Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630323a3a2f33322d3438203d3e2033323134.roa
File: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: SfFfuNNPQlavztH7YnKxYx7qO8ETr6huEG878l2ezK4=
Subject key identifier: EB:9B:37:C7:BA:B0:8D:62:A1:C3:F1:1D:1E:9B:D4:0E:69:91:83:B1
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 37ECBC7AEEE5CCE80B7369326186EAC2DFF75D9C
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630323a3a2f33322d3438203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 2a04:6f02::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ec:bc:7a:ee:e5:cc:e8:0b:73:69:32:61:86:ea:c2:df:f7:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=EB9B37C7BAB08D62A1C3F11D1E9BD40E699183B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:bf:f7:23:9f:68:f2:5f:d6:99:bb:d4:86:
f0:cd:3b:c2:3b:73:be:de:e1:43:06:01:fe:73:af:
d6:3e:88:ff:1b:2f:82:40:c2:32:60:51:bb:f5:12:
49:9a:7b:06:1f:18:16:83:59:a7:22:53:1f:f0:bc:
88:ad:fe:49:e0:2b:f7:19:b8:a1:e4:4a:90:27:7c:
7d:c2:bb:8b:d3:d7:0e:5f:7b:3f:03:2c:51:3a:a4:
3c:dd:49:b3:44:04:c6:4b:14:f8:8d:15:9a:dc:f6:
24:16:30:06:ce:c4:19:6c:ae:64:6a:51:16:02:d1:
03:34:95:cc:ec:98:41:40:91:38:dc:e5:2a:3a:aa:
ab:1b:ba:0f:97:eb:f4:af:c2:ca:7f:15:15:3d:25:
04:b7:9a:b6:e3:28:6a:73:bc:33:04:e9:68:7a:fa:
16:a5:f1:c6:61:fa:23:78:e9:cf:16:43:02:9c:6b:
4f:a5:8f:9b:39:05:04:c1:0a:e8:0b:fa:f1:6e:a2:
a0:df:18:82:5e:c9:ce:27:a5:43:23:4d:47:1f:83:
68:97:21:a2:62:60:5b:b6:0f:ae:f2:86:ae:a1:ac:
b1:f2:d4:7d:61:47:75:b3:e4:f7:17:d3:bd:c7:a5:
0c:b3:d9:1d:a1:05:c2:0b:de:78:08:05:2d:a4:82:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:37:C7:BA:B0:8D:62:A1:C3:F1:1D:1E:9B:D4:0E:69:91:83:B1
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630323a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f02::/32
Signature Algorithm: sha256WithRSAEncryption
2a:8c:6c:86:3f:64:95:ce:2f:1c:d9:dc:b2:6e:97:6e:c1:cd:
21:75:51:51:fd:f9:c7:36:a5:4b:8a:5d:d5:9f:f8:50:00:d9:
0b:cd:f1:8e:21:ae:05:c6:53:17:2e:e4:cf:9e:58:e9:cd:29:
94:be:d6:27:ce:b5:cb:73:8a:3c:38:d8:7a:47:b3:a4:e2:8d:
55:1d:2b:af:03:d4:4f:1b:52:3c:d5:e3:84:6a:d2:4a:39:45:
e3:25:5e:b0:70:4c:4e:fb:9a:42:03:e8:6c:49:3f:de:19:89:
17:1e:2d:cb:29:37:ec:4f:8a:06:19:08:66:18:58:0d:37:ef:
8c:68:7d:f1:fb:08:b3:19:ef:22:b1:8b:18:b2:3a:71:5b:71:
af:1b:83:0a:c1:54:65:23:b8:25:6b:b2:e7:95:9b:73:ad:56:
3b:4c:4d:84:b6:93:5b:d7:81:a0:bc:e6:1e:d5:a4:2e:72:df:
b9:5a:77:cc:29:05:48:29:2e:30:47:6b:f3:3d:91:1c:9f:2a:
05:40:67:ca:be:59:eb:73:7e:15:28:12:19:72:02:51:6e:ba:
f4:b2:8e:36:af:7a:9d:56:8f:7e:37:88:ba:63:c8:64:46:2b:
02:0e:8e:23:46:94:7e:bb:7e:c4:67:94:25:0f:49:b4:7c:34:
8a:d6:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:48 2026 by rpki-client