Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/BsgOR-jlxaE3aejY8-m20EgFpik.roa
File: BsgOR-jlxaE3aejY8-m20EgFpik.roa (raw, json)
Hash identifier: 9FJKPRIwYTC9Hrz2A7gRNewXh7ioKHFgJGggkHSZ3SM=
Subject key identifier: 06:C8:0E:47:E8:E5:C5:A1:37:69:E8:D8:F3:E9:B6:D0:48:05:A6:29
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0867874F8B5C60CD83BAF0C19B863B3F9
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/BsgOR-jlxaE3aejY8-m20EgFpik.roa
Signing time: Wed 09 Sep 2026 14:00:36 +0000
ROA not before: Wed 09 Sep 2026 14:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 195.216.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:78:74:f8:b5:c6:0c:d8:3b:af:0c:19:b8:63:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 9 14:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06c80e47e8e5c5a13769e8d8f3e9b6d04805a629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:c5:88:18:a1:20:bb:ab:26:44:fe:c0:d1:
d6:cc:53:e5:cd:1a:13:03:24:77:b2:c9:48:1e:30:
79:d0:68:a4:12:38:1b:98:82:c9:24:35:46:71:2a:
4e:81:0e:82:ad:4b:ed:c1:7f:ba:3d:e1:a8:31:fc:
fc:c0:8e:6e:6d:23:cb:4b:3b:7c:44:d0:3b:88:a7:
b5:a9:b6:1f:e1:4a:87:a6:86:90:3a:c6:63:88:30:
16:34:8d:cf:c7:2d:0f:f9:fc:c5:23:2b:48:84:ad:
b0:58:6b:49:4a:6b:00:dc:35:66:fb:2d:d2:87:4b:
ca:02:bd:3b:87:f7:98:6f:9b:7f:a0:e3:04:48:5e:
57:69:44:90:49:4f:f1:82:a3:97:39:3c:5c:79:21:
42:13:76:dd:6a:44:c0:ce:47:68:73:ed:da:c6:84:
c4:a5:7c:12:9b:5a:65:35:ff:ca:64:b3:7a:14:5c:
f7:58:91:2d:2f:bb:c3:79:85:2d:95:5c:d3:b3:20:
6a:82:5a:f6:4e:ca:08:02:df:e6:3a:31:32:ba:82:
c2:04:4e:c8:9a:67:82:e5:44:43:52:59:09:57:e2:
a0:24:b1:1b:6f:fa:9b:c3:9d:f0:72:53:f8:aa:c6:
82:1b:15:5f:72:76:7a:ae:af:d8:92:5a:2e:d9:9e:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:0E:47:E8:E5:C5:A1:37:69:E8:D8:F3:E9:B6:D0:48:05:A6:29
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/BsgOR-jlxaE3aejY8-m20EgFpik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f9:43:04:d2:53:b9:85:79:67:40:a1:63:f7:5a:0e:4a:5e:
cf:c0:39:94:bd:ac:6f:e3:fc:e4:5f:44:fb:a7:13:ab:6e:3c:
ce:38:06:25:bd:c0:df:45:d7:90:6e:43:9c:60:9b:c0:04:a6:
e2:24:82:7d:97:fe:b8:4a:fa:ef:7f:34:76:e2:2a:ab:13:08:
7d:11:cb:de:6b:eb:b6:41:fc:52:7b:14:60:16:53:17:07:48:
5e:29:4a:fc:6b:36:6e:aa:90:65:ed:70:ae:e4:3c:72:14:59:
8d:76:e6:e7:a3:bf:3a:97:d3:ab:4c:34:c6:56:69:40:26:0c:
0b:e1:41:7c:7e:a6:97:37:f8:af:35:75:45:04:b7:82:57:db:
1d:af:4d:2b:fd:22:e0:79:6b:20:4d:41:01:04:38:5f:3d:81:
c8:47:48:c3:e8:d6:3f:8d:4c:83:b3:90:24:e5:03:22:90:1d:
08:01:97:7d:d1:53:7f:13:cc:ed:b2:ab:26:6e:f7:40:99:87:
bd:30:22:13:68:a0:50:91:6f:6f:2f:2c:c8:21:19:7f:35:78:
cb:82:54:14:a6:88:a8:eb:07:72:fc:02:92:b9:d2:0e:ef:2f:
ff:b7:4d:99:5d:f9:12:ef:1b:2d:d9:c9:e5:3a:7a:3d:f0:03:
f0:e5:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:13:01 2026 by rpki-client