Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2036323333.roa
File: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (raw, json)
Hash identifier: ZLOAJFZm07MBLDbGFYyoJcm1ULSbZkTIUodQliTjdo0=
Subject key identifier: 7D:63:4E:22:F3:AE:62:3B:40:10:13:20:36:78:D9:44:32:60:8D:65
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 35D8559D184EFB49F05CB431D565A7B4D8B5BDE3
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2036323333.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 6233
IP address blocks: 185.37.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d8:55:9d:18:4e:fb:49:f0:5c:b4:31:d5:65:a7:b4:d8:b5:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=7D634E22F3AE623B401013203678D94432608D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6e:4c:e8:d2:d1:05:72:0d:1f:fb:0b:f7:14:
ed:87:98:27:b8:53:04:dc:53:91:3a:1b:48:f6:00:
0c:d5:e0:1a:d7:a8:0e:30:4c:af:7c:c9:5a:a0:f8:
1d:f2:b9:17:bb:7a:29:e2:eb:e0:3f:c6:68:74:c7:
6a:e8:63:24:6d:32:23:ff:a1:4f:e7:2b:b5:f4:77:
5a:46:be:f6:6b:86:73:49:a6:fc:7a:1f:aa:24:b4:
0c:be:53:18:55:9f:92:cc:05:ac:50:16:58:b9:1e:
d3:85:43:26:b5:bb:04:13:36:b0:e4:39:96:b7:75:
db:1a:a6:de:ef:83:bb:73:c1:4d:77:f1:ac:b1:d4:
29:c0:49:02:61:da:d7:7f:37:df:70:9a:cc:b4:6c:
e0:f0:51:c8:22:f9:0b:53:d0:33:07:56:03:43:1d:
3c:84:eb:de:07:dc:2d:e5:48:3e:4f:f1:b6:d7:11:
6a:f7:03:58:6e:1e:79:35:e9:43:42:93:ea:d3:d2:
ba:5c:53:d4:da:6f:48:4e:15:74:cf:5a:16:08:77:
26:7f:3f:39:73:1f:bd:b4:aa:bc:bf:95:15:cf:83:
9e:cd:0a:46:97:ce:1f:9f:f1:67:44:65:75:fb:ef:
ab:55:bd:2d:13:4f:09:e1:cb:7d:0c:9b:69:36:14:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:4E:22:F3:AE:62:3B:40:10:13:20:36:78:D9:44:32:60:8D:65
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:d1:ac:c6:41:15:f7:bd:ab:19:a9:6f:44:7f:16:96:8a:15:
a8:47:4e:7e:e6:06:f1:9d:e9:cb:a4:98:98:34:b2:9f:c5:5e:
73:dd:0e:49:b0:80:7f:cf:41:5f:fa:e2:ca:58:45:40:40:5e:
19:e6:8c:fb:36:f8:90:1b:05:25:b1:53:6c:7d:ec:01:37:50:
75:96:c2:ed:a4:20:d0:0c:27:9e:07:e4:f8:10:87:07:dc:0d:
3c:9f:2e:85:bd:05:38:8e:2f:85:ba:c1:ea:39:d7:f7:b2:be:
4e:bd:43:c3:ff:7c:2d:e3:c8:fb:86:04:a2:09:ea:0c:4b:96:
d2:60:a6:f5:22:a5:9e:49:71:77:d8:13:18:ba:1f:fd:98:b5:
46:e2:7b:07:5c:a7:ac:89:a8:d0:ae:01:35:60:bd:63:ca:04:
20:87:8a:49:ed:f1:b5:e4:3e:49:a0:3f:ee:b5:ef:ee:4e:e1:
30:d9:fb:8e:8b:a0:fd:53:f5:82:ac:5a:fe:bb:4b:2f:51:30:
db:54:df:7c:5f:1a:21:f9:f4:9c:18:9c:52:61:90:a2:4f:d9:
9e:ef:95:8c:99:34:c7:bf:41:03:d7:4d:b5:4b:69:0f:07:d9:
a0:12:6f:86:9d:b1:98:da:8f:4d:8d:e9:8a:87:2f:22:d6:60:
07:76:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:48 2026 by rpki-client