Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/s_097bC3yDoQORvoodpShbKYHXc.roa
File: s_097bC3yDoQORvoodpShbKYHXc.roa (raw, json)
Hash identifier: nVBFbT/5FN6FaEjLIY2lInSlF+NCo+4eAyhmYGetkOM=
Subject key identifier: B3:FD:3D:ED:B0:B7:C8:3A:10:39:1B:E8:A1:DA:52:85:B2:98:1D:77
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01EB5A
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/s_097bC3yDoQORvoodpShbKYHXc.roa
Signing time: Fri 03 Jul 2026 09:24:53 +0000
ROA not before: Fri 03 Jul 2026 09:24:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3130
IP address blocks: 192.83.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125786 (0x1eb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 3 09:24:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=B3FD3DEDB0B7C83A10391BE8A1DA5285B2981D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:71:1d:40:80:ef:49:6c:d8:0f:ec:18:80:
85:30:26:67:0d:7f:d9:01:34:5d:9a:09:cc:66:41:
af:05:78:ce:3e:eb:46:03:ec:04:bd:71:19:ce:28:
ee:84:16:66:37:9d:12:92:9c:15:af:01:18:69:f9:
ca:72:84:3c:20:2d:eb:87:89:e0:ab:85:44:de:87:
82:81:fa:46:4e:fe:e6:d9:4d:7a:41:78:fc:1f:3c:
48:36:69:40:db:46:03:7d:9e:15:7a:a6:6a:e6:10:
b0:2f:50:d0:b7:d2:6c:bc:ac:1b:44:9c:74:39:8a:
a5:70:48:10:46:b5:cc:3e:48:76:ba:fb:93:79:71:
57:2c:1c:35:55:5d:0a:04:e6:28:8a:27:42:bc:8a:
b2:f0:67:6f:67:be:9f:6c:70:2e:07:43:1e:ef:16:
1b:19:47:97:57:e2:71:7b:dd:c7:25:7e:ff:b9:49:
80:37:a8:b5:14:31:ce:26:dc:6c:72:97:0e:fa:ac:
ee:2b:34:cd:b7:23:8f:37:55:b6:70:f9:6d:4d:59:
be:bb:bf:e4:e4:5a:b7:7c:91:d9:11:d9:b0:a2:59:
cd:1f:35:f3:ee:b7:50:22:3c:c9:d7:e9:d0:d8:3b:
ad:bf:3b:e6:e1:7c:74:f2:36:5d:03:55:f9:57:05:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:3D:ED:B0:B7:C8:3A:10:39:1B:E8:A1:DA:52:85:B2:98:1D:77
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/s_097bC3yDoQORvoodpShbKYHXc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:74:ff:ff:d5:d1:92:f8:e6:74:4c:38:a5:d7:37:5c:8c:24:
bc:42:57:8e:c2:38:fd:5e:41:b3:11:d5:2a:ea:b6:aa:cb:aa:
29:61:a3:59:25:7d:bd:e3:af:52:ab:d0:af:1c:fe:4d:cf:8c:
fc:06:ef:64:c7:2e:f3:dd:85:99:6f:37:53:6b:76:86:ff:ec:
5c:86:e5:9b:f0:a0:d0:14:32:48:66:2b:c6:88:30:62:40:ae:
a8:a7:fd:e8:ec:f0:27:91:2c:82:07:03:e6:f8:06:18:f0:45:
53:9f:ad:bf:4d:38:ed:c0:c2:2f:a8:5f:86:78:ab:fb:63:4b:
9b:28:e2:ae:b5:6b:8f:18:f0:57:52:77:72:2f:fe:96:b4:00:
2d:c0:2b:52:e8:68:45:f2:c5:f0:31:72:80:27:c2:8f:b5:30:
40:4d:7a:0f:29:cb:b3:d2:bd:de:a9:50:5b:f2:af:87:3b:db:
62:a0:8c:27:f7:e8:da:e4:8e:3a:19:5a:27:20:34:39:2f:a1:
2b:7d:8c:ef:8e:8c:27:db:56:5b:2f:08:c4:96:dc:29:21:7b:
9a:37:0b:4c:c7:0d:1b:18:5b:e3:85:18:26:2a:35:32:e6:f2:
f7:44:7d:08:49:35:88:4f:b3:be:84:49:22:ca:31:34:89:6b:
29:45:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:36 2026 by rpki-client