Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa
File: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (raw, json)
Hash identifier: 24APLPk6s/U2W9VQJ64lVABk4CoKcHcmh3pBy6RvbiM=
Subject key identifier: 16:D9:85:AC:97:EE:6C:73:74:C2:09:BD:89:92:E1:D6:0B:03:3B:AF
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 510BFE73ED8E0F63085E7B4C386A4AFB78139F14
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 206315
IP address blocks: 2a0b:2542:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0b:fe:73:ed:8e:0f:63:08:5e:7b:4c:38:6a:4a:fb:78:13:9f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=16D985AC97EE6C7374C209BD8992E1D60B033BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:b5:46:22:98:d6:ef:89:98:5d:c7:6f:67:
ff:5f:15:93:d8:b6:90:04:0f:df:cb:74:47:73:10:
b8:59:a8:cf:47:44:ea:4e:53:59:55:7d:6d:94:b4:
2c:89:57:7a:9c:a7:dc:07:9e:e6:58:25:91:c5:ca:
b8:5c:64:fc:56:2c:5c:53:09:9b:0c:30:2f:58:e9:
33:fe:9c:46:69:4c:de:46:6a:cf:29:c7:8f:2f:2a:
32:0f:0e:11:24:4d:2d:28:6a:8f:61:b1:74:1e:05:
5e:d9:15:7e:1f:5e:15:6c:3d:93:f4:b8:02:2d:2b:
64:63:1e:a8:07:10:cd:74:2e:57:82:fd:63:d3:7a:
ae:15:db:34:70:dc:0f:31:3d:3d:2a:da:f4:6d:06:
54:67:4f:a2:3b:09:01:85:3a:aa:83:c8:57:ba:af:
37:a5:e3:4b:f8:3e:0d:dc:76:56:4b:2e:45:d3:29:
e5:0f:c1:07:f6:37:37:cc:25:bd:eb:c0:20:9b:f6:
3f:fb:1e:8b:ad:ce:01:ff:b0:96:ca:d2:8b:89:72:
24:03:fb:39:21:98:7f:35:45:a7:3e:22:5f:6e:70:
dd:18:65:75:ba:06:db:2f:b0:be:c4:a3:79:4f:46:
a3:a1:57:77:16:89:52:81:9e:2e:60:84:e8:13:97:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:85:AC:97:EE:6C:73:74:C2:09:BD:89:92:E1:D6:0B:03:3B:AF
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542:300::/40
Signature Algorithm: sha256WithRSAEncryption
c5:27:65:8f:43:47:bf:f5:a8:14:7d:e5:b4:7f:55:91:c4:24:
77:8e:5e:c7:1d:92:a7:6b:0e:ab:56:36:46:94:44:21:e7:30:
c9:1d:34:4a:a4:1e:4c:19:32:46:6c:62:57:94:7b:2a:d0:51:
39:49:2c:3d:48:5d:ca:b3:de:0b:53:56:8f:16:20:13:8f:39:
4f:96:e8:8e:1a:af:96:a1:63:af:6c:3a:75:12:d5:f0:3a:39:
78:3a:5e:56:f0:5d:92:80:e2:6d:2d:2e:38:c2:e9:ff:d5:73:
d1:04:73:7f:df:49:dd:7d:97:f1:24:ed:e3:8d:68:15:05:07:
e0:92:1e:c9:1e:19:bc:fd:f1:c4:9b:2c:d1:20:dc:d9:50:3e:
ad:df:9c:d6:5a:8c:47:de:8a:1c:ff:8c:aa:92:fd:9f:49:25:
22:fd:37:48:2c:41:0f:10:8c:de:f8:06:48:16:06:4b:83:f4:
91:c4:4e:6d:85:36:24:a5:ab:4e:94:a3:f3:3a:28:05:77:38:
e0:c1:38:37:2c:66:06:65:9a:9e:34:c5:7c:f4:c4:b4:e1:fb:
2f:17:cc:4d:66:2f:c8:5b:66:ff:52:3b:22:cc:bb:84:35:86:
b8:be:38:0c:cd:ed:07:59:29:01:07:02:2d:52:55:db:12:c7:
29:5c:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:37 2026 by rpki-client