Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630333a3a2f33322d3438203d3e2033323134.roa
File: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: PMFno4A4sm35+bidtOMjX9UgR4Y+VaOTFMjWUM4TbVw=
Subject key identifier: 23:A9:D3:7F:0B:E7:05:6C:B1:3D:6A:E2:A6:3A:02:C2:53:77:1F:C0
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 084EFB5F6BEB514E01FB8B3622257EE675E955F4
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630333a3a2f33322d3438203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 2a04:6f03::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4e:fb:5f:6b:eb:51:4e:01:fb:8b:36:22:25:7e:e6:75:e9:55:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=23A9D37F0BE7056CB13D6AE2A63A02C253771FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:72:5b:fc:87:a5:be:07:1e:69:e4:df:a0:
0d:ae:c5:9a:b8:8b:ba:f2:66:c9:ed:93:15:77:cb:
c5:79:8c:01:e0:7a:e8:a9:82:43:30:fc:48:39:d7:
f7:4c:b7:88:a6:6c:bc:a2:95:ce:a0:94:30:ab:f5:
99:39:8a:46:7c:4b:80:8a:9c:d7:24:97:a3:b4:d5:
d2:a8:33:be:8f:16:e0:87:ba:d4:7d:cd:5b:f5:51:
2b:59:a6:78:5b:23:57:af:64:34:c4:26:73:6c:f2:
48:5a:84:35:e1:97:0a:c8:08:7e:f7:03:7e:14:54:
ff:fe:27:6b:e2:68:d7:2f:7e:80:1a:9a:66:35:a9:
0e:dc:55:ec:7f:e6:9e:a7:ca:2d:50:99:91:e0:fe:
ee:f7:6f:f5:8c:28:61:07:2f:05:e2:23:5a:c2:f5:
93:f3:03:58:84:8d:9c:7c:f2:56:e2:bc:51:96:7c:
57:5e:30:93:7c:a3:66:4d:90:21:71:8e:c4:b5:cf:
27:e4:e7:92:bb:fd:64:f0:cd:c6:f0:de:ad:5e:3e:
fc:f4:99:01:8c:74:e6:64:09:3a:86:a2:8f:89:da:
b7:f4:c4:41:59:fe:05:8c:c6:b1:58:97:8f:98:56:
e8:30:1c:b3:2e:a4:ea:e4:c3:0f:47:24:11:ed:8b:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:D3:7F:0B:E7:05:6C:B1:3D:6A:E2:A6:3A:02:C2:53:77:1F:C0
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630333a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f03::/32
Signature Algorithm: sha256WithRSAEncryption
d0:56:5a:80:1a:3f:20:e3:2a:c0:3c:da:bd:ae:2c:1b:65:80:
e7:85:84:4f:0d:61:36:ef:a4:68:79:37:36:ab:bd:6e:bb:89:
ac:52:ac:b1:1a:9d:a9:37:c2:2b:90:91:17:4a:26:9f:54:ac:
36:e7:c7:fb:a7:ca:99:9e:64:8f:ba:49:f3:5e:a5:cb:4d:da:
78:72:a7:ea:fd:df:f7:d5:0b:f5:08:16:db:3e:44:87:26:cc:
84:96:94:0e:50:b7:1f:fe:f1:2a:d2:9f:29:55:20:80:12:7d:
8b:5d:f2:a7:72:5d:04:67:db:95:45:45:dc:ff:64:c1:21:53:
d2:e3:43:32:08:af:20:0f:06:a8:f4:3b:98:d3:05:0f:33:99:
8e:5e:ee:70:07:e9:6a:7f:00:7b:b0:76:f6:b5:51:31:a7:fe:
77:18:76:48:c0:12:87:76:c5:bf:b2:12:8c:b2:c9:9b:60:c6:
3a:2e:18:1f:a5:f9:af:ac:27:a0:8c:4f:11:38:63:68:1a:94:
c4:a4:a4:b2:54:d5:11:c3:d4:32:e5:f5:12:f0:81:de:6c:28:
55:af:55:65:b4:35:c8:32:e3:b6:fa:46:62:52:0f:eb:cc:43:
90:8b:fc:58:3a:2f:84:8e:4c:00:69:f2:46:de:c9:8c:bd:ed:
a5:c5:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:01 2026 by rpki-client