Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa
File: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (raw, json)
Hash identifier: 8e9IAadJHgkU4wcn3vnChsED5idWl8YMaA4c2lzbj6c=
Subject key identifier: 68:B5:BB:4C:B6:84:6C:9A:50:47:C1:83:09:8B:87:3B:86:8B:37:CE
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 0F00094AF6D59EB4A164557B276A8F0BD6B293B4
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 35537
IP address blocks: 2a04:6f01:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:00:09:4a:f6:d5:9e:b4:a1:64:55:7b:27:6a:8f:0b:d6:b2:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=68B5BB4CB6846C9A5047C183098B873B868B37CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:e4:8c:95:e5:9a:b9:8e:1a:4e:82:21:f1:
fa:b3:82:97:56:ab:bd:cc:34:48:dd:e8:3c:28:01:
97:e9:5f:c4:25:e8:d6:4e:b9:28:f4:b3:15:f5:45:
74:2c:99:a7:b0:7b:58:f4:ae:2c:f9:94:6b:02:5e:
63:0a:91:34:ae:7a:25:a7:e8:c8:9d:d1:92:1b:54:
51:89:de:68:a7:a1:9d:9b:15:f5:ff:7a:19:b0:c2:
ad:e7:b3:c2:c9:55:63:42:32:70:ec:e0:f4:64:04:
78:9a:3b:68:95:b1:f7:13:e4:39:2c:2d:b8:4a:4c:
e0:f2:cc:f8:0d:8f:7b:80:32:5e:14:3a:17:b7:ee:
f2:35:84:e2:72:23:04:47:80:ec:0b:07:95:47:6d:
c6:fb:d6:4c:1b:b1:89:f8:1f:37:bf:8d:e8:22:1f:
fd:5d:b1:fd:c9:ee:d5:b8:c8:23:07:1a:65:72:f5:
3a:c6:64:8f:dd:cb:ae:88:96:62:1d:70:f0:1f:11:
64:d3:e8:85:11:1c:53:cb:4a:f7:3f:bc:f6:ed:96:
2f:fd:bc:ca:2c:15:76:a4:c4:0d:7d:fd:64:a2:81:
21:4b:22:ef:db:28:b1:fd:3b:6a:14:22:ee:59:7a:
70:71:9e:93:93:92:07:08:5b:b0:07:6d:d6:97:4d:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:BB:4C:B6:84:6C:9A:50:47:C1:83:09:8B:87:3B:86:8B:37:CE
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f01:1::/48
Signature Algorithm: sha256WithRSAEncryption
84:8f:37:4b:59:20:3b:bc:3a:5e:07:bb:5c:b1:58:31:c0:8e:
fa:d4:18:16:b3:90:a6:af:f5:5e:4c:37:22:07:86:39:fd:51:
73:ea:41:09:31:d4:18:a0:be:ef:cb:a3:52:89:46:1e:03:cd:
48:cb:e5:a3:d9:c8:a4:6e:1a:76:c6:8c:b6:35:e3:3d:3b:3d:
21:ca:f8:a7:0e:a0:22:72:ae:65:20:89:9c:18:dd:0f:b3:fb:
2c:e3:4b:d2:b6:53:8c:0c:cc:5f:ea:b0:8e:d8:0d:1a:d2:24:
f9:9f:cb:b6:23:d8:68:e1:11:15:3e:35:52:1c:0e:ca:88:15:
53:97:3c:3e:ef:dc:f8:e7:04:22:27:1c:0f:ed:bd:f5:0b:56:
6f:99:0d:bf:36:97:0e:6e:52:f6:0c:30:8e:54:8c:4e:db:74:
ea:ed:cc:05:b1:34:7d:b6:75:f0:fa:83:23:7c:78:36:3d:42:
73:13:3c:fa:a4:ca:46:a5:39:36:3b:42:64:25:f1:79:f6:84:
c8:31:bc:d5:c5:3a:33:bf:b4:28:60:90:fe:e9:95:a2:54:12:
39:fd:84:3e:c3:29:6f:1d:b8:5d:78:a8:50:27:1f:4f:83:6e:
3a:b1:3f:36:76:09:58:c8:e6:24:04:6f:15:3e:2e:9a:d8:62:
a1:38:a8:4d
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUDwAJSvbVnrShZFV7J2qPC9ayk7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MTgwMTUxMTZaFw0yNzA3MTcwMTU2MTZaMDMxMTAvBgNV
BAMTKDY4QjVCQjRDQjY4NDZDOUE1MDQ3QzE4MzA5OEI4NzNCODY4QjM3Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdeSMleWauY4aToIh8fqzgpdW
q73MNEjd6DwoAZfpX8Ql6NZOuSj0sxX1RXQsmaewe1j0riz5lGsCXmMKkTSueiWn
6Mid0ZIbVFGJ3minoZ2bFfX/ehmwwq3ns8LJVWNCMnDs4PRkBHiaO2iVsfcT5Dks
LbhKTODyzPgNj3uAMl4UOhe37vI1hOJyIwRHgOwLB5VHbcb71kwbsYn4Hze/jegi
H/1dsf3J7tW4yCMHGmVy9TrGZI/dy66IlmIdcPAfEWTT6IURHFPLSvc/vPbtli/9
vMosFXakxA19/WSigSFLIu/bKLH9O2oUIu5ZenBxnpOTkgcIW7AHbdaXTWDZAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUaLW7TLaEbJpQR8GDCYuHO4aLN84wHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzAzNDNhMzY2NjMwMzEzYTMxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzNTM1MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoEbwEAATANBgkq
hkiG9w0BAQsFAAOCAQEAhI83S1kgO7w6Xge7XLFYMcCO+tQYFrOQpq/1Xkw3IgeG
Of1Rc+pBCTHUGKC+78ujUolGHgPNSMvlo9nIpG4adsaMtjXjPTs9Icr4pw6gInKu
ZSCJnBjdD7P7LONL0rZTjAzMX+qwjtgNGtIk+Z/LtiPYaOERFT41UhwOyogVU5c8
Pu/c+OcEIiccD+299QtWb5kNvzaXDm5S9gwwjlSMTtt06u3MBbE0fbZ18PqDI3x4
Nj1CcxM8+qTKRqU5NjtCZCXxefaEyDG81cU6M7+0KGCQ/umVolQSOf2EPsMpbx24
XXioUCcfT4NuOrE/NnYJWMjmJARvFT4umthioTioTQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:36:31 2026 by rpki-client