Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/9--vIezzgBdWsAx_lcGVpx3vYY4.roa
File: 9--vIezzgBdWsAx_lcGVpx3vYY4.roa (raw, json)
Hash identifier: x2VTwMceQTK5f6acbt84WLmVcDqQYvvOH1RNlHZ+/mg=
Subject key identifier: F7:EF:AF:21:EC:F3:80:17:56:B0:0C:7F:95:C1:95:A7:1D:EF:61:8E
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01E83F
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/9--vIezzgBdWsAx_lcGVpx3vYY4.roa
Signing time: Wed 17 Jun 2026 00:18:46 +0000
ROA not before: Wed 17 Jun 2026 00:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 13:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124991 (0x1e83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=F7EFAF21ECF3801756B00C7F95C195A71DEF618E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:ce:57:3d:eb:8f:f1:d5:5a:51:8f:1e:f5:
a5:98:a1:4f:29:92:d8:6a:ae:e2:ac:61:d7:31:ba:
f4:dc:f1:24:c4:5e:a5:09:0d:8a:e1:2c:c3:0f:4d:
60:dd:50:8f:36:ac:95:08:f5:2f:42:8e:75:45:16:
c2:df:6f:14:0d:33:2f:e2:0c:e8:b5:95:04:65:3e:
d5:00:f8:06:48:ae:cf:ce:6b:2a:ad:ae:56:df:2b:
e6:3b:3f:1d:d1:a1:66:89:ad:87:09:30:80:67:da:
8c:df:cb:6f:7d:47:b0:d4:14:c7:e8:5c:be:78:34:
a9:bc:2a:cd:2f:55:b6:f4:f3:95:01:f4:e8:5c:23:
8c:b5:84:dc:3d:0d:03:bd:27:68:ee:83:c9:38:23:
a4:4e:9e:18:af:dc:02:61:31:7c:f2:60:93:cf:eb:
60:a5:79:e9:b5:4d:fc:80:3b:06:cf:25:65:f9:aa:
3c:39:a5:75:a7:6d:e8:60:6a:97:ad:63:78:32:60:
9e:37:4b:dc:14:11:d5:c0:7c:01:ab:f8:98:06:a1:
dd:86:ee:bc:f3:0d:ea:3a:f5:c7:91:5c:f6:fc:cc:
8b:09:64:79:bd:dd:c7:f6:0b:e5:78:eb:f8:22:14:
61:31:f4:c5:b5:31:ee:75:1b:c2:80:7f:5a:35:2e:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:AF:21:EC:F3:80:17:56:B0:0C:7F:95:C1:95:A7:1D:EF:61:8E
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/9--vIezzgBdWsAx_lcGVpx3vYY4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:31:64:6c:61:55:91:da:cd:c4:5d:52:63:6a:9f:6f:95:74:
3a:ef:0c:90:92:c5:4a:a9:34:c6:3f:73:d4:0e:51:9b:a1:77:
19:df:0a:26:43:9f:93:7a:25:cb:68:19:e4:b6:8e:43:79:0d:
c6:2c:1f:15:b0:d2:3f:ec:9f:ad:0c:ef:62:b1:93:d0:fb:3b:
de:cf:2d:74:b5:24:53:b2:1c:3d:e8:3f:a8:09:38:a5:b5:56:
75:bf:b8:7c:a7:05:f3:a3:e0:f9:84:8a:10:2b:2d:3b:b7:8d:
b3:06:6c:c3:f5:a9:18:e4:53:0b:6c:9f:0f:c2:23:09:77:51:
93:14:67:c2:d1:14:72:ee:37:d2:9c:36:a8:85:31:c5:54:91:
95:36:8c:a5:84:96:50:3e:c8:a1:a9:37:8b:e2:4e:94:a4:96:
d7:57:c1:58:3f:07:20:1d:38:5b:2b:26:b7:01:bd:7f:df:da:
54:23:13:28:0d:59:64:d2:4e:a9:1a:c4:46:7a:e4:72:ad:98:
62:b6:80:cc:de:bf:36:09:f3:de:82:d1:6f:01:5f:a6:78:88:
fb:7b:bf:a1:0c:25:86:d5:4a:ec:74:e3:66:b5:fe:4f:1a:99:
6b:9e:d5:97:b7:a6:93:d7:17:da:e4:33:0e:ef:e7:62:59:7d:
d3:fc:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:43 2026 by rpki-client