Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e20393439.roa
File: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (raw, json)
Hash identifier: qohGuxaA8zjdGuw7f8QVXRggtcBtcSDecfBEndIySVw=
Subject key identifier: 76:21:A5:86:BA:E1:EB:E2:C5:6F:53:54:94:AF:12:B1:05:61:AB:F5
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 3673A36E967A71ED67F9C436BB572CD5A3C52EC6
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e20393439.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 949
IP address blocks: 185.37.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:73:a3:6e:96:7a:71:ed:67:f9:c4:36:bb:57:2c:d5:a3:c5:2e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=7621A586BAE1EBE2C56F535494AF12B10561ABF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:24:59:1c:3d:1a:cf:ff:10:51:2b:ea:1d:
f3:0d:0c:89:54:86:ba:e2:56:57:74:19:07:8e:c6:
20:5b:da:a0:5c:bf:05:7f:d2:7e:43:99:19:68:67:
ea:31:17:37:e1:01:d6:e7:26:94:3c:29:54:01:c7:
d1:0c:df:e6:a3:a1:36:1c:6f:74:b7:9f:0c:9a:19:
d8:23:2b:59:51:9d:ec:d8:7c:c4:13:16:65:95:7b:
33:15:7c:ec:78:4e:83:c4:6f:b4:fc:f2:a8:80:99:
7b:94:32:98:47:fb:00:5c:5d:69:a9:9d:0f:92:01:
d8:b5:56:ad:61:56:3b:b4:5a:d3:59:67:64:be:a5:
61:fe:f1:42:8f:82:5c:99:75:83:c2:5f:f9:7a:1f:
3d:14:24:06:09:9e:70:4e:ff:8d:31:32:2b:aa:5d:
01:6a:a0:71:42:83:05:bf:85:c0:4c:14:cc:ff:01:
8e:3b:1e:02:26:99:d1:97:66:bd:35:bb:4f:0a:e0:
95:15:f2:e8:1b:4b:48:b2:43:f2:6b:a4:cd:0c:49:
54:c7:f9:0c:06:70:aa:29:23:d1:2a:b0:fd:e2:4a:
c3:5d:6d:cd:d6:2f:dd:33:21:71:d8:ec:7d:0b:ec:
77:14:91:d0:77:5e:5d:ef:89:a3:40:f8:1c:4e:9e:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:A5:86:BA:E1:EB:E2:C5:6F:53:54:94:AF:12:B1:05:61:AB:F5
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e20393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:e9:10:6d:d7:6e:32:6b:2c:8a:38:2e:6a:c5:69:7f:31:ed:
ed:9b:af:66:1a:2d:3b:49:79:27:fe:f2:7e:26:72:aa:96:68:
4d:91:ad:ed:4b:ea:58:fc:c8:5e:f9:3a:69:56:4b:06:91:03:
0e:a9:f5:51:81:a8:1d:a9:e0:91:f9:4e:3b:46:f9:95:bd:15:
b5:8c:46:f3:9d:06:c2:24:c6:fe:99:fc:30:9d:2a:1c:37:09:
b3:72:8f:27:a2:9c:b7:cf:45:2f:0d:92:5f:61:73:98:32:f3:
48:99:3b:92:24:5c:6c:f6:ca:4b:f3:9d:dc:6f:1f:81:f3:5c:
f0:b1:15:25:64:96:ca:d1:ec:34:14:a5:2f:76:57:4b:6f:16:
ff:c1:c4:f0:18:96:6d:01:04:f1:76:87:ca:56:03:31:fe:e9:
38:61:84:4b:c0:9e:f0:ec:5a:10:89:de:34:60:c3:5a:5e:1e:
06:b1:fc:81:2b:53:20:66:c9:3c:db:ce:8c:1f:ed:26:b6:bf:
ce:4f:4c:e8:7f:a1:4d:ee:c3:63:70:b5:b9:b2:93:16:82:5c:
df:b2:58:9e:d3:56:ff:c3:bb:0d:7c:b9:21:b2:1d:7c:9a:3e:
55:07:18:88:16:45:85:a0:af:bc:03:48:6e:82:08:88:0f:57:
d2:f2:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:34:49 2026 by rpki-client