Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/YYaG7uhJpM8FuGJJC6VpoERCQuA.roa
File: YYaG7uhJpM8FuGJJC6VpoERCQuA.roa (raw, json)
Hash identifier: sBD5huacr2NjYsyHpdAjl0rr9czNtC2KAcJij0UPgKQ=
Subject key identifier: 61:86:86:EE:E8:49:A4:CF:05:B8:62:49:0B:A5:69:A0:44:42:42:E0
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01ED59
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/YYaG7uhJpM8FuGJJC6VpoERCQuA.roa
Signing time: Mon 13 Jul 2026 17:48:10 +0000
ROA not before: Mon 13 Jul 2026 17:48:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 147.28.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126297 (0x1ed59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 13 17:48:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=618686EEE849A4CF05B862490BA569A0444242E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:8b:b2:45:5e:a6:83:8a:e6:e5:4d:7f:3d:
b4:c1:f0:6c:13:32:52:a2:50:71:15:f5:3d:e0:2f:
da:01:66:9f:43:99:89:df:6c:f6:1e:50:4a:a1:6b:
fd:53:f1:4e:8a:25:bd:79:02:d6:d7:15:06:f3:46:
2b:57:60:36:87:ea:be:82:e6:02:af:63:d7:fe:df:
ba:50:6a:b4:4c:61:22:4b:09:6a:5f:d5:17:7e:5f:
c7:a5:f7:61:d5:40:90:f1:ef:e0:d9:b4:8c:97:53:
5b:64:66:7a:1b:32:5c:39:ef:1a:5e:d2:76:1f:81:
82:df:38:a2:80:ea:36:63:43:e9:79:ad:cf:e7:e4:
7c:1e:58:70:ad:c9:58:31:8d:dd:b9:e5:56:c9:50:
b5:cf:c3:58:2c:bf:77:cf:15:bc:66:3d:e7:c4:c7:
5c:c1:b7:4c:1f:83:5c:55:19:08:e0:42:b1:4b:9d:
23:cf:60:22:b9:65:78:4d:9a:5b:54:35:b5:8c:c7:
b9:fc:b1:5e:b8:4a:31:65:10:d6:d8:dd:3b:ea:48:
b2:b5:98:4d:ac:23:2b:5f:e5:53:05:2d:79:52:09:
32:60:9d:c7:7d:6c:ae:3d:2e:a1:47:8f:c7:67:4b:
94:c4:07:c5:25:71:9e:ca:ae:56:45:89:aa:31:3e:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:86:EE:E8:49:A4:CF:05:B8:62:49:0B:A5:69:A0:44:42:42:E0
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/YYaG7uhJpM8FuGJJC6VpoERCQuA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.12.0/22
Signature Algorithm: sha256WithRSAEncryption
46:57:b8:5c:47:98:52:10:4b:26:94:12:74:e0:12:19:14:bd:
5b:5a:b2:c9:e4:b5:6f:13:e0:be:54:e6:90:b5:1f:02:b4:9b:
b7:45:0b:c0:f2:b8:3b:4d:76:d4:ba:3b:47:2a:c5:27:0c:de:
69:90:cb:e7:0d:03:91:30:67:18:e0:74:1b:bc:98:41:9e:10:
54:44:25:5f:6a:bf:1c:6a:63:34:ec:57:0e:5a:b5:ef:ea:92:
8b:79:6a:db:c8:c5:e9:21:f5:fb:a6:ed:70:61:53:99:a7:68:
2b:ad:a7:d2:76:b5:90:48:0b:b8:3e:73:7a:aa:27:2c:2d:43:
10:f9:f3:01:d6:87:67:d7:19:b5:14:f8:03:a0:dd:d0:74:9e:
1b:b5:fa:79:b2:0d:c3:a9:d4:04:93:c1:39:3c:c7:be:b1:65:
a7:c6:58:cc:fa:4b:86:83:7c:17:9c:d5:88:87:f9:7a:f7:5c:
c0:78:bd:68:3a:c2:2e:7c:09:f7:1c:a6:4f:8f:2f:fd:91:ad:
7f:6f:d1:fc:73:07:f1:33:b0:fd:b0:34:58:c5:36:86:f4:70:
99:79:d3:1b:70:92:10:d9:e6:53:76:d7:5b:db:36:c6:6f:89:
2b:3d:cc:65:32:91:0e:c6:dd:2f:22:d8:e5:c7:3a:fb:cc:f5:
87:14:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:22 2026 by rpki-client