Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/BgstHAgngBviD_F80ovwftneFbk.roa
File: BgstHAgngBviD_F80ovwftneFbk.roa (raw, json)
Hash identifier: LvdqknknurzyurdSdn/1YfYznErdxTUKQh2TkRGRbFM=
Subject key identifier: 06:0B:2D:1C:08:27:80:1B:E2:0F:F1:7C:D2:8B:F0:7E:D9:DE:15:B9
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 019ED971670D97C9EF1A8BF6CCB2B2FB1801
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/BgstHAgngBviD_F80ovwftneFbk.roa
Signing time: Thu 18 Jun 2026 06:35:48 +0000
ROA not before: Thu 18 Jun 2026 06:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197111
IP address blocks: 195.234.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:71:67:0d:97:c9:ef:1a:8b:f6:cc:b2:b2:fb:18:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jun 18 06:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=060b2d1c0827801be20ff17cd28bf07ed9de15b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:cc:4a:b6:b8:08:fa:d4:b6:ab:08:35:6b:
10:3d:f4:51:27:1d:ad:c1:aa:99:73:a7:24:59:df:
a5:9a:5a:49:a8:50:f5:69:f9:22:d7:e4:69:7a:00:
dc:27:6c:0f:50:ff:a1:f7:25:45:d9:4e:4a:3b:7c:
9d:8b:f0:12:e2:0e:75:7e:45:10:2f:b9:20:4d:80:
c2:e4:3c:94:c8:f7:33:43:5d:17:fa:3d:4d:37:67:
d6:aa:f2:47:a1:d2:ba:e2:a0:8f:f9:8c:65:ef:33:
3d:87:e8:ba:db:77:02:66:33:64:80:bf:ab:52:bd:
f6:03:f3:df:73:ff:03:7b:7c:15:0b:de:d9:8e:81:
09:30:38:44:a8:ce:bf:ba:9e:78:d7:15:08:6e:2f:
e2:e7:97:c5:3c:4c:a2:ed:9e:1d:ee:70:fe:fc:7e:
76:f9:d5:e5:80:51:f4:1b:ea:d3:cf:74:83:e9:b5:
5b:a0:90:73:da:6c:74:07:22:9a:9a:98:1e:d6:4c:
bf:ba:29:be:62:37:a6:28:5d:70:8f:34:6d:d5:f2:
92:f6:60:ae:7e:df:b5:58:40:f9:bd:16:a4:1c:fd:
bc:34:80:28:f5:a0:20:d6:85:2d:70:39:9e:eb:8f:
50:f2:f3:d3:c4:fe:6d:8d:54:75:f7:0d:b6:b4:9e:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:2D:1C:08:27:80:1B:E2:0F:F1:7C:D2:8B:F0:7E:D9:DE:15:B9
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/BgstHAgngBviD_F80ovwftneFbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.57.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8a:c9:3e:bf:a1:39:bf:c8:08:89:16:87:d0:e7:9c:f3:b2:
30:9e:2e:99:30:05:9e:68:83:20:9f:9a:d1:25:49:96:e1:83:
be:a3:f4:70:96:8d:7b:11:35:ec:34:62:2e:54:f6:52:d8:b6:
7d:10:32:8f:97:f9:e5:85:24:3c:d6:f6:dc:af:39:9e:fa:4e:
d9:ca:a9:ad:3d:d7:b5:01:e4:91:6f:7e:57:79:f9:6a:69:cd:
6e:6c:c1:23:58:51:10:24:f7:ea:77:e7:3d:1c:b3:3f:93:f9:
4f:99:db:cf:c6:61:35:97:3e:44:6c:fe:6f:68:77:b1:a4:a7:
fd:30:80:3e:3d:a9:3c:9a:f1:ab:48:8e:f8:e6:4f:59:4d:22:
2b:cb:39:ff:b7:01:88:e6:4a:c1:13:9a:60:d5:6b:15:6a:b4:
e1:28:cb:f6:f7:ba:e2:1e:cd:bf:f5:14:dd:b2:c4:32:39:ea:
ea:75:a7:5f:49:e0:ac:19:22:fd:98:84:c7:7a:db:65:9d:8a:
89:f6:4c:da:ca:c5:c1:de:e4:c9:72:93:64:e5:b8:5d:09:4a:
df:c1:6f:2a:57:48:2b:66:d1:74:af:9c:1b:3d:57:de:c4:ef:
50:3a:2c:3e:f4:b4:4b:55:28:1b:a5:e2:39:08:07:59:6a:f4:
fd:b9:d1:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7ZcWcNl8nvGov2zLKy+xgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjYwNjE4MDYzNTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjBiMmQxYzA4Mjc4MDFiZTIwZmYxN2NkMjhiZjA3ZWQ5ZGUxNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxvMSra4CPrUtqsINWsQPfRRJx2t
waqZc6ckWd+lmlpJqFD1afki1+RpegDcJ2wPUP+h9yVF2U5KO3ydi/AS4g51fkUQ
L7kgTYDC5DyUyPczQ10X+j1NN2fWqvJHodK64qCP+Yxl7zM9h+i623cCZjNkgL+r
Ur32A/Pfc/8De3wVC97ZjoEJMDhEqM6/up541xUIbi/i55fFPEyi7Z4d7nD+/H52
+dXlgFH0G+rTz3SD6bVboJBz2mx0ByKampge1ky/uim+YjemKF1wjzRt1fKS9mCu
ft+1WED5vRakHP28NIAo9aAg1oUtcDme649Q8vPTxP5tjVR19w22tJ6TkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYLLRwIJ4Ab4g/xfNKL8H7Z3hW5MB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvQmdzdEhBZ25nQnZpRF9GODBvdndmdG5lRmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+o5MA0G
CSqGSIb3DQEBCwUAA4IBAQAkisk+v6E5v8gIiRaH0Oec87Iwni6ZMAWeaIMgn5rR
JUmW4YO+o/Rwlo17ETXsNGIuVPZS2LZ9EDKPl/nlhSQ81vbcrzme+k7ZyqmtPde1
AeSRb35Xeflqac1ubMEjWFEQJPfqd+c9HLM/k/lPmdvPxmE1lz5EbP5vaHexpKf9
MIA+Pak8mvGrSI745k9ZTSIryzn/twGI5krBE5pg1WsVarThKMv297riHs2/9RTd
ssQyOerqdadfSeCsGSL9mITHettlnYqJ9kzaysXB3uTJcpNk5bhdCUrfwW8qV0gr
ZtF0r5wbPVfexO9QOiw+9LRLVSgbpeI5CAdZavT9udHz
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:45 2026 by rpki-client