Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/4eB4mcxwcmF2FlnqYexYUogJZ44.roa
File: 4eB4mcxwcmF2FlnqYexYUogJZ44.roa (raw, json)
Hash identifier: RhiusqW+n2PddiX1MQVjg5+XFrLnSf0hOoac2MqWc/M=
Subject key identifier: E1:E0:78:99:CC:70:72:61:76:16:59:EA:61:EC:58:52:88:09:67:8E
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01E843
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/4eB4mcxwcmF2FlnqYexYUogJZ44.roa
Signing time: Wed 17 Jun 2026 00:18:48 +0000
ROA not before: Wed 17 Jun 2026 00:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3927
IP address blocks: 198.180.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 13:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124995 (0x1e843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=E1E07899CC707261761659EA61EC58528809678E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:c5:3e:98:23:56:fd:c4:89:89:f3:3c:f7:
5e:05:31:98:80:0a:13:ce:d2:1e:c2:bd:5a:33:60:
4a:28:d8:38:df:d1:83:7d:c3:bb:8b:05:1f:1e:08:
da:9b:b3:7c:eb:9f:33:8e:ae:a3:0d:e5:63:42:60:
0d:90:1d:9c:24:7d:de:fc:df:af:97:4d:a3:84:27:
47:a9:3a:53:a5:e3:80:af:69:86:8f:00:d9:ea:86:
a3:98:40:20:5a:d2:20:ae:74:1b:6d:cc:c9:3e:ec:
b0:e4:9a:a5:f9:79:3a:3d:ae:22:20:20:c8:49:a1:
0a:f6:3e:84:a5:8e:18:24:7b:9f:33:4e:66:11:b3:
28:f6:5d:93:75:3e:e0:a6:17:10:61:25:10:0b:ee:
5b:89:81:bc:ab:14:ff:be:45:6e:2f:95:40:93:38:
0b:75:39:df:eb:9f:4a:ca:88:9d:ab:42:8a:8f:8d:
5a:d3:c1:9a:19:d9:04:57:5b:39:b8:ec:ea:8b:6c:
f9:d6:1a:6a:0d:7c:c8:9a:95:13:47:9b:0f:0e:9f:
6c:6c:63:a0:c3:99:e9:a6:23:3c:fe:dc:2a:ce:f0:
96:d1:e5:86:fb:cc:81:4d:17:84:0b:f2:ef:0c:d5:
c6:02:69:79:20:00:cd:1d:a8:b5:da:b7:7b:43:c5:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:78:99:CC:70:72:61:76:16:59:EA:61:EC:58:52:88:09:67:8E
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/4eB4mcxwcmF2FlnqYexYUogJZ44.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.150.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1a:ac:92:97:5b:b1:ea:1a:e9:f9:c5:55:a9:b2:89:dc:40:
4f:7e:1e:e8:6c:f9:d9:97:26:bb:5c:1b:94:a9:d0:01:7e:cd:
f5:2a:f4:9c:42:13:e6:b6:a6:cb:88:c5:7d:77:d8:04:ef:bb:
f5:db:44:28:da:d5:f1:2d:f7:23:36:c1:cf:49:a3:0f:75:0f:
28:75:4f:8d:83:07:20:5d:65:b1:6d:ba:6b:64:db:c8:25:74:
34:3a:e4:60:c2:9f:3c:37:72:19:eb:7e:20:65:f2:91:fe:e7:
d1:05:9d:3a:6b:5f:01:8f:61:53:0a:90:5b:d9:8f:75:29:24:
f3:08:c3:62:fd:75:1d:b4:1e:25:24:ad:2f:8b:04:28:21:32:
97:aa:98:ab:41:07:bc:ad:af:8e:ef:0b:05:dd:57:c8:97:50:
7e:65:08:9e:10:8d:4d:30:6b:93:2c:ad:36:e6:15:74:13:e6:
04:5b:27:33:2d:9d:39:f7:32:5f:0a:d8:13:16:ab:e6:4d:62:
90:b3:4b:3f:8a:12:92:24:2d:2b:37:f0:01:d4:92:11:2c:40:
53:c1:f9:48:7a:17:ff:85:01:1d:5d:f8:3c:34:9c:5d:fa:80:
d8:64:5d:8f:4f:2a:01:2a:08:9c:59:34:53:bf:34:3f:d3:9b:
51:3b:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:43 2026 by rpki-client