Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bvFit-k1ReJTQ51ObAYL8aJ1SjU.roa
File: bvFit-k1ReJTQ51ObAYL8aJ1SjU.roa (raw, json)
Hash identifier: /YUmgAhgWggRBAx0jJzoHHyxyuW18ogtuXVAIj737kw=
Subject key identifier: 6E:F1:62:B7:E9:35:45:E2:53:43:9D:4E:6C:06:0B:F1:A2:75:4A:35
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B29D3C3B8C184086DFD5C6AE20A9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bvFit-k1ReJTQ51ObAYL8aJ1SjU.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21339
IP address blocks: 77.93.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:9d:3c:3b:8c:18:40:86:df:d5:c6:ae:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ef162b7e93545e253439d4e6c060bf1a2754a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:08:3e:1c:bd:56:4e:d7:d8:6d:a2:a7:be:
ea:17:2f:f9:32:e1:a7:03:aa:cd:a7:53:6d:4c:f3:
cc:d0:f3:92:59:59:42:5c:ee:5d:c4:28:d7:b9:e5:
79:3e:6a:60:65:6b:07:63:47:38:1a:0c:9d:26:23:
f7:e7:a4:1a:f9:84:ab:98:5c:a7:f9:94:a2:83:5f:
ae:47:3c:b2:c1:97:6b:db:e4:4e:97:6d:55:99:09:
00:72:0f:07:fe:48:df:42:8a:f0:8b:8a:ee:e4:e9:
7a:be:60:64:e8:ce:b6:d3:6f:a9:cc:89:d8:0e:cc:
74:da:b2:14:ba:15:e8:b7:f2:9e:61:7b:d4:ee:3a:
76:66:fa:44:0f:28:d2:22:74:1c:bd:b2:8e:00:79:
95:37:c3:98:b6:53:a9:37:15:8a:37:11:e5:09:9f:
50:05:7b:c5:51:c2:16:6f:82:06:bf:e8:30:aa:39:
d9:ff:04:de:17:7f:cf:03:fc:ba:47:04:04:7b:94:
08:6f:aa:18:a3:2d:70:25:09:ac:bd:ef:00:ea:cf:
6b:d1:a1:8e:2d:50:8a:25:bc:01:da:07:b7:26:cf:
36:aa:b4:ff:56:f7:70:af:95:f9:de:ad:33:91:fb:
a9:93:86:59:30:a5:83:eb:5a:c6:ac:ca:74:10:81:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:62:B7:E9:35:45:E2:53:43:9D:4E:6C:06:0B:F1:A2:75:4A:35
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bvFit-k1ReJTQ51ObAYL8aJ1SjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f4:ca:26:54:fb:23:c0:cb:2a:07:64:cd:05:38:88:71:08:
57:a0:b5:2e:4e:9a:88:42:dc:da:66:2c:85:b9:2f:c5:b8:a7:
66:04:36:7d:dd:f0:bd:53:d1:bb:33:4a:7d:ee:12:3c:c4:43:
61:4d:55:46:e5:f0:74:8f:ba:11:e9:77:e8:5c:a7:27:f2:18:
d4:05:4e:db:04:6b:43:a0:3c:24:ff:18:b4:53:f8:23:91:22:
23:12:ef:18:c5:79:ca:78:eb:6f:8e:81:cd:fb:b9:8e:15:e5:
68:41:39:6d:42:ae:e1:12:3b:db:3f:e0:b6:00:55:3c:d0:2b:
18:df:0b:33:44:07:e0:ab:8a:b5:51:7c:82:14:38:de:1f:13:
e6:cf:74:51:b4:cc:fa:6d:74:2c:c9:5f:16:2b:d3:4d:e7:29:
60:4e:b0:fc:2a:11:f5:7a:c6:2d:d6:a7:93:e6:e2:cb:8c:ac:
15:8f:9d:34:90:d6:6f:9b:b1:69:94:66:7c:3f:e6:c7:be:9e:
fe:34:85:15:39:c0:dd:db:56:49:63:f0:6d:2d:70:3a:09:6c:
b9:14:74:0a:02:e1:e6:a4:06:5d:e9:3c:7b:e8:c2:39:82:1b:
38:b1:89:6c:46:eb:16:e4:ef:7c:d7:4a:12:d0:e1:80:79:54:
76:02:b8:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLKdPDuMGECG39XGriCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWYxNjJiN2U5MzU0NWUyNTM0MzlkNGU2YzA2MGJmMWEyNzU0YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eQIPhy9Vk7X2G2ip77qFy/5MuGn
A6rNp1NtTPPM0POSWVlCXO5dxCjXueV5PmpgZWsHY0c4GgydJiP356Qa+YSrmFyn
+ZSig1+uRzyywZdr2+ROl21VmQkAcg8H/kjfQorwi4ru5Ol6vmBk6M6202+pzInY
Dsx02rIUuhXot/KeYXvU7jp2ZvpEDyjSInQcvbKOAHmVN8OYtlOpNxWKNxHlCZ9Q
BXvFUcIWb4IGv+gwqjnZ/wTeF3/PA/y6RwQEe5QIb6oYoy1wJQmsve8A6s9r0aGO
LVCKJbwB2ge3Js82qrT/Vvdwr5X53q0zkfupk4ZZMKWD61rGrMp0EIE6IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7xYrfpNUXiU0OdTmwGC/GidUo1MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYnZGaXQtazFSZUpUUTUxT2JBWUw4YUoxU2pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2PMA0G
CSqGSIb3DQEBCwUAA4IBAQAH9MomVPsjwMsqB2TNBTiIcQhXoLUuTpqIQtzaZiyF
uS/FuKdmBDZ93fC9U9G7M0p97hI8xENhTVVG5fB0j7oR6XfoXKcn8hjUBU7bBGtD
oDwk/xi0U/gjkSIjEu8YxXnKeOtvjoHN+7mOFeVoQTltQq7hEjvbP+C2AFU80CsY
3wszRAfgq4q1UXyCFDjeHxPmz3RRtMz6bXQsyV8WK9NN5ylgTrD8KhH1esYt1qeT
5uLLjKwVj500kNZvm7FplGZ8P+bHvp7+NIUVOcDd21ZJY/BtLXA6CWy5FHQKAuHm
pAZd6Tx76MI5ghs4sYlsRusW5O9810oS0OGAeVR2Arja
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:13 2026 by rpki-client