Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323134.roa
File: 326130613a616363303a3a2f32392d3438203d3e2033323134.roa (raw, json)
Hash identifier: RwFAOB3AcBi/uQ1xwQwRCSceZy3me4GZUl5MdaQlusM=
Subject key identifier: 67:8C:A1:D5:B5:CF:4C:9F:80:EB:FE:1D:89:A5:18:8B:C7:01:87:9D
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 60BF3268035A25477CCE4D16F6318277779CB872
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323134.roa
Signing time: Thu 02 Jul 2026 10:18:39 +0000
ROA not before: Thu 02 Jul 2026 10:13:39 +0000
ROA not after: Thu 01 Jul 2027 10:18:39 +0000
asID: 3214
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bf:32:68:03:5a:25:47:7c:ce:4d:16:f6:31:82:77:77:9c:b8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:13:39 2026 GMT
Not After : Jul 1 10:18:39 2027 GMT
Subject: CN=678CA1D5B5CF4C9F80EBFE1D89A5188BC701879D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:84:8f:61:37:08:da:ec:10:ea:69:2d:dc:
8e:66:d6:7a:d1:c6:b4:4b:77:f8:72:ac:8c:3c:97:
a9:70:12:fb:d9:5a:cd:1b:1f:51:92:63:4b:b6:e1:
0a:66:9b:ed:56:12:b9:5a:db:7d:41:6c:57:e2:53:
4f:b9:3f:7f:dd:46:15:0c:1c:54:22:2a:68:ba:61:
44:cf:05:49:a0:ad:54:4e:ff:fa:f1:bd:b3:96:51:
6b:aa:ba:7d:9c:8f:09:11:72:16:33:d7:95:39:90:
1d:37:f3:36:db:1e:54:b0:87:04:6c:74:31:3b:9e:
cc:d1:76:34:63:a2:a6:bd:f1:ac:a7:26:16:33:5c:
5e:15:26:55:80:64:a3:0d:1e:bb:5e:6d:5d:9a:63:
e4:eb:5d:73:48:3b:03:7a:6d:7a:0a:ac:27:8d:9c:
9f:7c:be:27:dd:5d:0b:b0:80:47:bc:97:c5:51:dd:
38:99:0d:58:34:8d:2d:cc:9d:64:4c:8c:4e:f0:41:
10:5e:8d:b9:cf:7f:04:54:9f:de:35:63:4f:0e:9f:
22:81:de:44:30:63:b8:b7:28:41:78:ca:d4:72:68:
cd:55:45:87:b9:14:26:2c:d1:90:8c:d2:58:eb:04:
27:3d:d1:a7:a6:60:f5:73:af:a7:fb:31:eb:d5:f1:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:A1:D5:B5:CF:4C:9F:80:EB:FE:1D:89:A5:18:8B:C7:01:87:9D
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:5c:a7:02:d4:3a:a2:e3:c1:2c:86:06:f2:13:80:03:e4:34:
f8:58:d7:81:40:97:0b:79:29:25:4c:6c:d1:90:aa:5c:67:ad:
f1:04:80:21:50:fd:23:dc:c8:a6:2d:a9:48:39:42:18:be:bc:
42:71:52:3b:1b:04:fe:2d:ab:06:54:21:2d:e3:44:c8:7c:5b:
8c:6b:44:14:57:15:07:2d:97:1c:47:14:58:8e:fc:c0:7c:71:
d9:4a:d6:22:10:76:c1:8c:03:a3:2c:d8:75:e8:22:4b:16:bc:
c3:e9:15:f1:eb:52:27:04:af:ab:10:ea:8d:dc:54:ab:94:f5:
f4:36:54:92:15:84:5e:9a:24:5d:cb:91:a5:f0:95:3e:37:51:
58:45:78:81:21:0e:7b:cc:28:19:64:06:0b:47:2e:a5:e8:91:
e0:8c:81:a1:cc:16:6c:ce:df:2d:b8:c7:a0:a6:21:cf:99:91:
c3:2f:65:10:c4:2c:49:75:7e:5d:66:c7:29:c7:e1:7a:ce:0a:
5f:0e:ef:75:8e:a8:08:7b:ee:01:70:e4:f3:46:3e:ba:d8:ba:
88:b8:e1:bf:7e:2c:00:ed:b2:ac:f4:16:88:94:27:62:db:c9:
f6:6d:aa:82:af:f1:f0:7c:c4:a5:20:e0:24:e3:ca:94:be:25:
b3:5c:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:39 2026 by rpki-client