Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323538.roa
File: 326130343a366630303a3a2f32392d3438203d3e2033323538.roa (raw, json)
Hash identifier: QiZjQxsYZv31yB7zaIkFEVZ4ke0Di7OFB/if7r+MGQI=
Subject key identifier: BD:45:01:E1:C3:19:B8:D4:92:0E:8B:72:F1:53:13:B1:E4:BB:5A:28
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 4073982D9A1D61D234747525E6ED99372C4C6D50
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323538.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3258
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:73:98:2d:9a:1d:61:d2:34:74:75:25:e6:ed:99:37:2c:4c:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=BD4501E1C319B8D4920E8B72F15313B1E4BB5A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:ab:46:87:d7:d7:cf:8b:45:64:32:a3:c2:
22:05:2f:2f:89:5a:03:5d:7a:24:97:75:92:09:84:
b7:9d:5f:5e:47:93:48:5d:6e:12:8c:d7:ec:c7:b3:
67:c7:e5:b2:e3:93:97:3d:15:e1:38:03:37:98:12:
19:95:4e:a8:00:db:21:a3:70:86:e9:fb:29:0b:05:
67:20:ef:6d:1d:b3:bd:8b:bb:72:86:02:3c:85:49:
7c:16:dc:71:6c:56:5b:bc:91:ec:13:2e:67:e2:ce:
82:22:97:15:0f:91:cf:66:3e:67:e6:ed:e0:b3:e8:
67:5d:df:73:89:99:92:d4:45:1f:e2:6c:68:1b:c7:
b0:f3:47:66:8a:f8:58:a8:5e:58:e0:6c:33:02:ad:
0f:e0:b0:c1:81:43:4f:ed:29:c7:cd:bb:6f:a9:70:
e3:87:16:93:c1:de:38:43:f9:fe:c6:fd:ea:87:09:
6b:71:f5:31:82:83:72:cd:bc:aa:1a:3e:3b:de:6a:
6f:d4:15:b1:6b:39:f9:3f:2e:21:82:61:eb:81:32:
6a:9b:29:79:3a:ad:74:8b:72:07:63:a7:05:3a:fe:
7a:ea:33:65:3e:0b:cd:cd:d9:8b:fc:ff:1e:45:75:
bd:6d:25:8d:89:7a:24:a1:f0:ba:fe:f2:07:ec:19:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:01:E1:C3:19:B8:D4:92:0E:8B:72:F1:53:13:B1:E4:BB:5A:28
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
06:1e:57:80:8a:60:93:da:83:13:8d:5a:dd:0c:e6:66:c5:72:
6a:fc:2d:da:62:e0:c0:14:16:cc:ed:76:c5:76:aa:16:7b:2e:
9e:1c:b0:34:21:2c:a0:7a:a0:fd:b1:a3:cf:5c:08:63:2e:06:
c2:86:39:04:7d:94:87:57:ea:19:cf:ee:2f:fc:d4:b2:72:6d:
b0:cd:05:4a:0d:41:bc:d6:e6:a7:9d:f0:93:d2:dd:c6:01:84:
b6:33:7c:6c:5f:ab:b4:1c:76:39:e1:43:09:2e:d5:b9:0d:d7:
a4:63:87:5d:a4:b7:64:38:73:9f:c8:a0:7c:a3:a9:31:fc:ef:
2e:94:cc:0f:ed:ce:93:0f:72:1d:a4:b4:6b:ad:00:28:02:b8:
ab:7d:24:6a:6f:de:8e:a8:47:25:fd:b9:78:51:9d:08:6c:83:
36:d8:2e:3e:e5:5c:bc:17:8b:cb:23:2c:16:a6:6b:a5:56:21:
04:81:50:7a:2c:b9:00:af:21:58:c0:ac:da:1a:25:20:02:15:
ff:4d:4c:b7:89:60:14:8d:7b:ca:3a:c4:cd:66:19:05:5f:83:
61:75:2d:80:05:ec:ea:23:7b:43:20:ed:fa:ec:25:28:e3:87:
e0:90:c7:1d:33:98:c4:5d:3d:49:37:d0:b5:af:0d:a7:78:4d:
13:ff:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:47 2026 by rpki-client