Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/DueY1GI2Yeu7tQie1YT78FjCdKU.roa
File: DueY1GI2Yeu7tQie1YT78FjCdKU.roa (raw, json)
Hash identifier: C9MDswIVME0BahQ/n9lq2EdN9LnTP9NIPGG1JR5bhWE=
Subject key identifier: 0E:E7:98:D4:62:36:61:EB:BB:B5:08:9E:D5:84:FB:F0:58:C2:74:A5
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01EB58
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/DueY1GI2Yeu7tQie1YT78FjCdKU.roa
Signing time: Fri 03 Jul 2026 09:24:51 +0000
ROA not before: Fri 03 Jul 2026 09:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199518
IP address blocks: 198.180.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125784 (0x1eb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jul 3 09:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0EE798D4623661EBBBB5089ED584FBF058C274A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:aa:93:57:c6:e5:84:ce:9c:21:bc:9b:60:
80:70:4a:f4:da:c5:d8:ce:91:2d:c0:01:e4:33:21:
25:a7:f5:2a:8d:1a:3b:1b:33:a0:a6:84:9e:21:dc:
01:98:a9:77:09:a8:d8:f1:7b:24:3f:47:c9:bd:cc:
2e:b9:fb:c2:97:f6:47:88:7e:da:40:de:7b:4e:39:
de:47:2e:55:16:f7:13:f6:bd:c3:31:f3:9c:2d:82:
d1:8a:39:c9:17:3e:b4:50:3b:36:1e:4d:58:d2:e6:
8a:9a:99:f7:eb:96:54:82:ed:2a:fa:77:90:47:26:
00:27:43:8a:30:79:9c:f7:ca:31:d8:83:4a:96:ad:
fb:20:62:b4:b1:0d:e2:d3:d1:79:51:01:50:a0:99:
b6:0a:8c:b6:a3:3e:aa:b0:96:3c:ae:ac:41:d0:de:
a5:c8:d3:f4:49:1a:e1:2b:a2:0b:93:a0:84:40:ce:
4e:d4:90:cf:91:6d:9c:84:76:f8:70:06:92:35:54:
6f:e7:2a:0b:0e:f6:99:f9:cb:c6:2c:20:67:98:60:
49:53:78:bb:35:11:87:27:ea:67:01:74:fd:9c:e0:
7d:04:9f:9d:35:6f:f2:3f:31:e7:5d:9f:1f:10:87:
12:2d:58:2d:23:0d:8e:1d:14:4a:31:27:67:d4:4f:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:98:D4:62:36:61:EB:BB:B5:08:9E:D5:84:FB:F0:58:C2:74:A5
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/DueY1GI2Yeu7tQie1YT78FjCdKU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
96:07:5d:79:d8:fc:87:b7:42:99:d7:4a:ef:13:fa:4f:60:30:
4d:30:a7:0d:89:e6:63:f1:d3:59:46:39:2d:f2:63:76:0e:61:
54:a9:5c:c0:50:83:d6:91:a2:93:7e:da:2c:af:5b:9f:d0:64:
72:cb:70:b0:61:4e:e6:bf:72:80:62:a7:58:ea:6e:42:46:d0:
96:f0:74:03:56:a6:1c:dd:e4:da:45:b5:4f:dc:ce:69:dc:fe:
99:8e:3f:6f:72:24:af:85:50:ef:a5:ae:20:61:62:cd:53:c0:
63:a8:20:3f:fb:c0:aa:52:31:bc:29:be:a4:b2:e0:36:07:a3:
4b:2e:a3:07:0b:6a:c3:bb:ba:d4:39:90:67:64:b4:11:0f:9f:
3a:9f:d4:42:2b:2a:09:d2:56:1e:15:fc:20:5a:77:87:60:7f:
30:71:1d:bd:cf:f8:23:cc:40:38:0a:4d:f9:90:43:a8:e0:f0:
1d:80:f8:47:0c:a6:77:cb:8f:d7:33:cc:f4:35:db:5b:7b:91:
b8:89:77:f2:a9:0b:f5:66:3e:8a:c5:d3:5a:49:11:86:6a:cd:
c4:5a:36:93:8b:f6:57:ec:f9:cc:f3:5b:6f:bd:b1:38:54:ad:
09:12:cb:80:5b:9f:4d:9a:fc:66:58:62:9b:f1:e6:35:c6:9c:
22:95:d5:7d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDAetYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjYwNzAz
MDkyNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwRUU3OThENDYyMzY2
MUVCQkJCNTA4OUVENTg0RkJGMDU4QzI3NEE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2Waqk1fG5YTOnCG8m2CAcEr02sXYzpEtwAHkMyElp/UqjRo7
GzOgpoSeIdwBmKl3CajY8XskP0fJvcwuufvCl/ZHiH7aQN57TjneRy5VFvcT9r3D
MfOcLYLRijnJFz60UDs2Hk1Y0uaKmpn365ZUgu0q+neQRyYAJ0OKMHmc98ox2INK
lq37IGK0sQ3i09F5UQFQoJm2Coy2oz6qsJY8rqxB0N6lyNP0SRrhK6ILk6CEQM5O
1JDPkW2chHb4cAaSNVRv5yoLDvaZ+cvGLCBnmGBJU3i7NRGHJ+pnAXT9nOB9BJ+d
NW/yPzHnXZ8fEIcSLVgtIw2OHRRKMSdn1E9aAQIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFA7nmNRiNmHru7UIntWE+/BYwnSlMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VL0R1ZVkxR0kyWWV1N3RRaWUxWVQ3OEZqQ2RLVS5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMa0lzANBgkqhkiG9w0BAQsFAAOCAQEAlgdd
edj8h7dCmddK7xP6T2AwTTCnDYnmY/HTWUY5LfJjdg5hVKlcwFCD1pGik37aLK9b
n9BkcstwsGFO5r9ygGKnWOpuQkbQlvB0A1amHN3k2kW1T9zOadz+mY4/b3Ikr4VQ
76WuIGFizVPAY6ggP/vAqlIxvCm+pLLgNgejSy6jBwtqw7u61DmQZ2S0EQ+fOp/U
QisqCdJWHhX8IFp3h2B/MHEdvc/4I8xAOApN+ZBDqODwHYD4Rwymd8uP1zPM9DXb
W3uRuIl38qkL9WY+isXTWkkRhmrNxFo2k4v2V+z5zPNbb72xOFStCRLLgFufTZr8
Zlhim/HmNcacIpXVfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:30:00 2026 by rpki-client