Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f33322d3438203d3e2033323134.roa
File: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: yFK0EjnAKL3V5kFfVjPuliN38pgQvNpuhSB0O+4T2Co=
Subject key identifier: 40:BF:45:70:84:F4:4C:5F:77:E7:9C:7E:3E:F8:BC:CD:3A:F0:D9:79
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 0B98F55F05CF89B92B600D36DEF49796BE2A6499
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f33322d3438203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 2a04:6f00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:98:f5:5f:05:cf:89:b9:2b:60:0d:36:de:f4:97:96:be:2a:64:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=40BF457084F44C5F77E79C7E3EF8BCCD3AF0D979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:76:b0:28:82:ee:ab:9c:1f:25:15:11:9a:
9b:ca:c8:d2:1b:44:07:b9:0f:be:a7:63:60:fb:17:
eb:79:7e:ab:e5:70:ad:70:5d:71:ee:a1:34:69:5c:
87:95:8b:2f:76:35:f6:84:9c:4c:c3:93:27:f4:22:
50:d1:03:77:a5:9d:fd:e5:7f:2a:60:b1:65:95:e3:
1e:9c:e4:69:85:ba:ce:e8:0f:b0:54:e8:94:d8:25:
b6:1a:51:09:db:c8:b8:3d:50:59:5e:d3:26:67:b4:
a5:49:ff:05:a0:0c:28:32:5c:e7:b6:36:b6:40:bc:
ab:e7:e6:9e:c8:6e:74:c5:5d:fb:a8:bd:f9:2b:ea:
8a:d2:43:d9:04:be:78:aa:8d:6d:45:f6:32:ce:c0:
ed:b0:92:88:2b:33:02:ed:e9:f0:87:5f:47:99:b9:
07:bd:d5:a5:a7:d5:e0:67:fa:c8:93:0c:cb:79:b1:
96:9e:a7:bc:00:b3:c6:be:e2:b3:43:49:b7:12:72:
51:7b:6a:37:c4:c5:2c:65:5b:4e:43:51:b9:d1:09:
d6:9b:3a:a6:2e:72:6b:0d:83:71:6f:b8:cc:08:a8:
7f:c6:8b:7b:b5:f0:df:47:56:c7:bd:b4:5c:1f:67:
09:00:a7:4f:c6:96:6b:97:45:1c:32:f0:d2:a7:40:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:45:70:84:F4:4C:5F:77:E7:9C:7E:3E:F8:BC:CD:3A:F0:D9:79
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
d6:cb:67:0f:94:8f:d2:ce:d0:ec:27:ad:46:48:65:67:91:09:
df:3c:82:5f:f7:df:47:36:ff:98:52:f0:53:e2:43:27:d5:c6:
a3:ae:e5:02:7d:af:cf:87:4a:b7:4d:fb:df:19:9e:ef:d6:0d:
44:8c:c7:75:26:ba:2a:de:8b:27:83:82:85:4c:91:da:ea:6b:
5b:c9:5d:fa:d2:66:79:32:1b:fa:8e:d6:0e:57:9d:f9:3d:de:
e4:a9:53:28:26:59:ee:65:66:10:41:fb:ee:67:e8:c3:da:e6:
85:bb:87:e1:79:fe:7f:6a:41:93:cc:1d:62:61:f8:6a:08:6f:
1c:47:80:a0:3a:d4:b7:92:45:e5:17:82:ff:f2:64:73:0c:89:
68:44:d2:69:8b:08:4b:6a:4e:a2:d1:47:54:78:d9:9b:80:d7:
a4:95:01:da:38:10:2e:68:69:eb:9a:0b:0d:4d:99:bc:60:b2:
aa:6a:3e:a2:04:fb:57:78:88:33:bf:da:fd:35:7a:bf:2f:da:
54:0a:34:e6:35:98:8a:7c:74:13:bd:10:26:da:2c:9b:6e:51:
17:d5:9e:1b:98:7c:31:93:cc:82:c9:f1:f0:88:b9:70:40:fb:
ad:01:c7:45:29:cd:52:e1:38:b8:2b:16:2c:5e:a2:66:55:84:
7e:88:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:56 2026 by rpki-client