Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2036323333.roa
File: 326130343a366630303a3a2f32392d3438203d3e2036323333.roa (raw, json)
Hash identifier: f+L/OsLELmsysuIDukILqD7vm6PY6g0UofewCf8kV4A=
Subject key identifier: DC:D4:27:D2:2B:C9:43:CE:8A:2D:C1:0F:04:E9:93:BD:C5:DE:1E:D8
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 0F74DDEEAC711E176E66DACC73D37176D2486A28
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2036323333.roa
Signing time: Thu 02 Jul 2026 10:19:41 +0000
ROA not before: Thu 02 Jul 2026 10:14:41 +0000
ROA not after: Thu 01 Jul 2027 10:19:41 +0000
asID: 6233
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:74:dd:ee:ac:71:1e:17:6e:66:da:cc:73:d3:71:76:d2:48:6a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:14:41 2026 GMT
Not After : Jul 1 10:19:41 2027 GMT
Subject: CN=DCD427D22BC943CE8A2DC10F04E993BDC5DE1ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:39:56:56:7c:3a:e0:95:72:38:fa:8a:5e:
42:1c:58:28:06:f9:29:54:df:fe:b6:b1:77:14:2f:
96:82:2a:16:de:1a:21:a5:e3:02:bb:1e:c7:02:f5:
55:01:d8:40:d8:38:b8:ac:44:d8:2a:a7:fc:b3:17:
a9:6e:84:67:76:83:a2:09:93:e4:f8:19:a2:1d:94:
75:74:36:16:b8:94:ef:9f:7b:82:6a:61:9a:b8:37:
d7:47:b7:1f:b0:e1:29:19:61:ba:e6:20:4e:ca:7a:
88:9f:c7:aa:1f:f5:01:59:19:ef:49:57:d9:e1:61:
31:92:78:84:11:b3:c1:f0:0a:75:94:7a:6c:61:7e:
39:c0:a1:e4:ee:fd:79:6c:7c:ef:e7:60:ce:8d:0d:
37:be:74:0c:75:14:66:38:3f:29:34:41:b8:ac:74:
31:e5:bd:11:d3:22:b4:8e:3b:78:3f:d6:44:aa:96:
fc:76:9b:24:7b:2b:76:71:15:84:e6:71:2d:65:e4:
8b:35:ee:bc:39:4e:7e:9e:90:a5:45:28:ac:86:e4:
22:51:98:8f:bf:db:70:4d:4f:f4:64:80:6f:a0:e7:
46:1a:9d:64:55:8e:0c:4f:8e:89:94:c6:ad:70:95:
e6:af:46:f2:72:48:1d:fa:0c:49:4e:10:a3:62:29:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:27:D2:2B:C9:43:CE:8A:2D:C1:0F:04:E9:93:BD:C5:DE:1E:D8
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
55:15:3f:40:3c:ea:18:28:a7:b6:a6:c6:4d:45:f0:b5:7a:5c:
4f:0d:a9:a0:65:70:6e:7e:6d:ba:97:44:b3:d8:84:cc:d5:c5:
ae:8d:ea:eb:71:ab:45:fc:ba:de:ae:20:e7:14:c1:58:3a:8f:
2b:08:14:be:d5:29:5b:24:5e:8f:39:01:96:11:b5:7c:b5:13:
28:f1:fe:c4:2a:24:26:83:51:57:3e:12:f2:20:db:33:f8:08:
45:cb:9d:48:5d:03:a1:55:0d:b1:2f:30:20:ae:6a:45:c6:31:
f6:38:45:a4:f2:5e:da:e3:5b:03:a2:5b:9f:c3:24:8d:de:25:
b3:74:06:30:36:70:eb:73:80:ba:36:74:3f:62:7c:1b:e9:29:
9f:12:10:27:9d:fa:18:d7:a1:23:63:9d:d2:c7:38:4f:65:f3:
48:c7:a8:2b:51:28:8b:a2:43:5e:3a:51:b2:26:53:5f:45:c6:
ae:cf:fa:73:46:47:12:1e:ff:b2:d4:4b:5f:2c:ff:9e:62:46:
c9:59:2b:a9:b1:f5:aa:91:ba:c8:08:37:2e:98:39:25:96:34:
0c:0e:fa:55:26:e2:f9:a7:c6:c9:0b:9f:dc:15:c6:74:51:b3:
ee:40:c7:60:25:c7:4a:74:6c:01:42:15:4d:cb:39:5d:6a:67:
65:e4:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:21:36 2026 by rpki-client