Route Origin Authorization
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3332203d3e203233383538.roa
File: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (raw, json)
Hash identifier: dRlt5Fg/2b9FZ1Dyqs8AgsGLCGQU2N9PunbBhQLafb4=
Subject key identifier: A7:DF:C2:A2:D1:89:68:3A:C2:D9:38:42:D9:37:F3:49:BD:DF:E1:2A
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 10617C093845FCC82117EBD2FEC0435EF0B599BE
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3332203d3e203233383538.roa
Signing time: Thu 12 Nov 2026 14:56:20 +0000
ROA not before: Thu 12 Nov 2026 14:51:20 +0000
ROA not after: Thu 11 Nov 2027 14:56:20 +0000
asID: 23858
IP address blocks: 185.37.255.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:61:7c:09:38:45:fc:c8:21:17:eb:d2:fe:c0:43:5e:f0:b5:99:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Nov 12 14:51:20 2026 GMT
Not After : Nov 11 14:56:20 2027 GMT
Subject: CN=A7DFC2A2D189683AC2D93842D937F349BDDFE12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:96:3b:4e:f0:e1:7b:f2:29:fd:25:63:3e:
50:66:ac:85:22:c9:e8:b1:36:68:f2:f7:04:f8:38:
59:78:3b:19:ea:2a:20:98:79:00:10:41:35:d9:65:
72:32:35:81:9c:f0:a4:3b:c1:1a:bb:aa:3d:c9:ec:
66:03:9a:0a:97:44:a3:4e:1c:5c:2d:8a:06:90:5c:
96:75:16:e7:e0:95:a5:ff:b5:d8:75:5b:4d:87:3a:
52:e1:9d:a5:d3:43:94:39:8d:f5:26:a2:66:4c:f4:
ba:77:bc:b7:4b:0a:85:77:15:59:ba:30:35:62:df:
d3:02:ba:00:51:5b:1b:ca:d2:1f:46:8e:b0:41:4e:
b7:1e:d7:25:7d:4d:79:d2:a8:3a:e5:ac:57:0b:22:
c4:91:df:cd:80:31:d6:3e:28:12:9c:fd:ef:3a:85:
bd:58:0d:4f:f6:88:03:1b:09:b7:3d:5d:9c:c3:3e:
00:d7:6b:14:04:05:b7:3d:5f:db:60:e3:bf:4d:a9:
13:87:e2:2e:87:7a:05:b6:28:f8:5b:1e:73:5f:25:
13:e3:ef:80:cb:7d:69:b8:30:e6:91:eb:ec:7f:29:
a1:e8:5d:70:ef:e3:ee:57:86:41:3f:4a:d8:6f:b0:
22:30:e7:90:c2:1b:3e:0a:67:18:a3:2e:bc:39:84:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:C2:A2:D1:89:68:3A:C2:D9:38:42:D9:37:F3:49:BD:DF:E1:2A
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3332203d3e203233383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:54:31:eb:b4:b6:d6:68:bc:8b:0d:c4:d5:af:01:7d:52:96:
67:3a:5b:4f:78:e9:41:8b:b0:ea:67:0a:39:c7:d4:43:71:b0:
87:78:55:55:f5:5d:8b:92:de:93:cc:17:98:9b:4d:1f:e2:77:
c7:d6:ac:87:4f:fb:86:05:e3:14:cb:ea:d8:ee:e4:f0:16:66:
20:5f:45:aa:21:49:79:2f:71:d2:b3:50:81:fc:56:5b:c3:2d:
6c:de:a0:d2:13:b8:27:f2:ad:d3:73:53:90:79:8e:7c:fe:dc:
fe:70:f0:67:20:dc:d8:b5:10:d8:1f:f7:e3:7d:73:9e:9a:29:
73:3d:5d:46:e4:56:45:d5:f4:8d:9e:a9:92:0a:a1:8e:1c:33:
1d:e3:f6:1a:e3:db:b4:6e:03:5f:17:44:06:d2:28:1e:ea:88:
cd:e9:23:c8:32:ef:ab:7e:8f:dc:32:6d:0b:79:0e:99:80:53:
ec:58:e1:58:16:0e:db:1e:16:d0:46:2f:a7:40:59:a7:96:da:
de:50:68:7f:e3:0c:61:9f:77:6c:bf:ea:19:89:43:64:8a:d9:
3e:0a:4d:ef:89:2d:1d:74:51:3d:70:df:a5:c1:8d:45:93:f4:
af:e3:ed:19:cb:19:0e:94:82:02:c2:4e:54:2e:bf:ba:0b:6d:
aa:c0:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:27:51 2026 by rpki-client