Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/qOO5dT9W5xkoHAQL601E08xwv24.roa
File: qOO5dT9W5xkoHAQL601E08xwv24.roa (raw, json)
Hash identifier: 1FhIPAsVstrUOOgTU9C0JI4gYu/byZYWA//QylDnCnw=
Subject key identifier: A8:E3:B9:75:3F:56:E7:19:28:1C:04:0B:EB:4D:44:D3:CC:70:BF:6E
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01980FDB054C037FFF79055DA205DC3FDC50
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/qOO5dT9W5xkoHAQL601E08xwv24.roa
Signing time: Tue 15 Jul 2025 20:51:08 +0000
ROA not before: Tue 15 Jul 2025 20:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 138.124.0.0/24 maxlen: 24
138.124.1.0/24 maxlen: 24
138.124.5.0/24 maxlen: 24
138.124.6.0/24 maxlen: 24
138.124.7.0/24 maxlen: 24
138.124.8.0/24 maxlen: 24
138.124.9.0/24 maxlen: 24
138.124.11.0/24 maxlen: 24
138.124.12.0/24 maxlen: 24
138.124.17.0/24 maxlen: 24
138.124.28.0/24 maxlen: 24
138.124.32.0/24 maxlen: 24
138.124.33.0/24 maxlen: 24
138.124.36.0/24 maxlen: 24
138.124.37.0/24 maxlen: 24
138.124.38.0/24 maxlen: 24
138.124.39.0/24 maxlen: 24
138.124.40.0/24 maxlen: 24
138.124.41.0/24 maxlen: 24
138.124.42.0/24 maxlen: 24
138.124.43.0/24 maxlen: 24
138.124.44.0/24 maxlen: 24
138.124.45.0/24 maxlen: 24
138.124.46.0/24 maxlen: 24
138.124.47.0/24 maxlen: 24
138.124.48.0/24 maxlen: 24
138.124.56.0/24 maxlen: 24
138.124.57.0/24 maxlen: 24
138.124.62.0/24 maxlen: 24
138.124.63.0/24 maxlen: 24
138.124.64.0/24 maxlen: 24
138.124.65.0/24 maxlen: 24
138.124.66.0/24 maxlen: 24
138.124.67.0/24 maxlen: 24
138.124.68.0/24 maxlen: 24
138.124.69.0/24 maxlen: 24
138.124.70.0/24 maxlen: 24
138.124.71.0/24 maxlen: 24
138.124.72.0/24 maxlen: 24
138.124.73.0/24 maxlen: 24
138.124.74.0/24 maxlen: 24
138.124.75.0/24 maxlen: 24
138.124.76.0/24 maxlen: 24
138.124.77.0/24 maxlen: 24
138.124.79.0/24 maxlen: 24
138.124.80.0/24 maxlen: 24
138.124.82.0/24 maxlen: 24
138.124.83.0/24 maxlen: 24
138.124.84.0/24 maxlen: 24
138.124.85.0/24 maxlen: 24
138.124.86.0/24 maxlen: 24
138.124.87.0/24 maxlen: 24
138.124.88.0/24 maxlen: 24
138.124.94.0/24 maxlen: 24
138.124.95.0/24 maxlen: 24
138.124.96.0/24 maxlen: 24
138.124.97.0/24 maxlen: 24
138.124.98.0/24 maxlen: 24
138.124.100.0/24 maxlen: 24
138.124.104.0/24 maxlen: 24
138.124.105.0/24 maxlen: 24
138.124.106.0/24 maxlen: 24
138.124.120.0/24 maxlen: 24
138.124.121.0/24 maxlen: 24
138.124.122.0/24 maxlen: 24
138.124.126.0/24 maxlen: 24
138.124.228.0/24 maxlen: 24
138.124.229.0/24 maxlen: 24
138.124.230.0/24 maxlen: 24
138.124.231.0/24 maxlen: 24
138.124.240.0/24 maxlen: 24
138.124.241.0/24 maxlen: 24
138.124.242.0/24 maxlen: 24
138.124.243.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.251.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
138.124.253.0/24 maxlen: 24
138.124.254.0/24 maxlen: 24
138.124.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0f:db:05:4c:03:7f:ff:79:05:5d:a2:05:dc:3f:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jul 15 20:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8e3b9753f56e719281c040beb4d44d3cc70bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:17:a6:df:c8:16:cd:4e:80:c9:b0:b0:c7:e6:
ae:60:5f:48:39:cd:6a:cf:79:a8:6a:b7:c4:2d:b2:
4d:a5:df:36:8f:71:96:20:48:df:c1:f3:9c:e7:e3:
70:55:5d:b4:19:9e:9c:0d:df:c2:95:3d:78:70:d0:
df:69:bb:3c:5c:aa:30:76:d8:6c:56:dc:d2:0c:e5:
78:d8:8b:22:4b:e3:9a:f8:71:cf:42:4c:34:6f:de:
51:89:ed:05:ab:de:57:af:21:6a:77:66:b9:32:e5:
da:02:92:6d:c3:28:ee:fe:9b:0c:d4:15:ab:c0:76:
f0:ae:4a:cb:1b:9e:89:cf:07:f7:f0:81:e2:f7:4d:
bd:1e:2f:cf:7e:1e:91:59:69:b3:e5:52:f9:de:4b:
1a:f1:5a:d3:97:39:65:b9:2f:51:79:20:ac:9e:cb:
df:b3:0e:ef:f8:20:9d:04:ee:05:8c:ae:bb:ae:cc:
f5:ca:1e:3e:b2:08:1b:90:e4:4a:ed:22:b9:eb:97:
15:fe:d5:dc:de:f0:51:4c:6e:13:5c:d5:73:bb:2a:
16:17:7f:30:dc:c6:5f:45:0f:1f:a9:66:02:6e:e7:
67:5b:72:bb:d1:78:87:b8:bb:32:ac:8a:69:c3:49:
c0:79:5a:c9:00:c8:29:35:4e:1c:43:61:63:60:30:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:B9:75:3F:56:E7:19:28:1C:04:0B:EB:4D:44:D3:CC:70:BF:6E
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/qOO5dT9W5xkoHAQL601E08xwv24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/23
138.124.5.0-138.124.9.255
138.124.11.0-138.124.12.255
138.124.17.0/24
138.124.28.0/24
138.124.32.0/23
138.124.36.0-138.124.48.255
138.124.56.0/23
138.124.62.0-138.124.77.255
138.124.79.0-138.124.80.255
138.124.82.0-138.124.88.255
138.124.94.0-138.124.98.255
138.124.100.0/24
138.124.104.0-138.124.106.255
138.124.120.0-138.124.122.255
138.124.126.0/24
138.124.228.0/22
138.124.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:fb:36:12:3d:c5:eb:42:0e:79:46:02:5d:fa:c4:e8:c3:b6:
54:81:f6:69:5c:1b:19:ff:5e:3c:f6:71:7d:2f:94:d7:e2:77:
52:bd:14:50:14:e4:63:84:7a:f4:b2:60:1d:8b:f6:b3:c5:fd:
4d:f6:2e:e6:86:28:41:ab:f0:44:87:6d:6a:c4:5a:92:f6:a0:
91:f2:50:75:96:32:ac:4f:d2:89:5a:15:39:5a:b5:89:43:4e:
a8:7c:b6:75:24:f4:1d:25:af:f6:2e:a5:cd:54:44:2b:08:f8:
b7:ca:5f:d7:95:4b:f1:39:c8:9f:a7:f4:ca:31:f7:83:0a:fe:
41:8d:83:65:ad:8b:69:33:5d:4b:c4:fb:c6:57:cc:8e:44:db:
69:07:fd:d1:f4:00:85:18:5a:31:6c:1c:e1:c3:6a:61:91:2c:
28:e0:63:6b:68:97:8f:68:30:f0:d1:c4:81:2f:9c:e3:69:52:
02:c5:e3:d9:3e:d5:35:94:3f:e5:ef:09:48:5d:d5:0d:48:1d:
e9:11:98:f3:3b:a6:11:69:4a:5d:71:a6:8c:8e:3b:f7:62:d8:
54:0c:8c:67:35:c5:b2:4a:0f:c9:46:76:24:d7:06:d0:3b:b9:
86:ea:c8:3a:c6:a6:85:9f:10:65:a4:1f:f2:1c:08:31:f3:5a:
de:e9:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:46 2025 by rpki-client