Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/_r7e3jySBWFxAqLAWSDEbmMpjF8.roa
File: _r7e3jySBWFxAqLAWSDEbmMpjF8.roa (raw, json)
Hash identifier: 0s13Gjs3CYsISYzYweJ7h7lIWvgl86R0YjE4dZPqH/A=
Subject key identifier: FE:BE:DE:DE:3C:92:05:61:71:02:A2:C0:59:20:C4:6E:63:29:8C:5F
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01A02F0D2D2E6334DE2F579F3489077BE5C9
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/_r7e3jySBWFxAqLAWSDEbmMpjF8.roa
Signing time: Sun 23 Aug 2026 14:36:27 +0000
ROA not before: Sun 23 Aug 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 138.124.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:0d:2d:2e:63:34:de:2f:57:9f:34:89:07:7b:e5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Aug 23 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=febedede3c9205617102a2c05920c46e63298c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:e2:26:85:17:4a:bc:c3:21:71:60:4e:a4:
17:3e:66:73:90:dd:e8:18:79:22:69:75:d8:56:9d:
94:a3:6a:42:6f:b0:2f:ee:b5:60:0e:80:8f:b9:67:
ed:24:e9:8e:ff:98:98:45:56:3b:4a:27:c4:a1:46:
69:b3:7f:3f:c6:42:74:2d:e4:d1:5a:c6:6e:ea:d3:
8c:1c:42:03:19:a9:da:66:7f:8e:7c:bd:96:5c:3e:
a4:21:f7:08:44:ac:62:07:4b:7b:e9:66:87:bc:57:
90:8b:ae:2c:0d:ae:f6:af:7c:0b:cf:1b:96:67:23:
5e:0a:17:93:be:37:73:08:0a:ad:30:ba:a4:f3:6a:
e9:a5:c1:c4:71:00:ed:bb:1b:aa:7c:9a:8c:08:ca:
ca:71:68:d1:76:5d:b8:70:0f:a6:fa:d1:31:dc:db:
1c:d1:56:74:44:86:77:81:09:64:79:7c:3e:7c:f3:
57:1d:05:20:8b:7f:45:2f:c0:c3:4e:84:6c:db:86:
68:69:6b:cf:1e:fb:fb:67:ff:d1:51:01:93:c4:e8:
cc:77:f7:9d:88:ae:fb:36:06:7e:73:47:60:18:e7:
6c:b7:c9:9e:60:75:f1:8a:e8:ac:a3:1c:4c:ee:c0:
87:25:2f:3a:56:85:2a:45:e7:47:85:29:85:a8:52:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:DE:DE:3C:92:05:61:71:02:A2:C0:59:20:C4:6E:63:29:8C:5F
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/_r7e3jySBWFxAqLAWSDEbmMpjF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.245.0/24
Signature Algorithm: sha256WithRSAEncryption
36:45:bd:6a:87:ae:c2:e6:58:24:69:cc:f7:5e:d3:d9:a2:48:
01:10:2f:11:bf:db:57:03:81:cc:33:f0:fa:ec:03:1e:ef:04:
58:ff:75:6b:8c:3c:2b:fb:49:46:54:f3:d5:cd:05:85:de:ba:
95:79:f1:1e:39:8d:34:e9:70:35:2b:8d:d3:71:a2:8f:97:83:
7f:e7:70:b7:0e:85:83:c5:4a:fe:7a:5c:12:c6:1e:07:63:a1:
6d:90:84:34:14:a1:ec:75:9b:80:3c:1f:5e:47:3d:5a:90:25:
47:d8:55:61:35:cd:87:34:e8:e7:9e:6e:d7:cc:fa:26:3d:f1:
1c:d2:e3:9e:97:99:cd:cc:f0:77:68:ea:2a:85:fa:9f:05:c9:
e2:a7:eb:5b:dc:12:dc:f4:5b:db:88:3f:59:fc:9e:8b:d9:83:
10:41:d5:65:01:bf:37:07:87:98:ad:ce:4d:bd:75:d5:71:40:
69:3c:3a:88:ab:45:e5:01:d3:30:5e:89:b4:68:e4:d8:1d:64:
c2:25:f9:4e:db:af:91:2b:dc:2e:87:8c:ee:fb:0a:1a:36:68:
23:45:49:02:74:c2:5a:2c:0e:12:c2:30:2a:bc:d2:fb:99:3e:
4c:66:f5:bf:fc:6e:12:b0:65:26:02:a3:b1:f3:30:51:3b:4e:
26:27:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:18 2026 by rpki-client