Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa
File: nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa (raw, json)
Hash identifier: aN95mG0hj7PK2XyXWR+TAHvEHR+mZTfAc87764WjQ2c=
Subject key identifier: 9F:1E:4E:7B:CF:DE:7B:1D:0B:7E:68:7C:48:DD:48:E7:E2:BF:2F:47
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0198133C8E65C2A5BFE5229D0C709ED42E32
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa
Signing time: Wed 16 Jul 2025 12:36:32 +0000
ROA not before: Wed 16 Jul 2025 12:36:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.0.0/24 maxlen: 24
138.124.1.0/24 maxlen: 24
138.124.5.0/24 maxlen: 24
138.124.6.0/24 maxlen: 24
138.124.7.0/24 maxlen: 24
138.124.8.0/24 maxlen: 24
138.124.9.0/24 maxlen: 24
138.124.11.0/24 maxlen: 24
138.124.12.0/24 maxlen: 24
138.124.17.0/24 maxlen: 24
138.124.28.0/24 maxlen: 24
138.124.32.0/24 maxlen: 24
138.124.33.0/24 maxlen: 24
138.124.36.0/24 maxlen: 24
138.124.37.0/24 maxlen: 24
138.124.38.0/24 maxlen: 24
138.124.39.0/24 maxlen: 24
138.124.40.0/24 maxlen: 24
138.124.41.0/24 maxlen: 24
138.124.42.0/24 maxlen: 24
138.124.43.0/24 maxlen: 24
138.124.44.0/24 maxlen: 24
138.124.45.0/24 maxlen: 24
138.124.46.0/24 maxlen: 24
138.124.47.0/24 maxlen: 24
138.124.48.0/24 maxlen: 24
138.124.56.0/24 maxlen: 24
138.124.57.0/24 maxlen: 24
138.124.62.0/24 maxlen: 24
138.124.63.0/24 maxlen: 24
138.124.64.0/24 maxlen: 24
138.124.65.0/24 maxlen: 24
138.124.66.0/24 maxlen: 24
138.124.67.0/24 maxlen: 24
138.124.68.0/24 maxlen: 24
138.124.69.0/24 maxlen: 24
138.124.70.0/24 maxlen: 24
138.124.71.0/24 maxlen: 24
138.124.72.0/24 maxlen: 24
138.124.73.0/24 maxlen: 24
138.124.74.0/24 maxlen: 24
138.124.75.0/24 maxlen: 24
138.124.76.0/24 maxlen: 24
138.124.77.0/24 maxlen: 24
138.124.79.0/24 maxlen: 24
138.124.80.0/24 maxlen: 24
138.124.82.0/24 maxlen: 24
138.124.83.0/24 maxlen: 24
138.124.84.0/24 maxlen: 24
138.124.85.0/24 maxlen: 24
138.124.86.0/24 maxlen: 24
138.124.87.0/24 maxlen: 24
138.124.88.0/24 maxlen: 24
138.124.94.0/24 maxlen: 24
138.124.95.0/24 maxlen: 24
138.124.96.0/24 maxlen: 24
138.124.97.0/24 maxlen: 24
138.124.98.0/24 maxlen: 24
138.124.100.0/24 maxlen: 24
138.124.104.0/24 maxlen: 24
138.124.105.0/24 maxlen: 24
138.124.106.0/24 maxlen: 24
138.124.120.0/24 maxlen: 24
138.124.121.0/24 maxlen: 24
138.124.122.0/24 maxlen: 24
138.124.126.0/24 maxlen: 24
138.124.228.0/24 maxlen: 24
138.124.229.0/24 maxlen: 24
138.124.230.0/24 maxlen: 24
138.124.231.0/24 maxlen: 24
138.124.240.0/24 maxlen: 24
138.124.241.0/24 maxlen: 24
138.124.242.0/24 maxlen: 24
138.124.243.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.251.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
138.124.253.0/24 maxlen: 24
138.124.254.0/24 maxlen: 24
138.124.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:3c:8e:65:c2:a5:bf:e5:22:9d:0c:70:9e:d4:2e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jul 16 12:36:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f1e4e7bcfde7b1d0b7e687c48dd48e7e2bf2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:3c:70:11:e3:16:4f:b3:61:bd:06:ca:a2:
31:ac:c3:45:ab:2d:eb:4a:9c:64:4c:a7:e2:81:4b:
10:25:fb:82:64:0e:6d:65:46:bc:79:37:39:52:fd:
d5:29:bd:9c:53:92:73:b7:aa:fb:f4:bf:7e:ab:09:
86:aa:38:49:f9:b7:5d:89:74:ab:4b:78:a0:87:05:
9d:89:b8:e2:83:b6:24:a8:d6:30:25:27:85:0b:50:
e7:02:1a:34:65:73:e2:f2:6c:a7:62:7b:f3:bc:78:
51:4f:47:25:73:20:7d:1c:a3:07:a0:f4:ed:6e:d2:
9e:2f:e5:fe:92:5d:1f:00:f7:2f:c7:9f:27:0b:81:
05:bc:f0:ee:a6:d8:24:01:bf:43:41:14:c8:3c:71:
fc:54:c9:22:9f:2c:ea:77:99:97:3a:f1:be:18:49:
13:16:98:34:5f:76:e1:2a:d0:10:44:74:58:30:d3:
1b:63:17:53:1b:b4:48:4a:f2:b6:cb:f2:5f:8d:00:
60:4b:a4:7f:a2:17:b9:43:53:5e:a1:3d:da:81:1d:
76:af:00:e2:bd:52:36:05:ad:09:6d:2a:84:79:af:
61:ea:d0:d5:ac:44:39:a0:af:57:5f:61:89:cc:f8:
bd:f5:ca:e8:eb:aa:da:c6:a5:a5:76:6a:fa:0d:19:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:4E:7B:CF:DE:7B:1D:0B:7E:68:7C:48:DD:48:E7:E2:BF:2F:47
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/23
138.124.5.0-138.124.9.255
138.124.11.0-138.124.12.255
138.124.17.0/24
138.124.28.0/24
138.124.32.0/23
138.124.36.0-138.124.48.255
138.124.56.0/23
138.124.62.0-138.124.77.255
138.124.79.0-138.124.80.255
138.124.82.0-138.124.88.255
138.124.94.0-138.124.98.255
138.124.100.0/24
138.124.104.0-138.124.106.255
138.124.120.0-138.124.122.255
138.124.126.0/24
138.124.228.0/22
138.124.240.0/20
Signature Algorithm: sha256WithRSAEncryption
91:bd:2c:57:f8:6a:be:8b:1f:f9:87:cd:07:b1:b7:1f:6a:fc:
c5:03:3e:a0:b3:3d:58:29:2b:74:f7:bb:1c:ff:f3:98:3e:aa:
5d:1b:73:72:bf:d3:9a:26:3d:31:38:10:db:08:31:d1:c9:9c:
1a:69:20:16:16:44:4a:17:bf:e1:23:b7:d8:66:62:b2:ee:d6:
a8:1a:3e:52:d6:c2:d0:30:a9:b5:0f:21:25:69:11:4a:cb:65:
92:bd:11:3f:3e:88:b4:61:53:76:71:1d:03:19:5d:6a:59:3a:
fd:93:1c:53:bb:1e:35:ef:a7:fa:1e:67:18:8c:31:e0:b7:ee:
5b:d2:07:1b:5b:4e:d3:cb:43:f8:7d:35:94:2a:b4:f2:18:f6:
39:13:28:9c:40:db:54:d1:bb:c3:69:57:6f:54:32:e9:78:11:
1a:18:a7:8a:bf:6b:10:81:52:5c:b1:a4:58:b3:0e:86:71:15:
4e:86:61:6f:ed:e4:c7:89:2d:43:4d:20:9c:49:45:3f:04:06:
f9:26:81:a8:27:1c:19:59:dd:04:99:af:94:b4:65:aa:60:d7:
79:b7:a7:97:ac:40:74:c9:0a:5b:02:3b:f5:3d:7e:52:f2:77:
d2:0f:ad:6b:c7:79:a6:a6:c8:3a:02:fe:b9:1a:fc:f2:9f:1b:
63:67:db:40
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZgTPI5lwqW/5SKdDHCe1C4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjUwNzE2MTIzNjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjFlNGU3YmNmZGU3YjFkMGI3ZTY4N2M0OGRkNDhlN2UyYmYyZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAw8cBHjFk+zYb0GyqIxrMNFqy3r
SpxkTKfigUsQJfuCZA5tZUa8eTc5Uv3VKb2cU5Jzt6r79L9+qwmGqjhJ+bddiXSr
S3ighwWdibjig7YkqNYwJSeFC1DnAho0ZXPi8mynYnvzvHhRT0clcyB9HKMHoPTt
btKeL+X+kl0fAPcvx58nC4EFvPDuptgkAb9DQRTIPHH8VMkinyzqd5mXOvG+GEkT
Fpg0X3bhKtAQRHRYMNMbYxdTG7RISvK2y/JfjQBgS6R/ohe5Q1NeoT3agR12rwDi
vVI2Ba0JbSqEea9h6tDVrEQ5oK9XX2GJzPi99cro66raxqWldmr6DRm8QwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFJ8eTnvP3nsdC35ofEjdSOfivy9HMB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvbng1T2U4X2VleDBMZm1oOFNOMUk1LUtfTDBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAGK
fAAwDAMEAIp8BQMEAYp8CDAMAwQAinwLAwQAinwMAwQAinwRAwQAinwcAwQBinwg
MAwDBAKKfCQDBACKfDADBAGKfDgwDAMEAYp8PgMEAYp8TDAMAwQAinxPAwQAinxQ
MAwDBAGKfFIDBACKfFgwDAMEAYp8XgMEAIp8YgMEAIp8ZDAMAwQDinxoAwQAinxq
MAwDBAOKfHgDBACKfHoDBACKfH4DBAKKfOQDBASKfPAwDQYJKoZIhvcNAQELBQAD
ggEBAJG9LFf4ar6LH/mHzQextx9q/MUDPqCzPVgpK3T3uxz/85g+ql0bc3K/05om
PTE4ENsIMdHJnBppIBYWREoXv+Ejt9hmYrLu1qgaPlLWwtAwqbUPISVpEUrLZZK9
ET8+iLRhU3ZxHQMZXWpZOv2THFO7HjXvp/oeZxiMMeC37lvSBxtbTtPLQ/h9NZQq
tPIY9jkTKJxA21TRu8NpV29UMul4ERoYp4q/axCBUlyxpFizDoZxFU6GYW/t5MeJ
LUNNIJxJRT8EBvkmgagnHBlZ3QSZr5S0Zapg13m3p5esQHTJClsCO/U9flLyd9IP
rWvHeaamyDoC/rka/PKfG2Nn20A=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:49:40 2025 by rpki-client