Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630363a3a2f33322d3438203d3e2033323134.roa
File: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: 0s8TvNmzwhtwb2FXnxfRfActF5xyWSBShdOq67AZFbc=
Subject key identifier: FE:0A:F1:A2:9F:96:0B:16:05:1C:19:8D:8B:EA:9D:DD:9F:51:BD:58
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 409357F659F3E3E408F92995A89E6696A5FE041D
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630363a3a2f33322d3438203d3e2033323134.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3214
IP address blocks: 2a04:6f06::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:93:57:f6:59:f3:e3:e4:08:f9:29:95:a8:9e:66:96:a5:fe:04:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=FE0AF1A29F960B16051C198D8BEA9DDD9F51BD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:6c:f0:17:b8:b4:54:b1:e6:f6:19:94:27:
a2:6b:48:62:89:f2:47:ba:e6:c8:24:20:09:a3:28:
c3:6c:33:0a:80:52:dc:3a:6f:ae:01:75:0c:90:01:
18:f4:5f:1b:be:89:b1:46:1f:6f:2a:40:85:59:d1:
37:99:b4:03:d8:20:b7:dc:5e:a8:32:cd:1e:f7:9c:
f4:eb:9b:27:6f:35:d7:ab:7e:98:8f:c8:96:3a:f7:
9b:8d:57:f2:20:73:49:09:94:a6:99:3d:e3:5b:55:
9c:33:cb:e3:30:da:ec:fa:81:94:8a:33:ef:88:df:
1d:65:80:07:49:e5:c8:4f:b9:1a:37:8f:71:1d:36:
5d:99:e4:19:3a:6c:77:35:54:5a:94:b2:5c:c1:a0:
01:b5:2c:7a:d9:6e:55:fb:ae:52:82:52:01:c3:14:
0b:bc:17:e1:67:d5:b1:68:05:be:0a:0c:0b:d2:ab:
31:40:83:33:f7:64:ac:b0:12:b4:b3:f0:0d:f6:24:
c1:ed:f2:98:15:3e:ea:a6:e1:19:a6:2f:49:46:75:
de:d8:3d:d9:fb:e0:38:32:14:20:dc:55:58:17:2f:
bd:1a:fa:82:f9:ea:68:91:ab:e7:29:b1:ef:6f:4b:
b4:c4:df:c2:65:eb:75:5c:56:6f:ed:00:60:58:42:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:F1:A2:9F:96:0B:16:05:1C:19:8D:8B:EA:9D:DD:9F:51:BD:58
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630363a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f06::/32
Signature Algorithm: sha256WithRSAEncryption
81:80:60:65:67:a5:d6:cf:b3:75:24:33:37:21:25:50:ed:ca:
50:40:9d:76:d3:3d:d8:9b:e7:cc:e3:ba:72:bd:59:94:3d:e9:
6f:34:ab:20:c3:09:35:9c:b4:69:92:f6:05:06:e2:58:33:a0:
7a:67:6e:d7:a3:2b:68:44:c5:47:9f:d7:94:38:71:bd:8c:86:
35:83:ca:77:f1:57:85:5d:5e:4e:28:ea:f3:7f:08:58:9e:c1:
09:6d:fb:94:53:0f:ba:66:89:43:86:4a:51:37:fa:00:b6:04:
47:82:e5:4e:1a:a8:c9:d0:ea:1e:dc:fb:2d:02:7c:9d:68:fd:
d0:a0:47:8e:76:9c:fb:d4:97:47:6c:7a:7a:b6:81:43:19:f1:
63:42:0d:e7:46:6f:c4:07:b9:99:27:c3:e6:a6:bf:fb:35:3d:
71:cb:0e:06:e7:be:19:bc:a3:f7:c9:ab:ee:67:89:3c:9b:f6:
43:78:8c:da:e9:14:c4:77:dc:37:dd:83:da:a3:4a:12:d4:b0:
0a:db:6e:4c:87:4c:a7:ed:d7:00:fd:7c:ea:7a:a1:77:e5:b1:
20:58:cc:50:b8:72:58:bb:05:80:10:50:fc:c6:59:61:26:3d:
84:5e:f8:9f:1d:ba:5c:63:3e:07:83:f5:e9:44:4a:96:a3:d5:
b9:83:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:43 2026 by rpki-client