Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/2eQgyA0XDg4Q3_VMJ8zIh3_Blxw.roa
File: 2eQgyA0XDg4Q3_VMJ8zIh3_Blxw.roa (raw, json)
Hash identifier: VRqF5fM00LZcJc0dQ8lIwfK1MgAEoLaTHc5Rs7amzKA=
Subject key identifier: D9:E4:20:C8:0D:17:0E:0E:10:DF:F5:4C:27:CC:C8:87:7F:C1:97:1C
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01EB5D
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/2eQgyA0XDg4Q3_VMJ8zIh3_Blxw.roa
Signing time: Fri 03 Jul 2026 09:24:54 +0000
ROA not before: Fri 03 Jul 2026 09:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4128
IP address blocks: 198.180.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125789 (0x1eb5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 3 09:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=D9E420C80D170E0E10DFF54C27CCC8877FC1971C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:7c:9a:c2:13:11:78:66:5f:66:26:d7:89:
03:5a:0a:22:f5:ae:de:33:5e:cf:b2:ae:81:35:02:
f5:3e:ba:2e:67:44:d9:c4:42:94:b7:a4:cc:3a:c0:
db:36:62:1b:93:b9:f8:30:b2:83:f5:f7:5e:80:f5:
e3:56:c9:c1:cc:4a:ef:ea:6c:5b:08:cb:0d:da:77:
1b:73:21:11:7b:3a:38:d6:ca:9c:93:8d:02:f9:87:
ac:b4:58:05:98:d3:97:d9:b0:37:5c:0c:ec:f6:aa:
57:81:6c:5e:3b:48:eb:fc:2e:4a:ec:a5:2c:be:22:
a9:3f:71:35:bb:c4:7c:3f:fd:31:e7:26:9b:1c:cf:
d1:9e:0d:d4:8b:4f:83:a4:b7:25:12:dd:07:09:f8:
dc:6a:8e:49:f7:ea:33:e0:4c:e7:1d:a4:3c:7c:46:
32:e8:95:6f:34:15:81:53:48:7f:35:36:b5:fa:76:
63:53:b0:0e:03:e3:1f:64:82:96:c9:dc:3f:2a:ba:
e0:8d:ef:d7:c5:5e:26:53:10:77:0b:c5:5d:be:d7:
8a:24:81:a3:99:70:2f:33:50:ea:ea:e1:10:fb:e2:
39:2c:4b:82:ee:83:ed:31:8e:0d:e5:56:01:03:6f:
13:62:01:43:1e:35:23:ba:b5:92:7f:d1:1d:e2:7e:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E4:20:C8:0D:17:0E:0E:10:DF:F5:4C:27:CC:C8:87:7F:C1:97:1C
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/2eQgyA0XDg4Q3_VMJ8zIh3_Blxw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.152.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5a:ab:22:9d:14:f4:f3:06:bd:61:aa:7f:a0:5f:97:a3:42:
73:04:91:34:b5:ea:d5:d6:8e:da:96:f0:11:37:51:a3:60:3a:
e7:ae:fe:cf:15:d6:a1:71:d7:3b:69:40:76:8a:fd:70:d7:7e:
f3:68:ac:62:9d:f6:01:20:9c:bb:a3:25:04:8f:db:c8:d5:83:
d5:7d:76:41:83:2c:8c:0b:86:89:60:55:a3:8e:ee:83:83:97:
0e:a6:38:22:df:c8:bd:e9:69:09:cf:6e:3c:d0:0a:a3:74:62:
c8:16:74:d7:b1:04:16:1f:73:f4:bb:dd:3a:f2:b2:dd:e4:f0:
c0:35:93:63:8b:c4:d2:2e:cf:16:58:12:4b:d2:a3:e2:bf:01:
af:82:50:ea:6d:a8:29:fe:bd:9f:15:d0:98:bb:41:40:6d:be:
3a:93:54:04:c3:86:f2:07:7e:41:dc:b2:40:bb:9a:e5:40:27:
14:74:03:1a:75:37:f7:c2:3b:e5:9c:e1:c4:bb:e8:92:3e:5f:
12:17:10:bc:c5:f8:7f:6d:39:5c:e2:20:11:77:d6:6a:39:9f:
c4:c2:e2:d4:6c:12:77:29:80:72:66:25:9b:c1:08:66:29:19:
bd:45:00:33:97:95:88:ff:93:de:56:e6:db:82:50:5d:40:be:
07:1f:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:42 2026 by rpki-client