Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2033323538.roa
File: 326130623a323534303a3a2f32392d3438203d3e2033323538.roa (raw, json)
Hash identifier: uCPoAsYSki46jxTp5A0KDjYMO95nIl0ue3NhTMn0/ns=
Subject key identifier: E5:A1:57:06:D8:59:75:9D:B7:A7:3B:B8:55:34:8B:2A:F7:B3:25:E2
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 104189ACE1D6C069E26F129D532EF8DB90C643A5
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2033323538.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3258
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:41:89:ac:e1:d6:c0:69:e2:6f:12:9d:53:2e:f8:db:90:c6:43:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=E5A15706D859759DB7A73BB855348B2AF7B325E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:11:72:dd:b7:e5:31:23:31:a0:a3:fa:1c:
1d:5c:34:7b:35:3b:a0:24:74:0d:0e:e2:10:34:e3:
80:bb:41:73:bc:7e:bf:d7:7d:4e:04:ba:3d:10:55:
c4:ed:10:2d:f9:6e:aa:89:81:24:0d:5c:f2:ed:6f:
fd:0e:2d:51:c6:d2:71:47:43:d0:99:5b:db:6e:08:
32:f8:a7:1a:fa:3f:11:98:cb:e6:be:e4:a8:ec:51:
84:ef:3a:13:72:68:50:f8:69:47:f7:5f:27:0a:fc:
fe:1e:4c:42:7a:e1:7c:f0:51:9b:60:63:ef:00:41:
53:fc:36:01:8a:b4:44:b0:f7:83:c4:71:30:c4:67:
e3:00:0c:e8:3e:28:55:44:8d:17:dc:8c:3c:12:9e:
af:35:72:b8:f1:f2:bd:e3:b0:a3:93:a9:85:4f:07:
0a:96:77:a7:53:5a:90:56:6d:1b:ec:7b:d2:24:e3:
1f:65:a7:4e:4d:0c:64:19:fb:4f:1d:08:3f:d0:4b:
6a:95:43:d9:c1:6f:ba:30:79:0a:ac:be:7e:62:7a:
39:5a:3a:4d:75:30:ce:16:bc:b3:f5:2f:38:02:d5:
79:c8:14:77:de:d0:47:77:d5:4f:14:5a:f6:48:3f:
ed:6e:f4:92:b9:e4:9a:0e:ea:ff:5f:15:e2:b4:a7:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:57:06:D8:59:75:9D:B7:A7:3B:B8:55:34:8B:2A:F7:B3:25:E2
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
d5:d9:8a:4f:78:41:4b:a1:ed:02:84:1f:60:ad:3f:00:3a:e4:
d1:b1:21:5b:db:5a:a5:2c:85:e2:95:83:89:c5:4c:cb:6b:78:
33:36:2e:3c:a4:38:c9:d1:66:39:5e:04:77:7e:45:13:15:59:
ae:de:25:66:7a:9f:93:08:89:9c:b3:23:0c:66:de:a0:b6:7e:
2e:cd:d6:6c:83:56:62:ed:6a:54:ad:8d:96:9d:b1:4b:b4:b3:
c5:d7:fb:1d:12:83:25:9e:3f:ac:00:c4:32:36:93:f5:fc:0c:
e2:a4:7a:46:57:56:cb:88:8a:d4:72:05:05:33:5b:cb:cb:ad:
7b:53:41:53:37:c8:9a:b5:09:d0:23:12:ad:f6:cd:ac:f3:ac:
4e:1c:b4:da:d7:fa:94:84:38:d6:9b:10:2d:60:81:ae:92:01:
94:99:1f:dc:12:07:31:49:fd:c2:ce:31:6a:bd:ed:61:a9:49:
ad:9e:0a:fb:19:2a:ed:d4:8e:5d:e8:3e:79:a7:49:9e:ff:eb:
93:6b:25:16:7c:d5:8b:65:7d:45:1e:9d:ba:2a:0c:23:03:6b:
2c:93:66:67:91:dc:fe:e0:f8:e7:f4:a1:f4:c3:ec:c7:b6:7b:
0e:79:75:b7:02:cb:6f:80:83:c5:30:c3:f3:3e:6e:c6:74:a1:
19:52:5c:a7
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUEEGJrOHWwGnibxKdUy7425DGQ6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDMwNDhaFw0yNzA3MDExMDM1NDhaMDMxMTAvBgNV
BAMTKEU1QTE1NzA2RDg1OTc1OURCN0E3M0JCODU1MzQ4QjJBRjdCMzI1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTRFy3bflMSMxoKP6HB1cNHs1
O6AkdA0O4hA044C7QXO8fr/XfU4Euj0QVcTtEC35bqqJgSQNXPLtb/0OLVHG0nFH
Q9CZW9tuCDL4pxr6PxGYy+a+5KjsUYTvOhNyaFD4aUf3XycK/P4eTEJ64XzwUZtg
Y+8AQVP8NgGKtESw94PEcTDEZ+MADOg+KFVEjRfcjDwSnq81crjx8r3jsKOTqYVP
BwqWd6dTWpBWbRvse9Ik4x9lp05NDGQZ+08dCD/QS2qVQ9nBb7oweQqsvn5iejla
Ok11MM4WvLP1LzgC1XnIFHfe0Ed31U8UWvZIP+1u9JK55JoO6v9fFeK0p81/AgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQU5aFXBthZdZ23pzu4VTSLKvezJeIwHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MjNhMzIzNTM0MzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzMzMyMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoLJUAwDQYJKoZIhvcNAQEL
BQADggEBANXZik94QUuh7QKEH2CtPwA65NGxIVvbWqUsheKVg4nFTMtreDM2Ljyk
OMnRZjleBHd+RRMVWa7eJWZ6n5MIiZyzIwxm3qC2fi7N1myDVmLtalStjZadsUu0
s8XX+x0SgyWeP6wAxDI2k/X8DOKkekZXVsuIitRyBQUzW8vLrXtTQVM3yJq1CdAj
Eq32zazzrE4ctNrX+pSEONabEC1gga6SAZSZH9wSBzFJ/cLOMWq97WGpSa2eCvsZ
Ku3Ujl3oPnmnSZ7/65NrJRZ81YtlfUUenboqDCMDayyTZmeR3P7g+Of0ofTD7Me2
ew55dbcCy2+Ag8Uww/M+bsZ0oRlSXKc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:50 2026 by rpki-client