Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/vBQ6-n-Fkd2NhHBCvYbcsQQoWBw.roa
File: vBQ6-n-Fkd2NhHBCvYbcsQQoWBw.roa (raw, json)
Hash identifier: Jt7OEJTDtLJyYqoxYH04EPwkBZwIuoBbmwM8DaMqOtY=
Subject key identifier: BC:14:3A:FA:7F:85:91:DD:8D:84:70:42:BD:86:DC:B1:04:28:58:1C
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01EB59
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/vBQ6-n-Fkd2NhHBCvYbcsQQoWBw.roa
Signing time: Fri 03 Jul 2026 09:24:51 +0000
ROA not before: Fri 03 Jul 2026 09:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3130
IP address blocks: 198.180.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125785 (0x1eb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 3 09:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=BC143AFA7F8591DD8D847042BD86DCB10428581C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:a4:82:e7:b9:3a:4c:a9:bf:fd:d5:26:ac:
b2:e1:29:6b:9d:01:c8:6c:cf:61:bd:e2:38:ae:2d:
ee:a8:43:bf:4c:af:e3:8e:70:29:e7:4d:d8:27:c5:
8c:3f:03:ad:13:e6:ce:f7:27:b0:4a:06:4e:20:bb:
f5:d1:3f:17:17:cb:25:88:6c:5e:e2:61:cf:ff:c9:
d9:0a:ef:d5:7a:6b:a6:09:00:e2:52:00:86:3e:ba:
b4:5b:bc:e5:22:72:ad:f7:10:cf:3e:9d:19:0a:a9:
18:5f:36:a7:5e:68:1d:67:89:33:0a:1b:91:d7:4c:
9d:45:8d:d1:e5:44:d1:16:fe:21:b8:94:63:8d:be:
c5:79:c5:6b:f3:a8:52:81:0c:1b:e8:77:52:ac:db:
fe:23:9f:b4:fe:69:f1:ce:d9:e2:e6:2e:e4:79:94:
6c:f2:e5:60:86:73:3e:1f:ae:33:e4:02:0b:e6:d7:
81:55:b0:9c:1e:13:6e:bf:8d:5b:7e:de:6b:8c:55:
21:65:97:c6:18:0d:b9:51:71:ec:91:50:bf:a4:cb:
82:9f:70:6d:25:72:14:34:62:ac:13:65:fa:74:1a:
06:7c:66:e0:06:6e:3d:2d:18:0f:b4:43:55:37:2e:
bc:42:8d:06:c3:30:99:23:8e:c3:b2:82:30:84:40:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:3A:FA:7F:85:91:DD:8D:84:70:42:BD:86:DC:B1:04:28:58:1C
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/vBQ6-n-Fkd2NhHBCvYbcsQQoWBw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c5:50:ef:f8:41:59:76:48:3a:14:aa:0f:5b:c9:42:fd:5c:
58:e8:14:f1:1a:20:f3:47:05:f8:ce:bf:bc:db:31:22:a7:76:
51:04:e8:ad:c9:9a:9b:7a:26:e2:32:7f:c1:49:65:5d:ae:0a:
b7:5c:c7:75:5d:7a:14:3d:19:21:c2:c8:d6:3c:70:ee:fa:29:
c0:5c:eb:25:81:f2:b4:b7:18:8a:6f:07:8f:39:b4:ff:26:4a:
4e:61:ee:fe:6a:7b:25:d3:10:3c:a0:f2:b2:c8:a1:26:20:2a:
4f:8b:cf:00:4e:45:27:d9:6f:81:3f:a9:3c:bc:77:58:dd:b3:
bb:fd:26:db:8a:0f:b2:de:e5:64:73:e5:1c:0a:a7:98:fe:a3:
dd:48:e8:ed:f7:b6:9f:4f:78:e6:26:2a:07:58:1a:bc:10:46:
09:60:58:04:de:b9:8d:d1:94:42:3d:0b:5f:5e:67:1c:c2:d1:
33:c8:0e:bc:c4:6c:7f:9a:b5:9e:c2:7c:90:2d:96:1d:c7:e0:
5e:8c:9f:eb:01:0f:23:78:e1:72:19:d3:0c:fa:57:42:de:2f:
a6:03:6f:62:47:64:16:04:98:a4:0e:20:87:3e:fa:4f:0a:2c:
57:21:27:89:70:2c:0e:9c:d3:5f:a4:a7:66:cd:5d:b2:1a:c6:
1c:00:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:20 2026 by rpki-client