Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/bfitLnMyeXOFCrvSzyZPQGVZpAM.roa
File: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (raw, json)
Hash identifier: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=
Subject key identifier: 6D:F8:AD:2E:73:32:79:73:85:0A:BB:D2:CF:26:4F:40:65:59:A4:03
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019D00EA523AE6AE5D865842B9DF42DCEA07
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/bfitLnMyeXOFCrvSzyZPQGVZpAM.roa
Signing time: Wed 18 Mar 2026 12:27:29 +0000
ROA not before: Wed 18 Mar 2026 12:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 212.23.198.0/24 maxlen: 32
2a11:5440::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ea:52:3a:e6:ae:5d:86:58:42:b9:df:42:dc:ea:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Mar 18 12:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6df8ad2e73327973850abbd2cf264f406559a403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:65:c5:ec:7a:02:37:56:b6:ee:45:e1:bf:
00:14:55:09:b0:12:fb:7a:c5:f5:cf:2a:55:af:bd:
50:22:a8:65:5a:6a:69:f2:5f:d6:5f:a1:cb:9e:a4:
e8:de:7a:b2:12:eb:08:d5:2d:f5:e3:7d:8d:66:1d:
2c:45:48:8e:f0:6b:fe:9e:b2:91:2c:3d:3d:ef:ef:
74:18:85:fe:f0:08:bd:41:93:c2:76:88:72:3e:74:
d0:84:5f:35:57:72:b9:05:21:ca:dc:63:69:7b:02:
39:a9:a1:9c:52:91:3b:50:b8:e0:72:07:ad:4e:12:
02:07:d4:8b:a2:45:04:03:17:13:74:e6:e3:c7:e3:
cb:e9:24:6d:9c:b4:06:f1:29:a0:80:ed:f5:7b:c2:
c1:38:47:7f:3d:3a:20:86:9d:56:32:81:4b:c8:72:
59:ed:4a:b3:d0:d8:1f:c2:73:4b:20:40:7d:59:65:
bd:c0:61:2f:55:00:82:63:50:16:c7:e7:8f:b4:5a:
b4:ea:50:a4:27:75:52:66:1b:42:73:6d:d2:54:b4:
83:c3:d7:19:97:b8:58:8a:e3:b7:c7:aa:ee:bc:71:
c9:61:5f:a0:48:26:7f:3e:94:74:f1:0d:1e:48:c2:
37:b4:ea:0d:10:f5:b1:15:26:25:2c:bb:ad:5d:f3:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:AD:2E:73:32:79:73:85:0A:BB:D2:CF:26:4F:40:65:59:A4:03
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/bfitLnMyeXOFCrvSzyZPQGVZpAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.198.0/24
IPv6:
2a11:5440::/29
Signature Algorithm: sha256WithRSAEncryption
26:a9:ad:f5:55:1a:a3:55:3c:3b:ec:51:7e:62:b7:24:d7:af:
63:08:36:9a:b7:0f:c5:4f:98:93:1d:a7:44:6c:34:78:ba:e2:
ff:3d:89:dc:27:b2:01:81:57:03:54:be:63:03:04:d2:57:49:
a2:ca:9c:c2:4c:fa:49:af:55:39:ef:10:9f:00:24:a7:fe:44:
d8:d9:f3:73:28:ce:79:b1:f2:b3:3f:0d:b6:3e:5a:9e:f7:26:
38:21:c6:9b:e4:25:a0:f8:b7:d3:da:f6:c8:9f:21:33:fe:07:
82:82:d5:e8:f8:c1:3b:f0:25:53:bf:a3:44:df:87:53:5a:1f:
e8:cb:cf:09:55:a9:b7:95:24:70:12:cc:03:8a:53:5c:cb:44:
9f:02:16:b1:34:4b:c9:cf:36:4f:59:14:93:0b:19:46:e3:dd:
48:70:31:30:c3:de:87:17:07:b1:f8:83:f8:3c:c8:4f:6c:e7:
e0:3d:d5:7a:85:a5:71:4f:2e:c6:7e:09:a5:f7:bf:74:eb:32:
25:24:7f:67:9e:aa:98:a8:f5:cb:34:8f:92:72:b9:06:f0:aa:
f2:45:be:12:50:61:26:e4:2b:bf:da:8b:51:79:85:98:17:d2:
53:75:e3:6e:21:21:37:28:bc:62:ed:d8:ed:10:8b:8c:19:0e:
a5:ab:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:34:02 2026 by rpki-client