Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/5OoDfZP4fIMDTm02aJ_5XxlKLIw.roa
File: 5OoDfZP4fIMDTm02aJ_5XxlKLIw.roa (raw, json)
Hash identifier: P6GEUkr4f/GzryCVV7OtkMlO0BOcllC+oKyHys1Gnn8=
Subject key identifier: E4:EA:03:7D:93:F8:7C:83:03:4E:6D:36:68:9F:F9:5F:19:4A:2C:8C
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01E722
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/5OoDfZP4fIMDTm02aJ_5XxlKLIw.roa
Signing time: Thu 11 Jun 2026 04:35:11 +0000
ROA not before: Thu 11 Jun 2026 04:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3130
IP address blocks: 192.83.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124706 (0x1e722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 11 04:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=E4EA037D93F87C83034E6D36689FF95F194A2C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:8e:f1:29:28:a8:99:9e:5a:2a:5f:ec:24:
25:c2:c3:83:f2:e9:5b:1e:2f:52:65:59:5f:95:ce:
69:58:65:22:3d:5d:d8:d3:c7:bf:dd:a2:8e:3f:57:
bd:6b:bb:25:7d:15:10:f2:fa:c8:ac:57:e3:bb:9f:
2c:45:7d:04:92:b4:1d:ca:3d:99:78:22:e7:64:2c:
33:d6:1a:54:48:1f:86:cd:6c:f2:01:22:31:98:d0:
e6:3e:e9:0b:cc:c0:89:e6:ed:43:4d:69:b3:c4:17:
ba:97:b4:7a:8c:84:c1:4b:82:bc:99:d1:a6:53:88:
86:69:90:a6:ac:6a:0c:4b:c9:58:6c:7d:20:57:f1:
22:ed:d7:1e:44:3b:a8:44:92:53:0a:d5:76:6b:c8:
da:66:82:ab:0a:64:d5:ee:26:7b:04:40:74:a5:85:
73:1d:8b:d6:ef:ec:88:ca:70:ae:cf:79:b5:b3:f9:
93:35:d7:95:26:ee:09:0e:fc:15:06:cb:33:28:ba:
80:01:31:6a:42:76:59:a3:15:33:35:09:e7:35:ee:
a4:30:1d:f7:bc:7d:0f:24:cf:67:f2:9a:20:eb:22:
f9:e7:a7:b1:96:d4:f6:36:da:c1:d7:0f:25:b6:c6:
69:ac:c9:98:c4:1a:0a:29:79:3e:ce:fb:70:ac:46:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:03:7D:93:F8:7C:83:03:4E:6D:36:68:9F:F9:5F:19:4A:2C:8C
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/5OoDfZP4fIMDTm02aJ_5XxlKLIw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5c:da:78:cd:27:03:10:5b:95:09:11:a8:8d:55:70:1a:4e:
49:54:f2:fb:ca:e0:28:2d:09:76:84:c5:4d:41:ce:d7:04:cd:
26:1a:aa:25:6f:db:25:6b:d4:0f:eb:e6:30:1f:07:ab:c8:6b:
79:02:1a:5c:1c:6c:5f:2c:b8:e5:b4:8d:80:57:f9:83:4d:9b:
b2:b8:87:98:71:72:75:9b:88:57:06:cf:06:94:fd:f4:b4:cf:
10:a4:c4:4f:4e:c6:5d:66:2c:ce:65:7c:9b:99:90:9a:b4:4c:
7c:e6:16:00:58:a4:65:53:8f:75:0f:35:f8:96:0b:24:8e:58:
10:84:ae:0c:6f:a5:00:64:47:e7:c8:94:9d:dc:89:05:e2:55:
cb:52:0d:ef:e5:11:27:06:5b:3a:88:90:17:84:3d:25:53:1e:
e3:0c:66:aa:ff:5f:6d:f3:9a:35:5d:71:66:d8:b5:34:3f:01:
3e:bd:25:a5:99:c4:0c:b0:fe:ea:54:cc:f1:07:0f:78:dd:a8:
87:5b:45:05:f9:e5:7c:5a:97:59:15:c8:4b:c4:fe:5f:55:f0:
48:32:35:f4:16:09:10:06:c1:1b:d6:06:e0:cf:66:d6:89:51:
e6:f8:8e:c2:37:c1:6e:1e:a1:e1:ae:23:26:65:13:11:22:5f:
d7:da:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:26 2026 by rpki-client