Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/Bgs-N-K--JvXm1e8lxirplvgNpE.roa
File: Bgs-N-K--JvXm1e8lxirplvgNpE.roa (raw, json)
Hash identifier: wsCRUYCoHyBINaAD8dOfItVUslWhgJ5eq0i3ZMxZtAE=
Subject key identifier: 06:0B:3E:37:E2:BE:F8:9B:D7:9B:57:BC:97:18:AB:A6:5B:E0:36:91
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019F5F663E7E9F63CCD23EA243AFE6220323
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/Bgs-N-K--JvXm1e8lxirplvgNpE.roa
Signing time: Tue 14 Jul 2026 06:52:43 +0000
ROA not before: Tue 14 Jul 2026 06:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24845
IP address blocks: 194.113.40.0/23 maxlen: 23
194.113.40.0/24 maxlen: 24
194.113.41.0/24 maxlen: 24
194.246.128.0/20 maxlen: 20
194.246.144.0/21 maxlen: 21
194.246.145.0/24 maxlen: 24
194.246.147.0/24 maxlen: 24
194.246.148.0/23 maxlen: 23
194.246.150.0/23 maxlen: 23
194.246.152.0/22 maxlen: 22
194.246.152.0/24 maxlen: 24
194.246.153.0/24 maxlen: 24
194.246.160.0/19 maxlen: 19
194.246.164.0/24 maxlen: 24
194.246.165.0/24 maxlen: 24
194.246.166.0/24 maxlen: 24
194.246.167.0/24 maxlen: 24
194.246.168.0/24 maxlen: 24
194.246.169.0/24 maxlen: 24
194.246.170.0/24 maxlen: 24
194.246.171.0/24 maxlen: 24
194.246.172.0/24 maxlen: 24
194.246.192.0/18 maxlen: 18
194.246.224.0/24 maxlen: 24
2a00:1830::/32 maxlen: 32
2a00:1830::/48 maxlen: 48
2a00:1830:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:66:3e:7e:9f:63:cc:d2:3e:a2:43:af:e6:22:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jul 14 06:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=060b3e37e2bef89bd79b57bc9718aba65be03691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:22:d5:20:d6:cf:ef:04:f2:3d:0f:d7:e0:
58:39:83:45:54:ab:0d:33:66:3e:79:cd:78:df:70:
32:e6:2b:52:7d:7d:7e:af:f0:9d:09:f4:2e:d1:a4:
ed:6d:57:b1:e5:11:02:90:34:0f:91:6e:3b:41:08:
f8:d1:fb:a5:e3:9e:45:5b:31:39:4b:4f:fb:92:66:
1c:1e:b3:4b:bb:ce:25:75:1f:46:20:8d:18:73:19:
21:3b:af:90:9d:44:35:d9:66:cc:1a:23:0b:86:b0:
8b:5a:36:36:dd:fc:cc:58:0d:e7:76:4a:b9:9d:f8:
46:fc:e1:45:4e:5a:e5:a5:bc:66:35:d4:7b:bf:ea:
d2:ef:18:4a:f3:6e:80:8e:1c:2e:44:05:76:91:7a:
e2:67:61:e0:0a:df:ad:70:3b:00:43:88:fd:c4:f8:
82:3e:98:ae:be:ca:2e:b1:26:7a:c2:9d:d8:e2:8b:
fa:7c:51:21:87:2d:ce:aa:9e:94:a2:c6:6d:2a:70:
53:6a:c0:b3:e0:86:b7:b8:a3:49:84:21:22:d6:d6:
e5:ea:ad:cb:60:4e:3f:53:69:23:85:0e:ee:ca:15:
57:c1:3c:99:26:22:e9:fa:a0:4d:8c:ee:ff:8a:eb:
11:ec:84:8a:b3:0e:78:4c:9a:ef:65:69:d2:43:dc:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:3E:37:E2:BE:F8:9B:D7:9B:57:BC:97:18:AB:A6:5B:E0:36:91
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/Bgs-N-K--JvXm1e8lxirplvgNpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.40.0/23
194.246.128.0-194.246.155.255
194.246.160.0-194.246.255.255
IPv6:
2a00:1830::/32
Signature Algorithm: sha256WithRSAEncryption
47:3f:fd:88:d1:8b:e8:b5:eb:86:bb:7f:f5:44:22:b8:1b:85:
b2:b5:c2:80:a3:e1:0e:5c:4a:69:52:ed:b9:15:bf:e1:3d:8c:
bc:7f:04:1a:68:b8:2d:42:c4:c4:16:81:7a:2c:25:99:ff:98:
f8:0c:18:bb:44:5f:6c:69:fd:79:f6:20:60:6d:f8:db:03:e0:
f7:74:27:42:f4:35:6a:1c:48:8c:9c:d4:aa:30:e3:9f:e9:6d:
3f:a9:d7:78:9a:81:f4:ec:ad:ff:6c:49:66:fe:c9:b5:f3:33:
66:21:f4:0b:cf:8e:97:ef:9f:2a:23:8c:fd:35:3f:2a:9f:ff:
96:59:82:2c:c8:fc:92:7e:21:eb:fa:a8:40:aa:8a:aa:6e:e3:
a0:30:16:2e:71:86:c2:32:03:c0:5b:a1:fb:3d:27:ca:00:91:
bf:69:cd:61:b0:97:d0:a1:84:d0:1f:8d:0d:a8:e4:e5:27:5d:
7d:ad:30:a5:ae:36:b6:c9:5c:c4:ec:d9:f0:f3:9d:56:0c:a8:
2d:77:3d:ce:3b:c3:08:1d:77:cf:e7:04:ba:77:44:83:13:28:
b3:3c:61:40:d5:60:d4:88:c5:e6:f8:a3:32:64:1a:25:63:04:
23:4f:18:bd:d2:4d:dc:d1:4f:1e:fc:4f:46:60:13:24:b2:41:
32:50:63:a4
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ9fZj5+n2PM0j6iQ6/mIgMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl
Zjg2MDcwHhcNMjYwNzE0MDY1MjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjBiM2UzN2UyYmVmODliZDc5YjU3YmM5NzE4YWJhNjViZTAzNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wi1SDWz+8E8j0P1+BYOYNFVKsN
M2Y+ec1433Ay5itSfX1+r/CdCfQu0aTtbVex5RECkDQPkW47QQj40ful455FWzE5
S0/7kmYcHrNLu84ldR9GII0YcxkhO6+QnUQ12WbMGiMLhrCLWjY23fzMWA3ndkq5
nfhG/OFFTlrlpbxmNdR7v+rS7xhK826AjhwuRAV2kXriZ2HgCt+tcDsAQ4j9xPiC
PpiuvsousSZ6wp3Y4ov6fFEhhy3Oqp6UosZtKnBTasCz4Ia3uKNJhCEi1tbl6q3L
YE4/U2kjhQ7uyhVXwTyZJiLp+qBNjO7/iusR7ISKsw54TJrvZWnSQ9wM5QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFAYLPjfivvib15tXvJcYq6Zb4DaRMB8GA1UdIwQY
MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt
ZTRiNzAyZjE2MTE2LzEvQmdzLU4tSy0tSnZYbTFlOGx4aXJwbHZnTnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2
LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAnBAIAATAhAwQBwnEoMAwD
BAfC9oADBALC9pgwCwMEBcL2oAMDAML2MA0EAgACMAcDBQAqABgwMA0GCSqGSIb3
DQEBCwUAA4IBAQBHP/2I0YvoteuGu3/1RCK4G4WytcKAo+EOXEppUu25Fb/hPYy8
fwQaaLgtQsTEFoF6LCWZ/5j4DBi7RF9saf159iBgbfjbA+D3dCdC9DVqHEiMnNSq
MOOf6W0/qdd4moH07K3/bElm/sm18zNmIfQLz46X758qI4z9NT8qn/+WWYIsyPyS
fiHr+qhAqoqqbuOgMBYucYbCMgPAW6H7PSfKAJG/ac1hsJfQoYTQH40NqOTlJ119
rTClrja2yVzE7Nnw851WDKgtdz3OO8MIHXfP5wS6d0SDEyizPGFA1WDUiMXm+KMy
ZBolYwQjTxi90k3c0U8e/E9GYBMkskEyUGOk
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:15:36 2026 by rpki-client