Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/J0L_X2S5WFgh1uDsUgLsXV4y0mg.roa
File: J0L_X2S5WFgh1uDsUgLsXV4y0mg.roa (raw, json)
Hash identifier: Eyc2HcR7wvvT/hqlUTjPbWJl0DSWym+y4HFhklzxEZM=
Subject key identifier: 27:42:FF:5F:64:B9:58:58:21:D6:E0:EC:52:02:EC:5D:5E:32:D2:68
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01EB5C
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/J0L_X2S5WFgh1uDsUgLsXV4y0mg.roa
Signing time: Fri 03 Jul 2026 09:24:53 +0000
ROA not before: Fri 03 Jul 2026 09:24:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3927
IP address blocks: 198.180.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125788 (0x1eb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 3 09:24:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2742FF5F64B9585821D6E0EC5202EC5D5E32D268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:69:16:44:c2:fc:2e:35:f1:95:9e:0b:14:
f3:e9:a3:ce:31:30:41:5a:8c:5f:c5:20:f5:31:85:
47:f0:16:c4:97:52:70:00:13:7c:3c:1a:fc:a2:16:
9f:b7:4a:6d:a5:0a:49:25:e9:00:30:17:3f:86:ef:
67:a0:6a:df:76:69:cf:ec:e4:da:d1:4e:a3:55:20:
1d:22:34:88:31:69:c6:ca:1d:fd:f7:f0:39:c7:7b:
f1:a1:57:0f:a6:91:17:69:e2:47:b5:9d:f4:9c:33:
3c:e3:b2:f1:9d:33:d1:b6:46:33:12:41:22:44:93:
2b:cf:25:13:50:a0:47:b8:fd:2f:07:11:ec:e8:3e:
b9:1d:20:7e:88:23:9e:8b:7f:49:42:5c:01:4c:96:
5f:88:28:20:15:0c:31:ac:40:3e:0e:03:61:e1:c2:
06:c1:da:78:36:80:02:34:1b:c6:1f:28:4a:e9:eb:
65:93:5e:03:17:55:ef:78:1f:7b:40:e2:24:1d:28:
fa:7e:ff:96:9c:a9:f7:5a:68:d5:fd:c6:d6:fe:17:
05:1a:4a:a4:59:9d:a7:d3:0b:6b:56:cc:b1:5f:10:
e2:c3:2d:f9:ce:2a:86:49:15:c4:ed:9d:68:f2:59:
34:3d:0a:61:f9:ac:72:63:4f:40:06:31:3a:eb:15:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:FF:5F:64:B9:58:58:21:D6:E0:EC:52:02:EC:5D:5E:32:D2:68
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/J0L_X2S5WFgh1uDsUgLsXV4y0mg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:51:ce:cf:18:fb:d9:b9:cc:72:86:9d:ef:6b:3c:59:01:65:
51:26:eb:aa:b4:ca:17:a5:4f:7b:bd:0c:a9:7c:e8:20:24:d1:
d0:73:b9:72:69:36:31:0f:59:44:8f:ab:9b:76:d5:09:c1:92:
92:b7:c4:fa:f8:7a:74:4c:e9:33:59:b5:2c:e5:24:d1:f4:29:
52:35:bc:6b:25:01:2e:7e:4e:76:82:fa:33:6b:24:c3:ab:90:
d0:85:34:18:16:20:ed:01:a1:d6:b3:4c:35:a6:46:28:89:77:
4d:e1:5a:aa:18:09:82:42:f4:98:ec:3e:ae:8f:bd:41:ca:e3:
e0:85:79:a9:98:74:13:3d:de:71:8d:40:87:d7:db:5e:f6:0f:
20:27:19:a1:fe:82:f6:e9:58:9a:c5:4f:d7:0d:08:3e:95:6e:
73:52:64:35:46:b9:85:e8:41:38:65:53:3a:25:63:b8:f6:cf:
8b:f8:fc:86:10:12:98:1c:22:8e:67:ac:dc:86:d4:98:b9:29:
d7:94:dd:a1:55:4d:0e:36:f3:fb:91:6b:2a:58:4d:68:df:74:
cd:3c:c4:82:6b:30:b5:f6:9f:02:38:18:b4:db:ca:5c:12:03:
6c:e7:5e:32:05:0f:bc:cd:58:f5:6b:41:4a:d7:e0:1a:d5:4f:
99:7a:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:14 2026 by rpki-client