Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2033323134.roa
File: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (raw, json)
Hash identifier: 2VCvZ9ENJ4Ky7mqUADmT4ipo3K8aeZrg5M88oJx2RrA=
Subject key identifier: FE:2A:66:C2:6F:BD:51:7A:C5:D1:A4:36:C0:22:D0:11:A4:FE:2E:82
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 52E41037E7A7A463756993A688B17D64E917C954
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 185.37.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e4:10:37:e7:a7:a4:63:75:69:93:a6:88:b1:7d:64:e9:17:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=FE2A66C26FBD517AC5D1A436C022D011A4FE2E82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:51:0f:27:b5:06:03:f8:cb:e1:a4:c2:20:
7f:17:00:95:01:68:a0:84:3c:f9:66:c1:1b:c9:83:
4e:f4:c0:1f:17:db:17:f4:24:06:71:f3:d5:57:4f:
c6:12:5a:26:09:ae:7f:51:0e:c1:5d:c7:94:72:cf:
33:90:0e:e5:8f:3e:be:3d:e5:20:b8:c5:8c:08:f6:
cd:90:b8:eb:08:9a:9e:8c:4d:dd:bc:eb:0b:12:9e:
71:a2:44:28:ac:ff:32:96:ea:b1:ea:18:f4:d7:77:
50:ad:5d:b4:8a:aa:b8:58:fc:33:36:6e:3c:7c:13:
ca:b1:8f:3a:8d:23:2a:ce:f5:62:b9:a3:9f:3d:87:
fb:36:ae:a5:34:2f:4e:b4:7c:db:99:54:fc:5f:05:
f1:ae:a1:9a:2b:f7:2b:34:eb:c5:3f:a9:84:11:aa:
25:26:eb:02:80:60:a6:17:86:e5:ea:26:cd:11:4e:
90:5b:17:09:82:d5:cc:6f:78:88:49:be:b7:4a:ae:
cc:0f:f7:f4:4f:0b:8a:56:ee:a6:aa:bc:5c:49:ce:
02:a0:06:a5:10:d8:43:28:f1:03:25:20:7c:6d:d8:
aa:4b:0b:66:0d:09:e7:a5:43:69:94:c7:94:93:d3:
2d:47:07:79:dd:ab:4c:f2:68:65:23:3a:17:cc:69:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:66:C2:6F:BD:51:7A:C5:D1:A4:36:C0:22:D0:11:A4:FE:2E:82
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:99:04:32:6f:88:bc:e1:c0:13:3a:fd:22:cc:f5:a3:c6:6b:
3f:d9:01:0f:1b:4e:b8:fc:dd:e6:5f:5d:0c:ef:93:94:1d:0b:
35:67:44:56:b3:47:b9:66:df:c2:47:32:d3:99:2a:fa:01:56:
65:9d:76:de:04:bf:db:97:b3:6a:c1:48:3b:bc:a9:7b:54:34:
8c:f2:75:5f:6e:40:ef:99:70:93:71:d1:16:b4:db:13:cf:66:
e4:bb:8c:77:39:60:42:b8:cf:35:07:5c:9f:e6:98:01:f9:b8:
a3:bb:4b:d7:01:09:db:7d:22:d0:fd:7c:69:1d:ab:de:6f:d0:
bd:72:99:61:b6:27:b2:06:b9:da:4c:60:fb:d6:f4:f4:61:49:
75:ce:32:ef:1d:d5:81:f5:30:9f:05:b8:e6:4a:94:91:2e:35:
97:ed:d4:32:34:68:d4:db:1f:9f:e2:6b:6a:d3:da:8d:f1:1b:
86:46:ee:3f:19:7c:c4:a9:4c:65:0d:69:ef:a0:06:b6:1a:05:
02:1d:68:78:3c:ed:6f:c0:0d:57:32:a9:d3:1e:bb:78:ae:16:
17:83:d8:61:fe:d0:16:8d:24:24:6d:b2:0e:f7:a6:62:ab:3f:
6a:b3:87:f2:e9:ce:b9:4c:c6:1b:33:f4:c8:78:49:75:56:15:
7d:d4:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:00 2026 by rpki-client