Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BHwETxfxAG-FlW-2gR2swtW8f54.roa
File: BHwETxfxAG-FlW-2gR2swtW8f54.roa (raw, json)
Hash identifier: OSmpGtbSXpdE0u69iRKj0bOd9vpUc8AgFIuei1hFfpM=
Subject key identifier: 04:7C:04:4F:17:F1:00:6F:85:95:6F:B6:81:1D:AC:C2:D5:BC:7F:9E
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0199A3C9E9B3FACD8629398CB8A68933D22E
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BHwETxfxAG-FlW-2gR2swtW8f54.roa
Signing time: Thu 02 Oct 2025 07:19:02 +0000
ROA not before: Thu 02 Oct 2025 07:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215443
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:c9:e9:b3:fa:cd:86:29:39:8c:b8:a6:89:33:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Oct 2 07:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=047c044f17f1006f85956fb6811dacc2d5bc7f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:bb:92:60:f4:e6:c4:8c:48:4f:bb:f3:6d:
48:22:4a:4a:10:ef:7d:ae:3b:64:07:fe:f6:24:66:
93:33:e5:6d:12:0d:32:53:a7:87:3d:c5:c6:6a:aa:
90:4c:bf:a4:a9:dc:99:4c:d4:ad:93:7b:0e:5e:02:
8a:6e:0c:3d:cc:59:e2:5a:f5:4a:72:78:6b:1f:9d:
31:d8:3d:77:78:c3:6a:d4:4e:19:bd:2c:a8:e6:64:
91:0f:94:0a:24:f5:21:13:4f:de:0c:be:c0:84:18:
dd:21:9a:e3:27:2e:07:c6:04:dc:78:74:4c:e5:06:
ca:29:1f:c6:7e:06:3a:ca:c1:cd:a0:bc:c2:b6:68:
a2:5d:4a:0f:4d:55:c2:12:d3:3a:35:05:12:31:5b:
b0:7f:d2:d3:b9:12:ea:e9:1f:85:b7:09:a8:55:1b:
f1:47:8a:11:82:47:a6:1f:09:62:85:ff:02:3f:1a:
c2:df:f0:d0:da:6d:b7:4f:9d:96:a7:19:a6:0d:b2:
cd:4f:f8:54:04:f8:c1:3e:38:bd:f6:df:ba:bb:e8:
aa:b0:d7:7e:88:80:8b:ad:79:c2:4f:d7:26:03:d9:
0f:be:0d:28:8e:c4:74:ba:d5:f5:55:99:df:cf:59:
f0:c2:44:37:d5:dd:59:d8:33:6f:65:78:53:8b:ad:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:04:4F:17:F1:00:6F:85:95:6F:B6:81:1D:AC:C2:D5:BC:7F:9E
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BHwETxfxAG-FlW-2gR2swtW8f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.104.0/24
Signature Algorithm: sha256WithRSAEncryption
86:aa:49:eb:9e:1a:cd:2d:09:e0:0f:2b:1b:1a:ae:92:4e:fe:
29:d8:e1:1a:a6:3a:ce:45:50:a9:dd:01:1b:92:7b:c3:e3:d6:
1a:27:3a:c5:2e:9d:d2:c1:a1:8e:ea:ac:c0:cb:b0:77:db:18:
a0:7e:81:a8:70:0c:7f:51:f2:8f:8e:39:d6:d3:f6:8a:26:d9:
83:8e:41:85:74:76:80:cb:15:44:c1:f3:9e:28:b9:43:92:11:
be:4b:41:17:c6:92:2f:b7:f2:ad:1a:3d:73:4a:b8:6d:25:fe:
28:b0:bd:fd:cf:62:a1:96:59:f6:57:6f:0c:0b:5a:36:81:6c:
ea:9b:63:fb:59:01:90:7e:1d:72:d7:d5:61:3b:0c:bd:a2:84:
3f:d2:fb:ed:62:2b:bd:21:ef:a9:8d:73:d4:e4:c9:ba:a3:4b:
82:e3:29:c8:00:c5:7e:45:99:a5:8d:02:76:6a:3a:98:e5:07:
dc:0c:4a:0a:a4:2b:5b:8e:9a:3a:58:76:4f:85:af:31:9e:25:
f2:79:aa:0c:5a:3c:fc:05:79:d6:27:9f:8d:35:68:a5:9c:82:
9a:23:c5:f2:da:19:ba:a8:81:d5:68:24:74:c0:ff:9e:b7:f4:
a1:5a:9a:b6:6d:27:37:b6:a8:d5:f3:e2:48:e5:5e:74:24:89:
f3:ea:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:40 2025 by rpki-client