Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363323a3a2f33322d3438203d3e2036323333.roa
File: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier: HSKLs1iLgbTCjjEYDC18Ofun9SW+gttqxoOZP17hG94=
Subject key identifier: DC:D6:72:B0:53:CA:8C:C7:84:5B:F2:86:57:7F:B8:B2:91:01:3E:39
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 36B34CF30B4A13644044A1BB751504D8832A249E
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363323a3a2f33322d3438203d3e2036323333.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 6233
IP address blocks: 2a0a:acc2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b3:4c:f3:0b:4a:13:64:40:44:a1:bb:75:15:04:d8:83:2a:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=DCD672B053CA8CC7845BF286577FB8B291013E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:43:11:36:a6:84:c6:79:57:bd:f4:53:04:
87:94:60:56:48:db:5c:81:cc:f9:30:e8:6f:e1:4c:
37:25:0d:80:65:df:5f:2b:7f:57:85:a0:8d:a8:d6:
d8:47:91:55:19:f9:8e:d6:05:b5:5a:a3:68:e0:38:
27:2e:5b:8f:df:45:69:f3:6b:a1:a8:5f:07:be:f8:
93:0e:5f:fc:af:9b:40:49:6c:63:a7:37:e8:ef:63:
2d:8e:78:98:75:80:bc:18:05:32:6c:a4:1d:1f:64:
e3:8e:ef:aa:e0:5e:52:38:70:f1:c9:88:4e:a2:e8:
35:a9:b6:ef:da:61:d5:08:16:bb:f5:22:7f:f8:88:
96:63:47:5b:36:5a:fa:00:3a:3d:3c:e6:90:82:ba:
40:50:1d:fc:99:89:47:2b:c0:51:b5:5a:40:c1:ea:
5b:10:ba:b4:91:ef:99:f9:ce:0e:dc:8c:b4:41:32:
39:cf:91:c7:32:70:16:0b:f8:58:c3:c8:ce:94:bf:
2b:20:c5:49:50:c9:36:7b:4c:f8:4a:e9:74:df:27:
f3:6f:35:b4:eb:28:d2:40:14:79:e9:80:9c:a9:2e:
c6:cb:ee:a3:e7:12:13:cc:1c:8b:4c:e4:53:77:f0:
bc:fb:6b:ef:5e:be:15:a1:78:4f:b1:69:8c:20:92:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:72:B0:53:CA:8C:C7:84:5B:F2:86:57:7F:B8:B2:91:01:3E:39
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363323a3a2f33322d3438203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc2::/32
Signature Algorithm: sha256WithRSAEncryption
69:f6:19:96:26:ca:70:9d:42:31:91:03:5b:f7:b8:29:05:f3:
02:0b:64:a2:27:f6:ed:7d:f6:c0:70:30:8f:d4:f0:3e:e4:5a:
6d:73:64:b4:c6:75:23:51:df:27:d7:34:ef:e3:61:fb:76:df:
1b:b5:32:df:53:29:55:2e:95:3f:3e:1d:94:65:5f:a3:54:f2:
33:89:17:fb:77:01:fe:6a:4f:07:13:c4:7d:2d:ee:c1:56:b5:
7f:98:73:9e:da:cc:95:67:a5:f0:ac:ab:85:50:4c:09:dd:e2:
27:ba:48:ae:f8:8a:c0:e1:88:23:be:88:10:a0:a3:be:c3:be:
20:c6:78:44:83:1d:8a:22:74:0e:a0:de:a5:f8:0f:b7:7c:53:
cb:76:a3:2e:c3:60:35:2e:d8:51:5c:29:ae:bf:f7:61:a5:ee:
0b:98:7e:7b:bf:b9:a8:7d:ca:6a:e0:5c:44:08:f7:7b:33:d3:
ee:7a:44:11:c3:1e:0b:75:4c:ef:a0:46:96:ca:46:71:76:1a:
a6:33:ed:a7:15:ae:97:5b:d5:11:d7:41:aa:dd:9a:8e:67:59:
16:3b:d6:ce:65:e1:ba:05:f5:07:25:5c:a3:73:ee:98:f1:a6:
54:19:81:34:3a:c9:e1:de:d1:ba:3f:f9:99:68:37:70:db:22:
53:b2:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:35 2026 by rpki-client