Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/_FzyM_1m9p4NlioNElpoQsinnkQ.roa
File: _FzyM_1m9p4NlioNElpoQsinnkQ.roa (raw, json)
Hash identifier: FkbBE6t0UolkcuB6UDS+0xWJQRUZN6WIPCvKjWvllZA=
Subject key identifier: FC:5C:F2:33:FD:66:F6:9E:0D:96:2A:0D:12:5A:68:42:C8:A7:9E:44
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01E842
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/_FzyM_1m9p4NlioNElpoQsinnkQ.roa
Signing time: Wed 17 Jun 2026 00:18:47 +0000
ROA not before: Wed 17 Jun 2026 00:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4128
IP address blocks: 198.180.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 13:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124994 (0x1e842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=FC5CF233FD66F69E0D962A0D125A6842C8A79E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:0e:58:15:80:48:32:cf:04:59:ce:03:a0:
05:58:f7:1e:18:72:a8:7b:b8:31:a3:44:c6:d3:01:
b1:a2:e8:3f:94:a9:4c:3f:5f:03:80:cd:d5:0a:c5:
3c:e8:4a:02:de:eb:a4:f4:73:58:99:17:dc:dd:50:
60:92:41:6e:18:b9:3d:2c:ca:c0:2e:3c:82:d9:c5:
3f:a9:04:32:30:95:5b:9c:9a:9f:80:ff:7f:2e:57:
53:4c:c5:8d:0c:09:c5:8d:e5:71:5d:da:33:b2:5f:
2e:79:8f:f4:d5:2b:d4:1c:d6:b0:4a:86:07:ff:f6:
3b:00:d4:3c:51:9f:e7:3b:70:7d:eb:73:7b:3c:6c:
ac:ba:42:47:6a:1e:59:64:8a:4f:fa:95:28:19:01:
cf:12:60:d4:0a:dc:71:dd:66:3e:7f:55:ac:09:8f:
72:49:84:30:23:b4:c6:04:71:a0:ff:17:fa:61:ab:
05:20:86:60:25:b4:4a:5c:bd:8a:89:10:c2:53:ce:
d3:c6:a9:8a:72:ed:b6:a0:c7:12:ef:32:e6:71:28:
85:f0:4a:48:08:26:fc:b0:9b:4a:f5:eb:7c:bc:55:
65:11:5b:f2:df:31:f2:99:93:1d:f6:ec:e9:1d:71:
d7:2b:9d:7e:37:58:36:b2:81:89:60:cd:01:c6:83:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:F2:33:FD:66:F6:9E:0D:96:2A:0D:12:5A:68:42:C8:A7:9E:44
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/_FzyM_1m9p4NlioNElpoQsinnkQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.152.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:b6:e4:44:29:e8:c1:ea:04:95:15:8e:2a:dd:64:07:9b:
6c:3b:05:df:5c:4e:9c:dd:36:cf:44:66:a7:0d:47:ee:e3:d5:
19:c0:0f:b6:e0:01:58:c5:a1:76:3b:a1:c2:29:a7:88:fe:56:
c5:c6:bc:a8:53:b8:ce:e9:fd:8b:fa:5a:0a:fc:9d:d5:e7:10:
92:7e:92:42:43:38:c4:e6:1d:37:a2:39:55:6e:82:f4:15:bf:
2b:aa:6b:f6:ab:90:23:be:40:29:54:dc:fb:72:a4:ed:58:9f:
72:49:4d:68:8b:55:14:1f:5c:a8:c0:fc:cc:7e:0a:74:7a:8a:
64:bf:4e:ac:e7:8d:26:01:67:53:2a:af:42:6f:50:79:85:93:
2b:38:c9:97:6e:0c:7f:2f:d8:41:24:e8:7e:01:78:50:f8:57:
38:b9:c8:95:58:cc:c8:e8:6a:b4:e0:a5:86:be:44:c3:16:44:
75:60:06:18:ce:9e:f1:90:b3:dc:a8:f5:d2:d6:14:e0:93:3b:
fe:79:ad:e1:3c:03:28:d6:34:aa:fe:77:40:09:31:f5:e1:5e:
9d:79:41:b1:e2:5f:90:8f:d9:47:58:3e:61:f7:93:71:33:30:
20:91:6b:b5:cb:02:2b:21:94:7d:c4:74:f0:e5:90:82:d1:d0:
c2:64:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:43 2026 by rpki-client