Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kJ8uYbh1scN25KnTJGSUYSsQHW8.roa
File: kJ8uYbh1scN25KnTJGSUYSsQHW8.roa (raw, json)
Hash identifier: T/3pZS6JeGDluelfMpTYRAYXX8WNsPEJNO/D+O6wMS4=
Subject key identifier: 90:9F:2E:61:B8:75:B1:C3:76:E4:A9:D3:24:64:94:61:2B:10:1D:6F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01999430D72D190C5A8FF10876A12C26BD47
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kJ8uYbh1scN25KnTJGSUYSsQHW8.roa
Signing time: Mon 29 Sep 2025 06:37:32 +0000
ROA not before: Mon 29 Sep 2025 06:37:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209868
IP address blocks: 2.57.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:30:d7:2d:19:0c:5a:8f:f1:08:76:a1:2c:26:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 29 06:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=909f2e61b875b1c376e4a9d3246494612b101d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:39:68:5e:4c:31:b1:72:c6:a1:09:5d:8d:
7d:35:8c:c4:a8:6a:39:c1:bc:4e:18:96:38:42:b0:
43:75:c5:7f:b6:21:ad:52:cf:ca:73:49:6e:75:66:
08:ff:70:2a:42:50:f3:83:2f:2f:ba:7e:7b:40:8d:
94:6f:31:0e:e4:27:30:cf:9b:26:55:5e:3c:1d:f3:
02:46:4b:5d:2c:8c:de:6b:20:ce:68:b0:4b:a3:a3:
33:9f:03:ac:c3:f2:ed:ac:73:dd:d5:4d:42:0e:18:
4c:93:72:e0:ca:69:9f:b8:49:9d:fb:aa:cb:0d:7a:
8b:bd:6d:35:fc:58:cf:b5:2a:dc:06:48:16:cc:8f:
ab:e3:66:f6:51:d7:49:96:f2:96:4a:9e:3b:da:2e:
db:ce:a1:7f:65:30:5d:9c:f6:4a:0b:4b:04:2b:76:
56:3f:51:a9:55:7a:c4:c8:ae:e0:b2:6a:7a:1d:a6:
5c:96:77:fb:9c:d6:df:3b:8b:48:59:dd:2a:d7:66:
f0:f8:45:a2:89:d3:8d:78:ee:ee:84:97:56:bc:d9:
d2:c1:9f:bb:44:1b:5e:53:86:a8:01:e8:3f:7a:59:
04:67:fe:e5:4f:cd:e2:a8:17:bf:e5:73:d3:0a:90:
1c:23:b6:f9:1e:2a:89:58:75:c8:f5:95:d1:fa:00:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9F:2E:61:B8:75:B1:C3:76:E4:A9:D3:24:64:94:61:2B:10:1D:6F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kJ8uYbh1scN25KnTJGSUYSsQHW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:8d:f5:d9:46:9c:2d:af:c7:48:cc:12:d4:ce:2f:04:02:33:
c7:cd:31:b6:f2:8d:66:ef:74:5c:12:9d:59:31:76:03:0e:1d:
b8:eb:d2:ea:46:63:21:4a:1e:f3:2e:c6:e0:28:62:b5:e0:ed:
4e:e0:89:8b:f1:fa:c2:68:27:30:17:55:27:f9:81:16:c6:99:
b8:55:f4:0a:4e:78:f6:43:36:20:a3:21:10:ee:5b:d9:2a:b4:
5e:fc:8c:69:79:11:11:a2:2f:96:4c:4d:8c:a4:07:f5:97:a6:
5e:77:df:e0:05:4a:4f:8c:d2:bd:6f:34:59:4a:e0:a9:54:35:
ae:01:95:65:87:98:8a:cf:60:f5:c6:8e:81:30:1a:e3:2e:3e:
8f:ed:77:76:57:d5:0a:3c:5e:70:cf:a6:80:fd:17:07:87:2d:
78:12:c4:d9:91:d9:c7:02:98:f9:ab:71:50:8e:94:92:de:48:
5b:0c:67:0a:62:c3:e6:3e:a1:8a:93:30:a7:f9:44:17:3a:fd:
87:13:0d:84:a7:e3:e3:e3:d1:45:f5:2f:71:4b:d8:1f:57:ec:
8d:e9:e9:cf:cd:88:ae:41:b0:5e:13:41:81:d4:b6:95:33:3b:
06:d5:c1:73:d4:19:51:a8:98:e1:2e:6e:d6:09:f8:45:07:f8:
df:8e:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:14:06 2025 by rpki-client