Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/sUb0Zw8pjJl8ScoJeLuqD9laegA.roa
File: sUb0Zw8pjJl8ScoJeLuqD9laegA.roa (raw, json)
Hash identifier: pDiLmEvZRUyivCYPJwe74TSCfaSqIBI4xYENdV2R1wk=
Subject key identifier: B1:46:F4:67:0F:29:8C:99:7C:49:CA:09:78:BB:AA:0F:D9:5A:7A:00
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019943899A495EFB67B01DF4601F3469E37C
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/sUb0Zw8pjJl8ScoJeLuqD9laegA.roa
Signing time: Sat 13 Sep 2025 14:45:15 +0000
ROA not before: Sat 13 Sep 2025 14:45:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44777
IP address blocks: 138.124.11.0/24 maxlen: 24
138.124.12.0/24 maxlen: 24
138.124.94.0/24 maxlen: 24
138.124.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:43:89:9a:49:5e:fb:67:b0:1d:f4:60:1f:34:69:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Sep 13 14:45:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b146f4670f298c997c49ca0978bbaa0fd95a7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:f1:09:b7:81:77:1c:54:e7:2a:cd:ac:0b:
38:6a:51:bb:5e:e4:1c:6d:a1:2e:df:4d:75:43:06:
5a:73:75:f4:e5:f1:cd:8f:7a:55:ad:1a:32:ae:c9:
b0:f6:22:91:3f:9f:f4:e8:f7:95:91:cb:6c:79:5f:
71:76:72:44:ae:15:d1:24:4c:56:7f:13:fa:ea:c6:
9d:79:72:b7:72:3c:b1:4f:6a:20:c8:60:cd:ee:49:
60:3b:2d:57:04:21:b9:01:b2:2c:8c:68:5c:ba:4c:
6c:c6:d0:41:76:86:4e:6b:0b:e4:3e:6c:a3:fb:38:
8a:75:2f:fa:2e:20:8e:32:eb:47:ba:d0:90:b6:42:
79:8b:4b:ed:74:c5:64:40:c6:77:c4:ff:10:a0:68:
7d:b5:58:1b:ea:a8:ce:0b:39:51:60:24:a5:90:99:
3c:d1:49:a6:cf:fe:cc:6e:71:63:69:bd:80:13:a0:
0e:7b:a2:29:7a:89:42:0f:e6:5a:2d:26:a5:8f:42:
da:75:a5:ed:58:8f:19:14:f0:f9:89:9a:25:a8:e9:
50:86:af:6c:97:8c:97:b1:7b:02:6a:a0:a5:94:f5:
0a:98:30:a4:56:67:94:5c:62:24:41:28:3f:89:98:
00:59:82:db:01:3f:1e:f9:a6:df:33:6c:d1:2a:31:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:F4:67:0F:29:8C:99:7C:49:CA:09:78:BB:AA:0F:D9:5A:7A:00
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/sUb0Zw8pjJl8ScoJeLuqD9laegA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.11.0-138.124.12.255
138.124.94.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:55:ae:4b:1b:a1:7c:a2:d1:51:40:ec:a4:c1:ea:34:e6:9e:
7f:3d:b7:47:17:85:e9:fa:93:22:c6:02:a8:d4:57:f3:09:da:
a9:5b:b7:3c:81:1e:f4:5e:8a:d1:33:14:12:c2:54:d2:2e:cb:
9f:bd:2c:64:00:79:3d:fb:b6:44:e7:49:46:c9:1c:6e:78:dc:
96:ff:60:28:90:53:5b:f7:8e:a5:4d:60:b3:4d:e9:75:eb:b3:
19:e9:ac:6a:c3:ba:31:11:2b:d8:9e:d8:c7:0d:36:fd:74:ff:
02:ff:21:ad:a9:9c:48:99:5d:e0:b0:bf:69:2b:a1:25:7c:ef:
de:5b:19:f9:aa:24:82:43:5e:da:ee:7d:b8:ff:20:ee:48:7c:
4b:c2:9e:55:3d:eb:2d:84:9f:a5:5b:f4:85:36:6e:a0:28:7a:
b8:6f:e6:3d:02:6c:fe:ab:cd:81:d2:57:8c:04:c9:30:98:56:
c5:ec:96:c7:b1:21:3a:6c:12:f7:37:4f:ed:ea:78:ec:65:7c:
d3:a5:a6:79:e8:01:30:9e:cd:16:18:c3:23:f0:82:12:af:ab:
20:00:03:01:17:3f:bc:70:92:66:07:ff:a4:50:a0:1b:66:11:
8a:9d:97:1a:dd:28:9e:b0:89:17:6a:25:8d:28:0e:00:cb:3c:
4f:ec:cb:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:39 2025 by rpki-client