Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
File: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (raw, json)
Hash identifier: IqAInVO0FFXIDqDKV6CAlEPy/93BUeQSFxy/ANzrEKg=
Subject key identifier: A3:F5:57:AE:9C:3F:17:19:A2:E4:79:6C:F4:86:E5:01:58:69:A3:AB
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 58B26380DD8BB688CDC8D6F6886170AD8E098615
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 6369
IP address blocks: 2a0a:acc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b2:63:80:dd:8b:b6:88:cd:c8:d6:f6:88:61:70:ad:8e:09:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=A3F557AE9C3F1719A2E4796CF486E5015869A3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e7:8b:4a:38:22:f8:99:b4:64:18:2c:66:2b:
67:d4:5a:72:8f:cd:ad:b8:42:05:9b:e5:c4:b7:f0:
4d:50:b4:b8:c1:45:77:89:2b:81:92:52:60:48:25:
7b:5a:c6:80:bc:40:54:41:c1:bd:cd:e1:2d:0d:67:
cd:8d:f3:c9:31:dd:ad:dc:1c:7e:f0:08:96:8b:e0:
9a:13:40:5e:28:4b:50:75:e5:ef:2d:bd:9b:d7:0b:
fc:01:02:cd:40:50:81:a4:5b:41:ba:8a:da:ee:0d:
9c:0c:4b:9c:95:8d:8f:d7:06:1a:bf:e6:26:13:a5:
ba:7e:27:a3:4c:90:35:1f:58:8d:36:65:ad:2b:d2:
23:30:1d:35:93:c5:69:5b:6e:64:54:44:a5:e7:e8:
3e:bf:51:ab:ef:0b:24:e7:ce:b8:ba:5d:45:f6:04:
db:6e:39:c2:d1:32:14:11:d7:f5:65:6c:6c:59:b2:
aa:87:e0:ca:87:8c:07:f5:7a:45:13:ce:23:6d:07:
f8:68:79:f5:4e:12:5d:9c:42:6d:7f:e9:90:a2:a9:
76:e3:2d:e7:96:ea:e4:cf:e1:67:3f:97:2d:92:6a:
56:ae:61:74:12:ca:c5:a9:04:64:96:a2:15:aa:d3:
b3:86:1c:36:a6:e5:93:eb:cd:8b:21:c7:1d:d9:15:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:57:AE:9C:3F:17:19:A2:E4:79:6C:F4:86:E5:01:58:69:A3:AB
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
cb:26:29:21:35:10:ce:6a:5b:89:4c:8b:93:7b:74:0d:53:ed:
72:5a:6e:26:1c:b2:89:70:01:6f:d3:59:d2:09:17:d8:12:a0:
36:98:a7:60:96:4a:98:ed:00:61:2d:80:ba:ac:98:e7:05:cf:
78:e7:e1:37:15:4f:7e:ae:99:d8:37:28:c4:c9:e4:6a:0e:e1:
0a:12:59:02:a1:d8:5d:d6:cd:5b:7d:e6:e0:0c:41:b6:6d:b5:
5d:81:4d:b6:ec:09:c9:ec:c7:a9:6a:63:ba:7e:b3:98:ff:18:
8e:04:98:52:97:02:43:31:80:0b:71:f8:be:fb:c6:2e:26:c0:
7f:ba:06:6c:0b:6a:24:26:cb:6f:ea:8d:31:41:a6:55:01:dd:
d2:b8:ad:53:ee:30:03:f6:87:c4:1d:06:ab:ef:28:d9:83:df:
88:ac:f3:7d:83:13:29:b6:e1:b8:6b:f9:1c:bf:ec:b1:3d:17:
35:41:54:d5:5a:5d:18:b3:37:6e:43:75:fb:23:15:bb:19:c2:
09:c2:17:10:a9:cb:e1:81:80:5c:df:4b:d9:df:f6:05:aa:2e:
68:0e:c3:f0:32:26:d0:ac:7d:b9:9f:ee:53:bd:a6:f0:04:3f:
ec:23:e3:b1:c4:d8:a7:8c:40:93:5c:d5:a3:b7:10:3e:07:41:
7b:72:a4:07
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUWLJjgN2LtojNyNb2iGFwrY4JhhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MTgwMTUxMTZaFw0yNzA3MTcwMTU2MTZaMDMxMTAvBgNV
BAMTKEEzRjU1N0FFOUMzRjE3MTlBMkU0Nzk2Q0Y0ODZFNTAxNTg2OUEzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx54tKOCL4mbRkGCxmK2fUWnKP
za24QgWb5cS38E1QtLjBRXeJK4GSUmBIJXtaxoC8QFRBwb3N4S0NZ82N88kx3a3c
HH7wCJaL4JoTQF4oS1B15e8tvZvXC/wBAs1AUIGkW0G6itruDZwMS5yVjY/XBhq/
5iYTpbp+J6NMkDUfWI02Za0r0iMwHTWTxWlbbmRURKXn6D6/UavvCyTnzri6XUX2
BNtuOcLRMhQR1/VlbGxZsqqH4MqHjAf1ekUTziNtB/hoefVOEl2cQm1/6ZCiqXbj
LeeW6uTP4Wc/ly2SalauYXQSysWpBGSWohWq07OGHDam5ZPrzYshxx3ZFUaNAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUo/VXrpw/Fxmi5Hls9IblAVhpo6swHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MTNhNjE2MzYzMzAzYTNhMmYzMzMyMmQz
NDM4MjAzZDNlMjAzNjMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoKrMAwDQYJKoZIhvcNAQEL
BQADggEBAMsmKSE1EM5qW4lMi5N7dA1T7XJabiYcsolwAW/TWdIJF9gSoDaYp2CW
SpjtAGEtgLqsmOcFz3jn4TcVT36umdg3KMTJ5GoO4QoSWQKh2F3WzVt95uAMQbZt
tV2BTbbsCcnsx6lqY7p+s5j/GI4EmFKXAkMxgAtx+L77xi4mwH+6BmwLaiQmy2/q
jTFBplUB3dK4rVPuMAP2h8QdBqvvKNmD34is832DEym24bhr+Ry/7LE9FzVBVNVa
XRizN25DdfsjFbsZwgnCFxCpy+GBgFzfS9nf9gWqLmgOw/AyJtCsfbmf7lO9pvAE
P+wj47HE2KeMQJNc1aO3ED4HQXtypAc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:01:39 2026 by rpki-client