Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/phmgxOcuPF9GcXnZAUVEYc174rU.roa
File: phmgxOcuPF9GcXnZAUVEYc174rU.roa (raw, json)
Hash identifier: M5AQHiMtJTqB/xtKjEf7r3Qpaxze1VwMRf81D421OX4=
Subject key identifier: A6:19:A0:C4:E7:2E:3C:5F:46:71:79:D9:01:45:44:61:CD:7B:E2:B5
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019D70C4358BBC931411256CB679B2D10B94
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/phmgxOcuPF9GcXnZAUVEYc174rU.roa
Signing time: Thu 09 Apr 2026 05:43:20 +0000
ROA not before: Thu 09 Apr 2026 05:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.228.0/24 maxlen: 24
138.124.229.0/24 maxlen: 24
138.124.230.0/24 maxlen: 24
138.124.231.0/24 maxlen: 24
138.124.240.0/24 maxlen: 24
138.124.241.0/24 maxlen: 24
138.124.242.0/24 maxlen: 24
138.124.244.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
138.124.248.0/24 maxlen: 24
138.124.249.0/24 maxlen: 24
138.124.250.0/24 maxlen: 24
138.124.251.0/24 maxlen: 24
138.124.252.0/24 maxlen: 24
138.124.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:c4:35:8b:bc:93:14:11:25:6c:b6:79:b2:d1:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 9 05:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a619a0c4e72e3c5f467179d901454461cd7be2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:2a:3e:49:f0:12:36:29:61:1c:42:39:fb:
d0:8a:ae:ed:79:1f:0c:61:8e:7f:a0:7b:bc:a0:9c:
42:60:a9:e9:fa:76:1d:c4:09:78:c2:68:e0:36:7e:
07:57:5f:28:5b:2c:26:6a:23:9d:ee:07:fb:fd:c8:
b9:05:ab:40:7c:f2:d9:2c:09:14:d1:53:1d:30:4b:
33:2a:52:e6:c8:f9:01:ec:4c:0e:ae:b8:5a:a4:8e:
d1:77:a2:5b:20:63:be:25:82:66:57:d3:a2:12:6a:
7c:0d:5f:50:3f:f8:a6:fb:06:bd:c0:b3:4b:b2:80:
6d:3e:fa:9d:fe:6c:46:f9:68:65:aa:c7:4f:c8:89:
15:80:0e:2c:23:26:a6:b8:8f:23:80:fa:7c:27:86:
ce:51:10:f1:a6:e5:0e:ef:73:00:93:d8:00:bd:d2:
34:04:16:1b:cf:72:fc:b0:90:c0:2d:18:fa:6f:7e:
da:8f:58:79:41:88:83:c3:20:85:72:c3:c7:c5:66:
27:44:61:93:99:1a:54:ec:ef:2a:dd:dc:8d:4e:3c:
78:62:6e:cc:fe:11:50:e9:f6:c3:fa:e0:ed:31:26:
31:3f:57:db:62:cb:9c:8e:4f:ad:48:50:d2:a5:a7:
8f:ef:36:fe:25:3b:60:37:f9:48:f6:3f:74:48:b0:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:A0:C4:E7:2E:3C:5F:46:71:79:D9:01:45:44:61:CD:7B:E2:B5
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/phmgxOcuPF9GcXnZAUVEYc174rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.228.0/22
138.124.240.0-138.124.242.255
138.124.244.0-138.124.253.255
Signature Algorithm: sha256WithRSAEncryption
c6:5e:ce:aa:4b:21:55:21:e5:c6:09:a3:03:ef:28:23:1d:80:
1a:1f:8e:eb:39:20:2c:d2:30:92:4a:07:02:6b:e5:bb:8d:50:
fa:cf:ce:8d:17:35:c8:82:60:43:15:e4:e8:5e:08:a9:39:e3:
77:aa:8c:61:a9:13:bb:65:c5:6b:39:71:78:5a:86:bf:73:5b:
70:65:e5:fc:e2:40:89:61:c0:a9:5e:61:92:57:e8:a4:9a:61:
88:8f:0a:16:f5:72:52:51:ee:ec:f9:a5:7c:5e:d1:0a:61:d1:
d3:92:6b:9a:4b:30:e8:ed:24:31:d0:02:a2:a9:17:15:3d:99:
5e:92:f7:6f:59:b5:64:39:c9:3e:49:f3:1d:12:68:cd:b2:64:
27:89:73:6b:f5:80:e9:2a:73:1f:a3:e5:24:6a:a7:78:4d:9b:
9f:e5:6c:f6:41:00:2c:11:2b:8e:ec:45:d6:26:62:f9:1f:7f:
07:f4:44:5d:f5:ec:01:93:36:49:d8:00:bf:21:41:a4:86:fe:
a4:96:bf:6b:bb:c9:09:b8:b4:71:1a:54:47:2a:05:73:19:63:
d7:cb:30:37:64:bb:c3:e5:b4:2d:ad:0d:b7:53:18:61:2f:dd:
da:73:0f:fc:15:76:0c:d8:8a:6b:ba:5b:6d:d2:1a:ec:1a:2c:
2d:c1:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 09:34:20 2026 by rpki-client