Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa
File: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (raw, json)
Hash identifier: bCIH2xBxFrWZAxjR9r2SOKlcPmo5MSf0DuFYFZvdXvo=
Subject key identifier: 0C:80:55:BE:6D:BD:6B:A0:94:FE:CA:EC:2A:62:C1:C8:FA:7B:C8:64
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 4E671526727567DD9396781AD4062502C866C6C0
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa
Signing time: Thu 02 Jul 2026 09:56:14 +0000
ROA not before: Thu 02 Jul 2026 09:51:14 +0000
ROA not after: Thu 01 Jul 2027 09:56:14 +0000
asID: 134666
IP address blocks: 2a0b:2542:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:67:15:26:72:75:67:dd:93:96:78:1a:d4:06:25:02:c8:66:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 09:51:14 2026 GMT
Not After : Jul 1 09:56:14 2027 GMT
Subject: CN=0C8055BE6DBD6BA094FECAEC2A62C1C8FA7BC864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:36:6b:69:74:59:4f:b2:27:0b:6f:24:47:
71:3b:cd:a2:24:8e:71:a9:fa:1a:c9:ea:fd:2d:57:
0c:ff:29:1b:b8:d5:53:38:67:6e:94:8c:5e:82:cb:
ab:05:9d:f8:fb:9f:c5:93:b2:5b:63:de:4d:10:76:
b0:22:2f:63:fe:cd:75:84:6a:d6:ad:8c:34:9c:04:
75:2d:f5:7e:e4:d1:a1:25:e2:aa:8e:9d:71:51:0f:
79:b2:b7:3b:6c:aa:bd:0f:cc:37:ca:ed:b2:07:bf:
6e:a0:18:aa:82:c5:f1:84:31:2e:57:8d:7c:15:fc:
e3:b6:15:f1:74:ec:3b:40:46:e1:6b:48:78:f9:8c:
8b:3d:29:68:60:ec:18:84:95:4b:88:89:15:58:5d:
e3:33:1a:ce:01:d2:ea:bc:78:4f:a3:01:63:33:86:
42:04:96:f1:1f:6f:f5:d9:a8:05:c3:da:12:d8:21:
ec:b6:a4:a9:5a:56:48:5a:f5:ff:e7:9a:56:86:b5:
33:5e:a2:86:4e:35:02:c4:0e:d6:37:76:30:ab:7e:
1e:97:35:fe:17:6d:7a:9c:05:1e:5e:b7:dc:c5:ff:
a8:4f:61:f4:29:3a:44:4e:31:1c:ad:86:2f:e2:e0:
20:9d:98:9b:ee:6f:3f:8c:ba:c2:5c:c9:b9:76:9b:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:55:BE:6D:BD:6B:A0:94:FE:CA:EC:2A:62:C1:C8:FA:7B:C8:64
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542:100::/40
Signature Algorithm: sha256WithRSAEncryption
4c:8f:74:e0:02:3e:e0:e2:50:35:43:e0:af:13:e9:24:d6:a1:
b6:a5:0a:0b:ab:85:f1:23:a2:12:d8:7e:77:fe:19:21:57:df:
bf:b6:58:8a:2f:3f:b0:3b:11:4e:e6:d6:6f:ff:85:c7:42:64:
f5:8d:53:1c:b5:09:06:50:ef:60:c2:d5:7b:9c:1f:92:19:6c:
1a:2f:ff:7f:91:48:5d:3d:3a:a0:48:65:22:81:ca:b9:51:45:
75:2b:b3:b4:21:e0:fd:f9:ea:8e:84:b9:77:0b:e8:ae:bd:88:
58:81:66:88:65:7a:fc:48:c5:4b:1b:3e:f5:95:9a:f7:bd:bf:
22:5c:dd:6e:1f:c1:ee:3b:87:05:27:9b:64:59:ee:60:50:89:
af:95:6d:f2:4a:cc:f2:b2:7e:9b:66:30:8c:7b:2a:44:91:65:
d1:34:cb:59:18:03:9a:b3:36:59:cc:2a:66:dc:5b:32:01:bb:
35:3f:1f:8c:d1:09:5c:54:01:79:7c:32:8e:a1:e9:49:37:ca:
6f:0b:3d:61:f5:90:86:9f:f8:b8:26:f8:ba:cc:b5:d7:d2:20:
c8:ef:7f:3d:90:9e:87:49:50:89:33:44:75:73:1f:a3:43:c4:
e2:3b:0b:57:e2:6c:63:f2:29:11:04:5a:9b:7c:40:e0:16:82:
29:e2:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:18 2026 by rpki-client