Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323034.roa
File: 326130343a366630303a3a2f32392d3438203d3e2033323034.roa (raw, json)
Hash identifier: 5Lgl93wegC0F3YZhtWE8aOUFCYwWrQc2oZI9ynBg7zg=
Subject key identifier: 65:76:E5:21:0D:34:48:5A:D4:3C:94:97:AD:B7:E4:60:8B:CD:BA:AD
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 5ACE20C04F8F589AE4FBBEB1B6E5143FACB6F02A
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323034.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3204
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ce:20:c0:4f:8f:58:9a:e4:fb:be:b1:b6:e5:14:3f:ac:b6:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=6576E5210D34485AD43C9497ADB7E4608BCDBAAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:e2:e7:a3:08:08:2f:81:56:10:97:ef:38:
8f:b9:84:14:d7:5a:c3:3f:dd:bb:ea:ec:de:6e:84:
f0:97:f2:5f:34:51:87:b4:30:c4:b3:1d:5f:12:ae:
98:b1:c3:4b:93:d6:60:4e:a7:68:ee:c8:2d:7a:bd:
cd:51:88:9f:e4:10:4e:ff:09:6f:e6:34:9d:9f:78:
db:f9:1f:c6:ee:f0:db:2f:b8:1a:b4:89:9f:9d:93:
d2:62:f3:e3:e3:ec:69:0a:4d:10:85:79:b1:72:90:
71:a3:bd:10:56:5f:ef:8c:81:3d:1f:6a:df:ff:e0:
1d:0f:48:50:3c:20:22:27:36:f7:d3:09:c1:1a:7d:
46:9f:c9:f2:51:b7:bf:51:53:e3:f6:42:62:b9:47:
4a:63:0d:93:bf:95:46:0d:e0:a6:a6:d9:9a:c3:95:
da:29:32:9a:b9:90:d0:e4:d5:99:51:3f:f1:7c:5f:
d3:ec:c5:50:1d:f0:02:e1:ef:09:80:5c:0c:b0:97:
cf:fd:15:d8:c7:0c:37:b8:35:d1:d3:1c:c1:6f:39:
e0:02:31:7d:46:21:4d:46:d0:08:29:3e:1d:d7:8f:
51:04:b1:bf:8c:d6:ae:70:db:14:d4:3f:de:4b:74:
89:7e:7f:61:46:48:09:fa:2a:44:cf:2e:47:ba:42:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:E5:21:0D:34:48:5A:D4:3C:94:97:AD:B7:E4:60:8B:CD:BA:AD
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
5e:7f:f1:96:6a:42:ef:7e:70:c7:ac:cc:c1:4a:a2:da:1b:d7:
fe:94:72:4e:1c:cd:a2:47:41:af:95:0d:bd:5a:bd:3c:53:a7:
e9:49:4c:93:44:46:6d:15:79:52:1c:53:7b:c0:4d:e7:eb:05:
50:54:0f:3a:ec:64:f3:02:5d:12:fb:4a:e9:79:fb:16:ca:1d:
c6:67:da:6c:39:3b:bc:44:e7:cf:5c:65:ea:d3:a8:ce:7d:d1:
e1:f0:11:b0:30:99:69:d1:67:e5:b7:79:d5:66:57:8c:d0:91:
b6:1c:21:59:d5:5f:2a:78:9c:1e:43:79:0a:e1:88:23:92:1b:
85:21:21:06:94:14:17:e4:a9:a5:87:0b:9f:78:d4:05:82:56:
18:92:71:1a:cf:49:7e:0c:a7:6d:41:89:b0:ca:11:36:d6:f2:
fe:04:f6:63:b5:da:40:ed:ef:1f:c2:59:16:84:94:3d:7e:35:
50:13:dc:d4:62:a0:c2:dd:01:0d:4d:8c:85:51:1e:73:fc:2f:
00:fc:91:89:75:9c:76:78:40:b0:e1:3d:fd:1c:a4:98:6a:c5:
da:a5:61:04:27:0e:5b:89:a2:e8:28:68:51:b9:56:9d:62:d1:
c2:bb:47:fc:e7:ae:24:90:14:85:da:41:b9:05:f6:85:42:c5:
f0:82:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:36 2026 by rpki-client