Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323134.roa
File: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (raw, json)
Hash identifier: 4oeDyfgssyoS1Bvq0jKerLHFQRov8R/a5o6YWNAHk3Y=
Subject key identifier: 05:A7:DD:41:D2:89:80:92:48:65:1B:F4:D3:E5:8B:E7:39:27:07:C0
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 40CB77BE11237B7F3D61E208B0AD9BDC6C53404D
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cb:77:be:11:23:7b:7f:3d:61:e2:08:b0:ad:9b:dc:6c:53:40:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=05A7DD41D289809248651BF4D3E58BE7392707C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:59:65:57:24:6d:7f:24:05:c5:d1:5f:49:
e2:b4:55:6d:05:e4:43:bb:87:32:42:08:10:51:53:
71:05:9a:91:cb:94:78:0f:0c:d9:83:24:2a:d1:51:
d6:8a:98:e7:00:a2:42:cb:72:69:77:cd:69:42:b5:
9d:08:71:c1:1c:e4:d3:b1:8a:97:bc:6e:86:f8:09:
a5:92:ab:eb:1a:70:2e:c4:a2:25:db:62:29:f0:ae:
4d:a7:97:30:fa:06:92:f7:2b:80:75:e1:ab:3b:da:
68:4a:6d:af:18:d3:04:db:4a:13:53:44:66:b7:07:
c0:15:04:ea:6b:33:54:3f:80:7d:6f:eb:aa:c5:e8:
e3:9f:cc:d2:74:6d:4d:e0:02:6a:cb:65:7c:1b:33:
68:3e:13:38:bf:6d:36:0c:dc:5a:ea:6e:44:17:1c:
dd:5e:7c:c3:9a:63:82:1b:26:1b:9d:e1:e2:37:d1:
db:59:13:e1:66:dc:f1:60:77:85:2b:14:50:2e:8e:
7e:cb:f5:e6:37:30:c9:44:d4:9d:dd:f6:88:25:b5:
ad:c5:d4:32:bf:18:d6:b8:6a:3c:20:2a:83:4e:6b:
55:78:ac:06:65:b6:2c:56:2a:af:7c:b3:92:68:09:
0b:c5:80:c3:0e:05:41:09:bc:da:36:f2:c4:1e:73:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A7:DD:41:D2:89:80:92:48:65:1B:F4:D3:E5:8B:E7:39:27:07:C0
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
d6:20:63:e1:ca:ec:63:44:8e:bd:87:90:3a:f6:a2:da:cb:52:
8e:37:ba:16:f8:01:f5:b4:52:88:ca:2b:2c:d1:ac:44:5a:01:
4c:a5:80:5d:b6:07:51:15:4b:9b:70:ea:4a:a8:f0:07:91:a6:
94:5d:27:50:7d:84:7d:7f:63:fc:5d:00:c5:c4:f6:b7:c3:5a:
86:e0:ae:40:20:4c:7b:13:18:dd:16:cb:22:6b:5e:07:a2:8c:
b2:72:5e:8f:25:1a:7d:5e:64:51:59:fc:21:00:18:0d:5a:90:
ed:8a:a1:ba:e5:75:7b:47:3f:ba:b6:45:45:e8:10:ff:33:1a:
20:c0:69:e6:1a:a5:39:6a:f4:42:5b:b9:1b:5f:9a:d0:cd:59:
48:ad:a3:62:0e:bb:61:7a:7f:21:a3:cb:7c:e6:6b:36:22:c3:
d8:41:37:bb:61:ae:6c:b5:60:38:39:96:1d:a9:44:49:2d:e4:
26:12:b9:8f:28:08:2a:5f:c9:4d:d6:3d:c5:ee:a7:99:00:4f:
20:21:4a:98:1d:9f:07:b3:00:67:9a:31:d1:5e:ef:75:f9:14:
ac:90:ea:d8:b7:5a:60:36:2f:c4:a8:f5:c6:bf:7c:d3:75:d9:
39:6f:52:b7:7b:e6:96:4c:52:18:65:9c:08:11:e7:d5:fc:40:
de:bd:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:45 2026 by rpki-client