Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
File: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (raw, json)
Hash identifier: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=
Subject key identifier: 01:C0:E5:50:5C:6B:7F:5F:31:87:D1:01:67:10:E1:F7:DC:90:BE:EA
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 3B4F6E6D638571AABF37FA2B777E88AD5837735F
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
Signing time: Sat 16 Aug 2025 01:48:25 +0000
ROA not before: Sat 16 Aug 2025 01:43:25 +0000
ROA not after: Sat 15 Aug 2026 01:48:25 +0000
asID: 6369
IP address blocks: 2a0a:acc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4f:6e:6d:63:85:71:aa:bf:37:fa:2b:77:7e:88:ad:58:37:73:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Aug 16 01:43:25 2025 GMT
Not After : Aug 15 01:48:25 2026 GMT
Subject: CN=01C0E5505C6B7F5F3187D1016710E1F7DC90BEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:e9:16:3c:13:5b:83:72:71:d3:3f:c0:55:
af:2c:27:c1:c0:39:66:4c:e2:db:40:1d:f6:5a:94:
93:0e:c7:28:6e:f7:50:d0:68:f9:66:20:26:bd:c9:
3f:80:a8:73:24:85:a5:4a:35:45:fe:d3:b9:49:52:
53:5c:a5:8a:0d:0b:3e:c7:4c:c2:07:e3:cd:eb:a3:
48:81:67:0d:9b:61:5d:27:6c:7e:93:6d:66:75:8d:
64:5b:0c:ed:8b:bc:9a:dd:d2:be:a7:36:07:70:18:
05:b0:8c:32:c2:b0:c2:73:6c:a8:e4:df:54:ed:02:
9b:1e:63:5f:73:99:a8:d9:58:3e:f7:04:7b:3e:48:
84:ef:67:1b:72:cc:24:55:4b:36:4c:46:a1:1e:23:
53:cf:8b:91:eb:7d:1b:2d:fb:f5:ed:0a:56:af:c5:
1f:11:4d:e0:2f:ad:10:75:9a:8f:c8:04:77:f1:9c:
6d:33:a4:94:ef:9b:48:97:5b:71:43:ee:36:5c:bd:
75:51:71:db:7e:ab:ea:e4:41:a1:4b:2c:cc:c3:8d:
d6:c1:cc:7e:c3:50:2c:05:24:80:1c:7a:30:2c:d9:
b5:98:b7:aa:d3:3c:47:35:8a:f2:b8:2b:8a:38:be:
e1:ee:a1:a1:fc:dd:75:be:df:14:c3:a1:f3:f2:d4:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C0:E5:50:5C:6B:7F:5F:31:87:D1:01:67:10:E1:F7:DC:90:BE:EA
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:e3:aa:34:ab:a6:12:1e:db:0c:54:5d:1e:0f:e9:0d:d4:d5:
d7:f5:f1:5e:21:dd:1e:28:53:85:f4:55:72:c5:dd:92:05:01:
65:b0:7b:6b:9c:ec:e4:a0:2b:8c:5f:9b:be:46:19:d7:9d:85:
d2:71:89:fc:5a:d7:6c:c0:14:59:9e:0a:39:d5:55:66:e7:d3:
2f:d9:be:88:10:23:24:6a:94:13:04:ba:6a:2f:5d:d0:7f:89:
74:15:0a:b4:54:f9:a8:0f:18:f1:ee:f0:a1:d1:f6:e3:4b:ec:
d8:50:e1:fa:ee:01:f1:f5:ce:6f:83:8e:d7:72:ae:b2:a2:71:
df:44:16:97:bb:b7:41:1b:f7:56:5c:78:db:d6:a4:3c:53:a8:
c4:65:ac:05:3f:f3:2d:2a:fb:79:04:f5:80:b0:b2:2f:10:37:
e4:0c:2e:1e:2c:0c:75:5f:8e:64:97:59:53:a2:cf:04:c7:9b:
a5:70:1c:e7:3b:e9:6c:05:90:86:9e:e1:3b:cf:74:89:c7:1c:
aa:4e:bc:59:6b:b1:3b:6d:88:02:0d:81:c1:98:76:c6:bb:a0:
e1:dc:46:bf:4b:83:ad:46:d9:df:21:3b:62:bb:bf:16:ea:70:
e6:70:be:72:96:d1:66:a2:d8:73:21:e7:2d:75:2b:09:f1:a5:
84:c9:ee:67
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUO09ubWOFcaq/N/ord36IrVg3c18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNTA4MTYwMTQzMjVaFw0yNjA4MTUwMTQ4MjVaMDMxMTAvBgNV
BAMTKDAxQzBFNTUwNUM2QjdGNUYzMTg3RDEwMTY3MTBFMUY3REM5MEJFRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBukWPBNbg3Jx0z/AVa8sJ8HA
OWZM4ttAHfZalJMOxyhu91DQaPlmICa9yT+AqHMkhaVKNUX+07lJUlNcpYoNCz7H
TMIH483ro0iBZw2bYV0nbH6TbWZ1jWRbDO2LvJrd0r6nNgdwGAWwjDLCsMJzbKjk
31TtApseY19zmajZWD73BHs+SITvZxtyzCRVSzZMRqEeI1PPi5HrfRst+/XtClav
xR8RTeAvrRB1mo/IBHfxnG0zpJTvm0iXW3FD7jZcvXVRcdt+q+rkQaFLLMzDjdbB
zH7DUCwFJIAcejAs2bWYt6rTPEc1ivK4K4o4vuHuoaH83XW+3xTDofPy1IghAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUAcDlUFxrf18xh9EBZxDh99yQvuowHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MTNhNjE2MzYzMzAzYTNhMmYzMzMyMmQz
NDM4MjAzZDNlMjAzNjMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoKrMAwDQYJKoZIhvcNAQEL
BQADggEBAArjqjSrphIe2wxUXR4P6Q3U1df18V4h3R4oU4X0VXLF3ZIFAWWwe2uc
7OSgK4xfm75GGdedhdJxifxa12zAFFmeCjnVVWbn0y/ZvogQIyRqlBMEumovXdB/
iXQVCrRU+agPGPHu8KHR9uNL7NhQ4fruAfH1zm+DjtdyrrKicd9EFpe7t0Eb91Zc
eNvWpDxTqMRlrAU/8y0q+3kE9YCwsi8QN+QMLh4sDHVfjmSXWVOizwTHm6VwHOc7
6WwFkIae4TvPdInHHKpOvFlrsTttiAINgcGYdsa7oOHcRr9Lg61G2d8hO2K7vxbq
cOZwvnKW0Wai2HMh5y11KwnxpYTJ7mc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:56 2025 by rpki-client