Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630343a3a2f33322d3438203d3e2033323134.roa
File: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: nusKEflBYlZsq3qWamGM6Ofpb2D4fPE1AvDjPq+MEng=
Subject key identifier: BC:5D:2B:91:B3:4B:64:41:55:6F:0D:0E:D8:C3:3D:6D:40:06:F5:01
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 7548D8777CBD4F02476886061F563BA5F1324FA0
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630343a3a2f33322d3438203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 2a04:6f04::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:48:d8:77:7c:bd:4f:02:47:68:86:06:1f:56:3b:a5:f1:32:4f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=BC5D2B91B34B6441556F0D0ED8C33D6D4006F501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:ce:df:7b:5a:4e:3f:6a:e4:c1:f5:23:55:
23:3c:2a:16:20:46:d4:11:4c:d0:0d:71:17:e3:77:
11:75:f5:08:39:0d:1b:3f:b8:47:27:c4:00:80:df:
f8:28:96:84:67:5f:2a:bb:c6:cd:07:2c:a6:2a:e7:
20:b5:fd:0b:de:cd:c8:2b:67:cc:1e:72:0b:00:bd:
01:ef:b6:b5:4b:a6:be:d3:a2:aa:5b:78:19:36:0f:
b3:58:0f:e3:e1:dd:a6:ea:5e:45:f3:84:9c:f9:3d:
71:82:54:e3:ed:db:7b:93:cd:fb:c7:83:0a:55:0b:
85:58:62:9a:9e:31:6e:be:76:79:f2:eb:9f:40:2d:
33:82:9a:09:d9:28:4a:fc:b2:95:0e:e2:fc:ee:9b:
75:80:cc:07:65:7b:5e:31:62:32:ac:13:39:8d:ff:
67:d7:29:73:86:9b:6d:2e:00:ee:3b:c6:ef:10:fc:
6e:45:69:50:05:ca:26:5c:6f:9d:5e:cd:d2:de:af:
d4:b4:de:6f:6d:83:4e:ea:a9:88:74:e2:53:f2:e0:
8e:9d:1f:26:57:a8:27:71:41:3d:d9:de:f2:bd:6d:
a5:b1:e5:a9:9c:3e:1c:64:e3:ca:64:60:d8:2c:bf:
0b:7f:55:6e:87:f6:fb:4b:11:39:ca:f8:d5:a5:93:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:2B:91:B3:4B:64:41:55:6F:0D:0E:D8:C3:3D:6D:40:06:F5:01
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630343a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f04::/32
Signature Algorithm: sha256WithRSAEncryption
bd:76:cf:e8:57:35:b3:34:ec:68:fe:12:37:2c:72:70:da:47:
30:a1:0a:d6:ef:81:cf:a7:40:10:ac:96:a0:bf:56:a8:37:7d:
e0:1f:33:b2:85:13:cb:fa:d7:59:d1:88:1c:21:7c:5a:7a:e6:
81:cc:1f:03:3e:67:a4:b0:33:44:9b:51:10:0d:e0:5e:72:21:
f7:e5:29:48:b0:70:ce:b7:bb:a4:64:17:cc:e9:51:fc:e0:90:
61:03:a0:de:01:30:04:f7:ae:31:09:49:07:c1:58:a2:c2:90:
cb:af:7a:94:bc:1c:c6:b8:28:fb:74:a6:ef:0b:94:28:68:66:
eb:d2:5b:7f:e6:42:0f:86:56:bc:dd:2c:7a:fd:0a:4f:69:90:
8f:8d:fd:83:c8:65:58:1a:69:2d:d9:1a:78:be:60:11:64:63:
59:9f:a1:2e:04:f6:57:d4:c8:9d:7c:ce:eb:1a:d6:89:81:3b:
28:1e:27:b3:7a:28:62:8d:92:64:b1:ed:c3:37:f4:88:99:5e:
ca:d0:d7:2d:ed:bf:9b:be:04:17:2a:c0:65:af:f7:ae:e7:3e:
b2:21:47:2a:51:c7:d7:65:8d:aa:3d:99:a4:6a:26:d5:37:45:
c8:4b:ef:87:7c:20:0a:5d:b9:47:08:5b:9b:e8:b9:b6:da:98:
1f:14:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:53 2026 by rpki-client