Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323034.roa
File: 326130613a616363303a3a2f32392d3438203d3e2033323034.roa (raw, json)
Hash identifier: /eOwuTvJm53dR1TiGfGcbXv98PrFtCgcEZMT8rq005U=
Subject key identifier: 7A:CF:7C:73:69:C0:C9:B3:DD:28:5E:63:E6:6F:FC:6B:D1:BD:E0:DE
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 4548AA9332D07B11F002610C94B0667C871A3FDE
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323034.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3204
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:48:aa:93:32:d0:7b:11:f0:02:61:0c:94:b0:66:7c:87:1a:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=7ACF7C7369C0C9B3DD285E63E66FFC6BD1BDE0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:34:44:2a:3f:3a:c8:20:ea:3d:38:74:36:
d4:25:4e:ec:26:2c:88:4f:57:99:88:b7:90:de:e2:
71:2e:71:02:1c:c7:3a:27:94:30:b0:9c:18:8b:0a:
6d:28:9c:16:df:d8:5b:37:2b:bd:74:e5:d8:29:30:
c6:be:d1:bd:f2:da:25:df:ef:82:5a:dd:83:3e:69:
90:e6:22:aa:4d:5c:b4:b7:19:39:25:ef:be:3b:07:
e1:86:c4:21:c4:35:2d:44:86:96:aa:3d:7e:6b:e1:
3d:be:33:82:7f:75:dc:5b:b7:6c:80:7e:a8:61:d1:
e1:59:3e:77:5f:5e:64:55:b2:d8:41:9d:2a:7d:77:
a6:4e:3d:17:a2:6f:85:4a:5a:31:fc:13:34:98:2d:
5f:63:29:01:71:ff:dc:a5:11:5c:aa:13:65:d2:97:
20:44:59:89:db:b8:11:38:79:f8:d1:82:8e:8f:2f:
87:b9:2d:e6:8b:a6:a4:57:a4:79:df:82:be:65:3c:
e6:b9:3d:f6:70:35:09:41:70:d9:81:22:70:af:61:
22:90:f1:9d:e1:99:9c:3f:fd:78:6c:b4:2b:e7:ef:
6d:86:8d:a2:6f:e3:c6:af:99:33:38:bf:07:27:34:
50:94:a4:1d:dc:b8:1e:58:c3:a3:db:bd:ca:f5:e0:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:7C:73:69:C0:C9:B3:DD:28:5E:63:E6:6F:FC:6B:D1:BD:E0:DE
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:78:a9:82:3b:3b:8b:48:fb:d0:78:65:29:60:78:05:6a:e3:
6b:9d:b8:1f:39:83:ce:07:7f:d5:0c:32:dc:85:1d:7d:61:65:
1c:96:4f:2d:8e:8a:4b:a5:d6:93:21:86:d0:26:83:13:33:e3:
c3:2e:ee:30:4e:60:c9:cb:c2:f2:a1:e4:ae:6c:84:1f:b2:99:
9d:37:ee:eb:cc:42:43:42:82:fd:8f:d0:ec:f1:14:6e:7c:ee:
6a:7f:26:6a:eb:20:44:35:9b:3e:d3:1c:7e:77:4c:7a:b8:47:
b7:f2:48:26:78:ef:17:05:88:20:4f:15:4f:d9:25:b5:23:c9:
da:bc:29:c9:df:a1:38:18:e3:03:80:84:93:14:47:22:78:51:
94:d8:c3:c5:94:5c:7b:70:1a:26:9a:e2:f9:86:43:1b:df:e5:
e1:3c:ad:00:15:94:11:1e:f8:17:92:e8:40:25:06:72:45:6b:
43:01:54:25:27:78:55:35:47:0f:ad:1d:79:71:b7:83:f8:50:
09:4c:b2:cf:9a:22:09:3c:56:00:8c:0b:c9:37:5e:1a:1e:90:
06:80:b0:31:72:e6:20:22:88:1f:d1:0d:a4:88:86:dc:84:af:
c2:7a:55:ab:4c:55:7f:83:e4:fd:f9:b5:ae:b6:28:3c:be:92:
c0:dd:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:36 2026 by rpki-client