53:39:1e:a4:fe:d7:a7:2d:36:dc:be:74:b2:e1:
a5:32:1f:15:69:9b:b2:70:05:55:43:71:f9:98:2b:
05:7d:9f:9d:fb:98:a8:54:46:53:be:db:a1:de:20:
04:91:92:99:0d:b3:a1:cb:37:a1:e8:22:3f:0e:1b:
a4:7a:4c:d3:22:9a:05:0b:c4:6b:9c:b0:f4:a1:d4:
66:36:1d:6e:f5:dc:d6:f1:d5:a9:9e:c3:3b:6a:40:
61:a0:fe:38:67:72:7a:3e:86:32:41:00:54:e7:47:
33:26:3e:a4:b7:a0:c7:ac:85:f4:14:40:01:c9:9d:
d8:fa:9c:6e:c9:88:33:e0:3d:1c:03:aa:2f:f2:8c:
72:51:60:d5:f4:90:55:73:f2:d7:7d:bc:c3:ca:62:
7a:7c:9a:82:4a:7f:29:41:5e:32:38:2c:af:8b:b0:
47:17:e8:6e:a7:73:59:eb:7e:63:02:d7:79:eb:8c:
5a:12:70:eb:7a:4d:4f:3b:5d:9a:90:2b:a2:bc:71:
04:95:0a:f3:88:59:f4:e3:3e:0b:a7:69:2d:d6:44:
4e:d2:17:f1:f0:74:16:3c:9e:cd:2c:c9:44:f6:7f:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:84:AA:8A:B6:D9:DB:5D:91:68:DA:6F:7A:19:01:13:98:60:5E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/pP2Eqoq22dtdkWjab3oZAROYYF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ec:fb:94:bd:e4:ea:de:97:09:6e:1b:43:01:6b:b3:d4:75:
52:b4:f7:82:7e:69:7f:4d:4a:d1:b0:99:6e:25:32:97:ce:55:
07:6c:37:5f:79:b4:2c:b4:07:db:fa:c3:07:2b:c4:67:0f:e8:
2d:b4:67:23:d2:f4:31:96:e3:9f:80:f8:c6:22:37:13:24:00:
bb:cc:99:7e:de:f7:5e:0e:59:e2:fe:71:e0:81:57:ee:e6:73:
6f:e6:13:91:29:bc:80:22:a3:ee:5d:75:83:3f:86:62:c1:70:
a5:7f:2c:58:f6:18:5f:2b:a7:b7:b0:91:99:1e:13:3d:bd:31:
30:57:ce:fb:66:a5:07:22:71:c5:f6:7a:b1:fc:6f:98:0b:9b:
52:6b:f8:b8:13:ba:aa:ab:2e:58:18:3a:7f:82:b0:b6:da:23:
b9:9d:af:1a:ff:a0:da:37:24:b9:88:bb:fd:ac:75:90:01:20:
dc:ab:f9:06:28:67:4f:00:39:c5:d6:0a:2e:0f:2d:4d:d3:78:
d4:5a:77:ef:24:16:30:01:30:89:35:fe:af:5e:b0:4d:d2:5a:
2e:49:5a:8b:2f:d8:4c:2d:5f:f2:b4:51:ad:a8:40:e7:d9:2f:
c1:8f:74:e6:a2:7d:03:e2:bc:48:64:12:3f:9b:5a:45:38:4b:
7b:19:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:51 2026 by rpki-client