Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jhX8ZHUEYAZuADsHd3XBv2eOTSc.roa
File: jhX8ZHUEYAZuADsHd3XBv2eOTSc.roa (raw, json)
Hash identifier: Sn/9TXzulkY/fuKk24HwGWpEZa+W4h5gYLr8/kd/LSs=
Subject key identifier: 8E:15:FC:64:75:04:60:06:6E:00:3B:07:77:75:C1:BF:67:8E:4D:27
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01999430D692A766D066753394D4A692F938
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jhX8ZHUEYAZuADsHd3XBv2eOTSc.roa
Signing time: Mon 29 Sep 2025 06:37:32 +0000
ROA not before: Mon 29 Sep 2025 06:37:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204868
IP address blocks: 2.59.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:30:d6:92:a7:66:d0:66:75:33:94:d4:a6:92:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 29 06:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e15fc64750460066e003b077775c1bf678e4d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:49:c1:02:d8:5a:cb:85:fa:dc:29:15:7c:
c5:35:a6:45:35:f4:ad:14:27:14:df:8d:8d:27:66:
46:a9:25:9f:1f:aa:a9:cb:75:e1:da:ad:a4:38:06:
6e:2a:36:a1:20:33:82:88:80:31:c3:76:c2:2e:31:
ad:b6:01:bb:7d:b5:51:bf:bb:e0:09:2b:60:5a:ed:
81:b6:21:9f:7b:a0:0c:67:e8:34:60:93:50:df:19:
fe:2e:24:ae:4a:1f:9d:23:1b:f2:cb:bd:41:56:9c:
c0:b0:5d:fd:1a:7c:3c:c5:6f:d8:82:5e:e8:04:42:
08:f1:dc:09:9e:07:63:57:78:4d:b2:fd:c7:73:db:
d2:81:f6:9c:bd:8e:0f:cc:69:2b:52:e9:56:66:c0:
ec:b9:2a:88:30:70:3d:ad:ba:e0:ed:57:7e:bb:04:
23:0c:63:f4:1e:64:63:83:8e:03:19:3c:bc:58:43:
a5:13:f4:84:5e:b2:38:36:be:02:d1:54:ff:11:e0:
2b:78:15:8b:00:be:19:5d:78:f2:a5:95:bc:7e:52:
d8:93:1d:fb:56:40:a2:f6:bc:08:05:f9:db:73:ed:
bf:66:a2:87:68:f1:6b:54:5c:ee:46:dc:c7:1c:3c:
62:b3:8f:f4:7c:f1:17:8f:a5:c6:46:f3:cd:d4:ea:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:15:FC:64:75:04:60:06:6E:00:3B:07:77:75:C1:BF:67:8E:4D:27
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jhX8ZHUEYAZuADsHd3XBv2eOTSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.204.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f2:b0:e9:b6:b0:cb:fc:65:52:8d:4c:3c:b7:d1:fd:11:33:
d4:08:b7:a9:56:68:55:46:76:47:ff:0f:f1:7b:a5:9b:e0:a8:
27:0e:db:33:07:72:4f:7c:b0:b5:2a:dc:27:0e:0a:33:ad:46:
9e:ff:fd:3a:02:51:bd:47:72:0b:78:82:41:81:b1:8e:46:e0:
48:1b:2c:cb:70:ef:80:13:09:d3:4c:e7:81:bc:d8:64:79:1b:
8f:87:6a:a0:54:4a:e7:1c:22:77:c2:26:e6:ab:24:0a:22:0b:
2b:98:18:5c:ef:76:2c:25:84:ac:0d:19:ec:8c:2b:cf:2a:fa:
9c:f9:7c:20:80:08:0b:93:ce:37:b4:70:ad:62:d2:8d:b1:76:
25:b8:05:72:42:0e:4b:b4:4a:78:23:2c:23:72:a1:ae:ee:fe:
a4:b8:11:3a:b3:09:7e:c4:8b:cd:ee:a8:ef:1e:63:3a:4e:ca:
45:4f:8f:08:60:e7:67:57:66:5b:76:80:06:d1:ec:22:c6:ab:
81:1e:01:c0:c5:41:2e:37:f4:cf:7c:62:b7:be:59:71:b8:0e:
1d:f0:71:90:44:6b:b8:5c:71:b6:ad:bf:34:7f:e8:78:89:b2:
56:74:22:91:9d:49:1f:d3:be:ab:62:6e:b1:61:f1:3a:ae:91:
00:57:1b:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmUMNaSp2bQZnUzlNSmkvk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwOTI5MDYzNzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTE1ZmM2NDc1MDQ2MDA2NmUwMDNiMDc3Nzc1YzFiZjY3OGU0ZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdhJwQLYWsuF+twpFXzFNaZFNfSt
FCcU342NJ2ZGqSWfH6qpy3Xh2q2kOAZuKjahIDOCiIAxw3bCLjGttgG7fbVRv7vg
CStgWu2BtiGfe6AMZ+g0YJNQ3xn+LiSuSh+dIxvyy71BVpzAsF39Gnw8xW/Ygl7o
BEII8dwJngdjV3hNsv3Hc9vSgfacvY4PzGkrUulWZsDsuSqIMHA9rbrg7Vd+uwQj
DGP0HmRjg44DGTy8WEOlE/SEXrI4Nr4C0VT/EeAreBWLAL4ZXXjypZW8flLYkx37
VkCi9rwIBfnbc+2/ZqKHaPFrVFzuRtzHHDxis4/0fPEXj6XGRvPN1Orh+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4V/GR1BGAGbgA7B3d1wb9njk0nMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvamhYOFpIVUVZQVp1QURzSGQzWEJ2MmVPVFNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjvMMA0G
CSqGSIb3DQEBCwUAA4IBAQBz8rDptrDL/GVSjUw8t9H9ETPUCLepVmhVRnZH/w/x
e6Wb4KgnDtszB3JPfLC1KtwnDgozrUae//06AlG9R3ILeIJBgbGORuBIGyzLcO+A
EwnTTOeBvNhkeRuPh2qgVErnHCJ3wibmqyQKIgsrmBhc73YsJYSsDRnsjCvPKvqc
+XwggAgLk843tHCtYtKNsXYluAVyQg5LtEp4IywjcqGu7v6kuBE6swl+xIvN7qjv
HmM6TspFT48IYOdnV2ZbdoAG0ewixquBHgHAxUEuN/TPfGK3vllxuA4d8HGQRGu4
XHG2rb80f+h4ibJWdCKRnUkf076rYm6xYfE6rpEAVxvC
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:49:59 2025 by rpki-client