Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/A6JO-m6XNsGd3TxGrM7dQLZ1ahA.roa
File: A6JO-m6XNsGd3TxGrM7dQLZ1ahA.roa (raw, json)
Hash identifier: 90hFfxbU6RIZ51HY9y4yMn/uqLtq8iEbTId6sZadAfw=
Subject key identifier: 03:A2:4E:FA:6E:97:36:C1:9D:DD:3C:46:AC:CE:DD:40:B6:75:6A:10
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01EB5E
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/A6JO-m6XNsGd3TxGrM7dQLZ1ahA.roa
Signing time: Fri 03 Jul 2026 09:24:54 +0000
ROA not before: Fri 03 Jul 2026 09:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203274
IP address blocks: 198.133.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 09:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125790 (0x1eb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 3 09:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03A24EFA6E9736C19DDD3C46ACCEDD40B6756A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:b1:c7:bb:38:cc:62:45:a2:33:9f:62:db:
a4:75:ed:f0:10:f1:0d:08:ad:6f:eb:54:a9:a2:63:
cd:58:ae:80:3e:44:b1:95:8f:cd:61:e0:cd:56:2b:
85:00:b9:aa:91:25:91:d6:6e:a8:a6:d7:4c:87:e6:
32:e0:85:7d:b0:87:16:18:f3:20:30:e0:13:8c:73:
0f:b4:ac:93:fb:96:e7:6e:4d:67:f1:b4:73:e1:e5:
4d:6e:88:b9:13:b3:86:13:0d:d9:55:62:c1:92:a1:
6f:3b:16:81:08:60:1c:39:6e:b9:ba:cf:7c:a0:95:
c4:47:f4:b2:09:43:7e:51:99:3b:a1:81:47:a6:8e:
1f:0c:5b:a5:db:1d:5d:a3:50:79:7b:b9:d6:a3:21:
ca:31:bb:e6:12:42:9d:04:ed:6b:87:19:0b:ff:17:
ea:1b:29:83:78:42:4b:84:91:4e:42:b1:d0:c9:c3:
12:8f:c9:b0:d1:45:51:19:1c:72:c7:1a:3a:f1:ef:
34:a7:28:c0:1c:14:a8:9b:e6:1b:68:62:24:05:d8:
a9:b3:b8:85:21:12:f1:9b:c8:b5:7b:2e:5f:f6:69:
99:a1:c8:fc:08:80:d7:72:c4:94:a1:75:5b:d5:ca:
d0:ed:4b:8b:33:28:d6:b3:f4:e2:33:67:f1:c1:d3:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:4E:FA:6E:97:36:C1:9D:DD:3C:46:AC:CE:DD:40:B6:75:6A:10
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/A6JO-m6XNsGd3TxGrM7dQLZ1ahA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.133.206.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c5:67:4c:19:f6:10:33:5d:6c:bd:dd:bb:83:3d:bc:31:22:
eb:f9:21:f0:37:bf:27:93:32:e1:77:b6:33:29:db:18:3c:bf:
e2:8d:03:b9:2f:82:a3:d6:0e:df:42:d5:e8:0b:16:81:51:da:
ee:b7:c7:d4:91:89:ec:72:5e:5d:9c:8d:af:88:42:3e:49:b0:
f5:3d:76:dc:89:fe:4c:aa:6a:e6:f3:3d:fb:02:34:30:db:b5:
87:37:fe:bf:97:d7:c2:81:01:cb:b8:a1:38:a8:f8:07:e0:f0:
0d:e3:07:8b:18:60:7a:21:04:ef:4d:24:1f:87:8b:dd:f7:7a:
a2:2f:e2:8d:88:d8:68:c3:7f:7f:f1:a0:98:40:aa:0d:93:f9:
fa:bb:7b:89:76:10:15:6e:cf:16:52:0f:35:c8:e0:25:b0:36:
39:64:67:ba:7f:68:51:e4:ab:e6:dd:f9:48:18:a3:3e:21:c0:
68:8d:a2:6e:51:80:fe:e9:80:2b:fc:dc:39:17:f0:02:cc:6e:
e0:b5:bb:9a:89:56:24:2c:64:4c:d1:45:4f:ca:19:c2:b7:0e:
41:ab:a9:ee:83:1b:6c:1a:6c:28:49:ad:41:11:90:08:c1:63:
2b:d6:9a:27:90:29:62:78:6f:fb:28:34:f9:74:bf:f7:5d:6a:
23:c4:3b:30
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDAeteMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjYwNzAz
MDkyNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwM0EyNEVGQTZFOTcz
NkMxOURERDNDNDZBQ0NFREQ0MEI2NzU2QTEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2rWxx7s4zGJFojOfYtukde3wEPENCK1v61SpomPNWK6APkSx
lY/NYeDNViuFALmqkSWR1m6optdMh+Yy4IV9sIcWGPMgMOATjHMPtKyT+5bnbk1n
8bRz4eVNboi5E7OGEw3ZVWLBkqFvOxaBCGAcOW65us98oJXER/SyCUN+UZk7oYFH
po4fDFul2x1do1B5e7nWoyHKMbvmEkKdBO1rhxkL/xfqGymDeEJLhJFOQrHQycMS
j8mw0UVRGRxyxxo68e80pyjAHBSom+YbaGIkBdips7iFIRLxm8i1ey5f9mmZocj8
CIDXcsSUoXVb1crQ7UuLMyjWs/TiM2fxwdPBlwIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFAOiTvpulzbBnd08RqzO3UC2dWoQMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VL0E2Sk8tbTZYTnNHZDNUeEdyTTdkUUxaMWFoQS5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMaFzjANBgkqhkiG9w0BAQsFAAOCAQEAkcVn
TBn2EDNdbL3du4M9vDEi6/kh8De/J5My4Xe2MynbGDy/4o0DuS+Co9YO30LV6AsW
gVHa7rfH1JGJ7HJeXZyNr4hCPkmw9T123In+TKpq5vM9+wI0MNu1hzf+v5fXwoEB
y7ihOKj4B+DwDeMHixhgeiEE700kH4eL3fd6oi/ijYjYaMN/f/GgmECqDZP5+rt7
iXYQFW7PFlIPNcjgJbA2OWRnun9oUeSr5t35SBijPiHAaI2iblGA/umAK/zcORfw
Asxu4LW7molWJCxkTNFFT8oZwrcOQaup7oMbbBpsKEmtQRGQCMFjK9aaJ5ApYnhv
+yg0+XS/911qI8Q7MA==
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:17:56 2026 by rpki-client