Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323538.roa
File: 326130613a616363303a3a2f32392d3438203d3e2033323538.roa (raw, json)
Hash identifier: IZ7TXXWjfjyzuIH9KAMFiw02DUEH+vi5y4jG1/TsbME=
Subject key identifier: 8D:05:4C:0B:B1:FA:6F:CB:B2:35:06:B3:BA:5D:FB:E4:08:80:97:6C
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 0E6FF92D64A91B9BA50F58307083B3FA3E3F3090
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323538.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3258
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6f:f9:2d:64:a9:1b:9b:a5:0f:58:30:70:83:b3:fa:3e:3f:30:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=8D054C0BB1FA6FCBB23506B3BA5DFBE40880976C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:da:5d:65:49:66:3f:3c:66:c3:87:7f:df:
5c:69:33:d7:8d:6a:10:34:ce:58:6c:d7:06:62:17:
5f:4b:c0:8e:b1:68:ce:87:0b:ce:f2:cf:b6:9a:be:
6c:9b:db:c5:9b:51:d0:f4:d8:59:77:54:93:68:e8:
92:66:59:3b:86:b1:7d:01:bc:a1:16:71:05:dc:21:
83:36:4e:b9:5b:88:7c:a5:f4:11:f0:22:a9:1b:32:
dc:3c:a3:56:85:18:51:93:6f:55:ff:93:7e:fb:77:
f2:8f:1b:4b:72:99:14:29:27:ac:ea:11:8e:0b:a7:
d1:0c:0a:9d:74:d4:4c:34:b8:46:02:31:42:19:f4:
2f:91:59:e4:59:b6:16:a6:9a:b8:cf:97:ba:a9:77:
00:7e:a8:5b:a1:02:b8:27:ed:d0:3e:82:8b:7c:32:
9e:8e:93:f3:1e:07:db:0d:49:8c:9a:3d:e5:cc:29:
0d:28:a4:91:e4:0c:1b:ce:f3:89:9d:88:c1:b5:9d:
8b:4b:da:22:18:62:01:7b:6c:97:66:a3:2a:79:7b:
88:47:61:a4:8c:c4:2a:5d:d3:6e:ed:3e:73:b5:a6:
7c:c0:70:2e:eb:23:70:0e:aa:4f:f0:f2:9f:24:16:
49:ab:6f:9d:e3:cf:89:54:52:aa:ff:7f:75:32:ac:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:4C:0B:B1:FA:6F:CB:B2:35:06:B3:BA:5D:FB:E4:08:80:97:6C
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:d5:9a:d5:03:c0:eb:04:6b:a5:62:0e:5b:0b:ca:63:5a:93:
ea:db:29:16:cf:b1:b8:67:aa:4e:2f:d0:86:32:ae:9b:50:d7:
3e:4c:bc:d9:62:d2:2a:54:9b:55:cc:97:77:9f:eb:38:e4:67:
25:6d:a5:93:16:3b:8f:13:51:78:ea:43:3c:00:43:eb:99:14:
8d:73:d6:fd:63:4f:b7:90:cf:81:cc:e6:11:2a:1e:03:dc:3f:
b7:c3:f0:52:7a:a5:fe:3e:c2:7b:f7:94:a0:3f:b3:a1:ea:14:
72:67:99:c6:77:3e:6c:00:05:a7:2d:94:18:3b:7b:40:12:23:
42:c3:0c:7c:4c:64:77:24:15:a3:28:16:54:b9:a2:7d:d5:e6:
54:66:9d:60:21:61:74:7a:99:1a:8c:4c:f7:ef:07:9e:29:76:
41:d1:d2:6d:e3:d4:f1:6f:32:7d:e7:4d:2d:91:21:8c:8d:2e:
35:fd:77:ec:5a:93:a0:e2:bc:c1:5c:86:32:dc:75:96:1e:f1:
e1:a5:35:d4:80:37:3e:bc:e1:a9:27:56:0d:e4:c5:7d:f8:fa:
da:89:e4:5b:34:9b:13:22:f7:a6:d2:d7:d5:6b:08:0b:07:33:
d7:e7:52:38:97:ac:63:a7:86:ce:25:e6:ac:6f:6b:50:fe:8d:
37:11:00:e6
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUDm/5LWSpG5ulD1gwcIOz+j4/MJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDMwNDhaFw0yNzA3MDExMDM1NDhaMDMxMTAvBgNV
BAMTKDhEMDU0QzBCQjFGQTZGQ0JCMjM1MDZCM0JBNURGQkU0MDg4MDk3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqd9pdZUlmPzxmw4d/31xpM9eN
ahA0zlhs1wZiF19LwI6xaM6HC87yz7aavmyb28WbUdD02Fl3VJNo6JJmWTuGsX0B
vKEWcQXcIYM2TrlbiHyl9BHwIqkbMtw8o1aFGFGTb1X/k377d/KPG0tymRQpJ6zq
EY4Lp9EMCp101Ew0uEYCMUIZ9C+RWeRZthammrjPl7qpdwB+qFuhArgn7dA+got8
Mp6Ok/MeB9sNSYyaPeXMKQ0opJHkDBvO84mdiMG1nYtL2iIYYgF7bJdmoyp5e4hH
YaSMxCpd027tPnO1pnzAcC7rI3AOqk/w8p8kFkmrb53jz4lUUqr/f3UyrKQxAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUjQVMC7H6b8uyNQazul375AiAl2wwHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MTNhNjE2MzYzMzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzMzMyMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoKrMAwDQYJKoZIhvcNAQEL
BQADggEBABvVmtUDwOsEa6ViDlsLymNak+rbKRbPsbhnqk4v0IYyrptQ1z5MvNli
0ipUm1XMl3ef6zjkZyVtpZMWO48TUXjqQzwAQ+uZFI1z1v1jT7eQz4HM5hEqHgPc
P7fD8FJ6pf4+wnv3lKA/s6HqFHJnmcZ3PmwABactlBg7e0ASI0LDDHxMZHckFaMo
FlS5on3V5lRmnWAhYXR6mRqMTPfvB54pdkHR0m3j1PFvMn3nTS2RIYyNLjX9d+xa
k6DivMFchjLcdZYe8eGlNdSANz684aknVg3kxX34+tqJ5Fs0mxMi96bS19VrCAsH
M9fnUjiXrGOnhs4l5qxva1D+jTcRAOY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:53 2026 by rpki-client