Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2033323034.roa
File: 326130623a323534303a3a2f32392d3438203d3e2033323034.roa (raw, json)
Hash identifier: 325Wg9Q1DpvnaKQtUebFF0SLhCUYxYpgJ0nNf2jj3kw=
Subject key identifier: F3:81:0A:8F:2D:AB:7E:01:6A:A7:C4:18:49:0F:97:12:4F:E1:DF:8A
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 567528B4B227466703132232B58ABFD1528CBE8F
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2033323034.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3204
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:75:28:b4:b2:27:46:67:03:13:22:32:b5:8a:bf:d1:52:8c:be:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=F3810A8F2DAB7E016AA7C418490F97124FE1DF8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:06:44:e5:bf:9e:ab:4f:91:63:2e:a7:d4:
3b:6f:c8:5d:62:b9:fd:95:0d:16:92:78:4b:2e:e0:
09:94:9e:d7:0d:77:40:23:bf:ed:20:2a:71:5c:7a:
33:a5:91:2f:bb:f1:26:a1:77:f3:3c:5e:1c:6f:9d:
43:bb:d1:18:c8:7d:7c:95:d6:5e:42:99:a4:4b:4b:
c8:98:b2:dc:76:5f:c6:fb:dd:4c:26:4c:04:c5:a5:
0d:bb:aa:47:49:a7:38:26:14:5e:e4:a4:25:20:3b:
ca:47:7b:f3:ee:ef:fc:61:9f:26:ba:80:d2:b0:eb:
43:60:8b:f6:44:ad:61:72:4d:fd:80:98:7c:d7:c0:
25:5c:86:b8:cf:22:c9:b6:32:4d:9e:7a:ff:29:85:
a6:48:27:e1:c0:19:c0:ff:b5:a3:04:99:d2:2f:39:
ae:15:ad:fa:d8:eb:6c:fa:55:f5:9d:4a:40:a8:76:
35:47:93:40:d3:4d:47:3b:a6:43:70:a4:98:16:b4:
83:0e:0a:6e:89:ac:63:a5:54:c6:a2:4c:24:fd:36:
2c:ea:85:b3:ac:24:ed:dc:41:34:44:c0:4f:ea:c7:
3e:17:d8:a3:d7:a9:c6:82:35:76:60:5a:94:94:1d:
cd:01:2a:07:33:cc:2d:78:3d:64:e5:8a:9e:8c:90:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:0A:8F:2D:AB:7E:01:6A:A7:C4:18:49:0F:97:12:4F:E1:DF:8A
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2033323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
d3:73:44:11:37:0b:e1:3a:ce:95:35:08:1b:84:68:89:e7:b6:
05:5d:0d:55:3b:4a:5c:1b:d6:ce:c4:4a:70:c7:87:09:94:29:
36:76:2a:61:74:2a:27:d3:a9:f8:54:2f:d8:91:01:a4:68:85:
bd:79:78:bd:9a:cc:7b:dc:68:b5:ff:99:4e:5f:22:e7:dd:bf:
be:ab:6c:aa:47:cc:61:cb:e3:a6:0b:ae:34:db:56:30:e0:78:
f8:5a:b9:2f:34:70:e8:7d:bd:7b:7f:ca:f0:01:d8:c0:16:67:
4a:22:5c:2e:8e:4b:20:57:7f:d6:8a:f5:6e:37:1d:4d:ee:fe:
93:d1:01:fe:b6:de:e9:e3:83:97:47:a7:4c:a1:89:12:f5:c9:
31:88:eb:6f:af:6b:32:3c:c7:72:4c:f8:f5:31:38:0e:55:3c:
43:83:0c:27:f7:d4:47:80:7c:f5:63:1e:dc:89:1b:a4:46:18:
57:8d:a3:bb:fa:e3:9d:ec:d4:4e:18:47:e6:b1:50:22:40:4e:
a4:d5:db:47:18:2a:53:2e:70:5c:2f:f5:bd:b3:f7:6a:3b:89:
89:00:6a:e7:8a:29:36:09:11:0c:a5:21:9c:d6:ee:4c:de:20:
0a:aa:e5:df:cb:ac:3f:24:a3:84:a6:4e:2d:47:99:61:64:c1:
2c:8f:40:5d
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUVnUotLInRmcDEyIytYq/0VKMvo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDMwNDhaFw0yNzA3MDExMDM1NDhaMDMxMTAvBgNV
BAMTKEYzODEwQThGMkRBQjdFMDE2QUE3QzQxODQ5MEY5NzEyNEZFMURGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZQAZE5b+eq0+RYy6n1DtvyF1i
uf2VDRaSeEsu4AmUntcNd0Ajv+0gKnFcejOlkS+78Sahd/M8XhxvnUO70RjIfXyV
1l5CmaRLS8iYstx2X8b73UwmTATFpQ27qkdJpzgmFF7kpCUgO8pHe/Pu7/xhnya6
gNKw60Ngi/ZErWFyTf2AmHzXwCVchrjPIsm2Mk2eev8phaZIJ+HAGcD/taMEmdIv
Oa4VrfrY62z6VfWdSkCodjVHk0DTTUc7pkNwpJgWtIMOCm6JrGOlVMaiTCT9Nizq
hbOsJO3cQTREwE/qxz4X2KPXqcaCNXZgWpSUHc0BKgczzC14PWTlip6MkIFRAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQU84EKjy2rfgFqp8QYSQ+XEk/h34owHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MjNhMzIzNTM0MzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzMzMyMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoLJUAwDQYJKoZIhvcNAQEL
BQADggEBANNzRBE3C+E6zpU1CBuEaInntgVdDVU7Slwb1s7ESnDHhwmUKTZ2KmF0
KifTqfhUL9iRAaRohb15eL2azHvcaLX/mU5fIufdv76rbKpHzGHL46YLrjTbVjDg
ePhauS80cOh9vXt/yvAB2MAWZ0oiXC6OSyBXf9aK9W43HU3u/pPRAf623unjg5dH
p0yhiRL1yTGI62+vazI8x3JM+PUxOA5VPEODDCf31EeAfPVjHtyJG6RGGFeNo7v6
453s1E4YR+axUCJATqTV20cYKlMucFwv9b2z92o7iYkAaueKKTYJEQylIZzW7kze
IAqq5d/LrD8ko4SmTi1HmWFkwSyPQF0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:36 2026 by rpki-client