Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363313a3a2f33322d3438203d3e2033323538.roa
File: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (raw, json)
Hash identifier: x7wozAXLMgYFvULP5V1TAeBZi+MGEkFP1Ty8WjOfmuQ=
Subject key identifier: 4B:C9:50:74:28:76:1D:9E:15:86:24:24:F7:91:FF:08:3D:0B:B0:81
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 0D61CA15EC3F6D119A6814FBB16F274798CA451B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363313a3a2f33322d3438203d3e2033323538.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 3258
IP address blocks: 2a0a:acc1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:61:ca:15:ec:3f:6d:11:9a:68:14:fb:b1:6f:27:47:98:ca:45:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=4BC9507428761D9E15862424F791FF083D0BB081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:22:d4:7b:a7:69:8f:5c:61:2c:4a:4e:d9:
1f:91:50:a1:a5:92:50:75:38:96:2b:01:60:db:27:
a0:72:73:47:a7:01:e1:f5:7c:68:d2:03:ed:52:41:
0b:65:01:31:08:75:04:4a:59:32:44:ca:f3:3d:dc:
79:e0:30:9b:03:a2:04:7a:7c:4b:1d:80:c7:7d:53:
a5:fb:1e:c4:01:29:57:d4:da:01:fa:e8:75:65:4d:
c7:24:da:b9:5f:d4:9c:52:50:15:60:b9:fb:bf:40:
9b:2d:a1:94:d8:8b:c0:6e:08:17:39:88:f7:65:f4:
13:b3:18:4a:15:ca:74:11:8c:b0:a5:89:2b:bd:29:
b4:d3:64:61:c4:fa:b1:9d:08:65:56:db:2e:b4:5b:
21:f8:51:35:4c:dc:8f:74:fb:f2:7c:e3:04:8e:09:
84:f1:17:89:10:9b:72:1d:a9:72:c7:24:f1:41:5d:
0d:76:8c:04:4f:30:21:4c:43:fd:4d:d7:01:96:0f:
7a:fb:db:e3:6b:29:c4:f7:a9:e8:22:21:3c:58:d8:
ab:82:9f:4d:c1:d0:1e:4c:65:ad:af:69:be:6f:62:
60:e3:f9:cc:4a:76:87:4a:6e:59:8c:2c:c1:20:f4:
d0:f8:98:7a:7b:29:51:f4:24:e7:89:0d:3a:e4:a3:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:50:74:28:76:1D:9E:15:86:24:24:F7:91:FF:08:3D:0B:B0:81
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363313a3a2f33322d3438203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc1::/32
Signature Algorithm: sha256WithRSAEncryption
28:00:5d:f9:ca:ff:38:a1:51:eb:e8:6f:6b:7d:b8:c7:bc:ed:
3f:2e:c1:be:0a:de:57:13:c5:d0:24:d7:bc:41:a6:2e:27:72:
de:2f:c0:6e:09:70:65:2b:74:8b:97:6c:38:c9:38:b2:de:32:
6f:76:54:12:25:af:77:1d:2a:a7:5f:3c:be:93:a9:50:73:aa:
06:4d:15:c3:c2:93:8e:cd:99:1f:a6:b0:0e:70:a4:25:ca:8c:
00:a8:ed:18:85:bd:41:4f:38:9b:cf:14:2d:08:0a:22:a6:d6:
df:e4:0f:45:20:d2:66:57:be:8a:bc:52:37:dc:61:d1:c2:51:
6b:2f:f7:48:b6:b6:ef:b6:03:be:3a:6c:86:e4:30:02:4f:f2:
f6:94:55:e6:1f:87:54:9c:ef:af:7e:50:ef:b7:9a:b5:f1:47:
8a:9e:d3:83:04:b9:0b:c2:9e:af:f0:3c:f6:23:a7:2d:83:f0:
f5:44:ed:42:e9:10:22:e5:c5:c5:a6:9a:4c:2c:fb:35:22:98:
02:98:96:92:a0:3f:3f:4a:7c:1c:97:e9:67:f9:b0:ab:66:97:
db:21:13:f2:f0:29:fa:3b:75:d8:d0:e4:c3:8c:08:72:f3:70:
01:f7:c8:9d:f7:01:2e:36:63:81:68:61:86:2c:35:40:a4:6b:
c0:0b:a1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:24 2026 by rpki-client