Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/BHctp5peLCTs15IgHI6PNFs56cI.roa
File: BHctp5peLCTs15IgHI6PNFs56cI.roa (raw, json)
Hash identifier: dMDxy7SquE1gejwHsaxMNWYK515d/w25GvminoMIrOo=
Subject key identifier: 04:77:2D:A7:9A:5E:2C:24:EC:D7:92:20:1C:8E:8F:34:5B:39:E9:C2
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019CF8B61A97E450BFCCFE17609F1AA545CB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/BHctp5peLCTs15IgHI6PNFs56cI.roa
Signing time: Mon 16 Mar 2026 22:13:29 +0000
ROA not before: Mon 16 Mar 2026 22:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398378
IP address blocks: 222.167.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:b6:1a:97:e4:50:bf:cc:fe:17:60:9f:1a:a5:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 16 22:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04772da79a5e2c24ecd792201c8e8f345b39e9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:6d:62:b1:ec:1a:a3:b0:dd:dc:e5:7e:08:
da:93:1a:ba:b5:ea:12:4b:c7:1f:99:32:01:d8:13:
2a:bf:84:7a:04:fc:52:18:d0:ce:d0:7a:7b:26:89:
ec:91:5d:e0:e0:20:fd:ce:5a:46:2b:d3:14:35:83:
93:12:7f:4d:e3:5d:06:79:c8:10:d7:e8:c5:9d:63:
51:0a:e3:75:94:d3:db:56:4d:1c:27:18:ac:aa:6c:
80:b3:ff:53:00:54:89:b6:73:f8:22:c8:4b:c2:f9:
00:13:5e:1d:3d:0e:4a:78:75:4b:25:f3:f0:f7:32:
9d:ad:4e:77:e4:c5:96:b3:be:86:9b:b3:bc:80:90:
58:40:81:50:e2:19:6c:1c:b4:31:78:1c:0f:1b:dc:
c8:43:b0:8a:d2:f7:49:7a:eb:58:d3:b6:61:12:f5:
86:c1:5b:ff:9f:7e:4f:4a:43:bb:20:f8:79:e0:24:
f6:ff:c4:0f:be:06:8b:b8:71:75:fc:0c:e8:31:56:
b9:7d:30:ca:ec:eb:b0:6c:e3:5b:93:4a:23:36:ab:
ff:24:ab:75:e6:cd:73:50:f2:f4:42:06:ce:ef:e7:
30:e3:9b:08:f1:1d:b7:1e:8f:86:7d:ad:f8:30:0d:
b3:ba:7f:cb:9c:66:e6:f1:8a:88:4a:81:15:ed:ee:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:2D:A7:9A:5E:2C:24:EC:D7:92:20:1C:8E:8F:34:5B:39:E9:C2
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/BHctp5peLCTs15IgHI6PNFs56cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.200.0/23
Signature Algorithm: sha256WithRSAEncryption
10:2b:93:19:8e:63:4a:8e:88:20:2e:a5:36:6b:db:15:0f:0a:
6a:13:b6:ac:86:de:f5:e9:35:a6:e9:49:e5:a9:2e:f0:8d:8f:
f3:83:d7:b1:98:62:91:88:68:94:d4:a4:c7:9c:db:e8:c3:82:
07:e6:c0:ff:fb:75:0f:81:0c:10:b1:6a:49:ed:6a:de:7f:e0:
ec:7b:7a:fd:fb:b2:88:38:b8:66:60:39:7a:f2:fe:02:a9:3c:
e8:79:6b:64:c1:4c:d4:b4:c5:7a:f5:99:66:4f:3d:87:35:06:
71:d6:1e:49:6d:1c:64:5f:b6:1c:31:a6:1a:f2:ea:3b:95:74:
90:ae:1d:54:1d:a6:f6:d9:d3:58:b8:2c:ff:b3:0e:de:7b:d5:
cb:a4:c4:67:e8:5d:2f:de:3e:2b:b9:0e:66:ff:5d:ed:ee:08:
55:27:4d:ec:88:ce:96:f4:b5:f7:ab:fd:97:5d:80:dd:0c:f6:
52:7e:76:12:87:ac:72:54:cc:91:2d:b6:c4:23:71:69:3d:fd:
e8:b0:8b:d9:0f:90:81:2b:f3:07:a0:4d:54:4e:59:b6:aa:ae:
eb:72:fd:64:1d:55:42:19:3d:5d:74:db:1d:43:35:75:b4:2a:
18:4d:41:61:c7:50:13:aa:92:5e:4b:59:1d:a0:3e:66:2a:10:
e5:43:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 08:35:43 2026 by rpki-client