Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e20393439.roa
File: 326130343a366630303a3a2f32392d3438203d3e20393439.roa (raw, json)
Hash identifier: kV9x0lfNUuNSEI0WXwzHC8Fpob+5GgXSKbnUDeo/FAo=
Subject key identifier: 20:2E:C9:D3:7E:E7:EF:F4:9E:C5:A3:69:D5:5B:D5:CF:A6:67:3A:E8
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 463756AA6922CD7759212DBDA1E5D6394896B52B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e20393439.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 949
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:37:56:aa:69:22:cd:77:59:21:2d:bd:a1:e5:d6:39:48:96:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=202EC9D37EE7EFF49EC5A369D55BD5CFA6673AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:b3:61:2a:33:3b:d5:d3:7f:22:07:fe:46:
88:b0:51:06:17:8e:f6:9f:eb:1c:a7:f0:51:b5:b4:
b4:03:6a:09:bc:03:1e:84:8c:8e:2a:69:0e:9d:09:
d1:2a:28:ac:4d:b4:57:ff:54:a2:95:df:28:69:19:
2f:3d:10:50:4b:4b:ae:63:1d:16:8c:de:6c:2f:fa:
ce:1a:8f:2b:58:10:73:cf:1a:db:81:fb:fe:70:13:
b5:a8:27:5d:d9:a7:3a:c0:ef:1f:62:d0:c3:4e:b9:
cf:74:b9:85:0d:31:ff:f4:c4:f5:4a:78:a1:58:fb:
fa:d0:00:b1:c8:33:35:01:a7:91:d4:33:dc:c4:1a:
63:a9:d6:53:5e:3a:ae:ea:8d:8a:b1:a4:1a:cd:b6:
cc:ab:14:f2:83:fc:90:af:b4:c5:99:d8:9e:da:c9:
32:05:eb:07:75:79:7b:13:66:b8:68:d6:59:bf:52:
47:87:3b:dd:d4:23:35:e6:33:34:11:06:dc:b6:ae:
72:23:05:6f:98:29:66:26:a4:f5:cf:e5:c6:ee:35:
45:e3:9e:72:ce:15:23:1e:05:e5:e9:60:2a:9d:af:
f1:64:b2:3d:4a:71:bb:5d:cb:e8:f9:76:23:cf:ba:
d4:d0:17:e4:4c:8d:15:c0:3a:08:66:0a:ca:f4:20:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:C9:D3:7E:E7:EF:F4:9E:C5:A3:69:D5:5B:D5:CF:A6:67:3A:E8
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e20393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
66:e8:8c:cf:d0:2b:78:ce:1c:b2:89:8b:86:f1:31:45:06:e3:
70:af:61:99:8a:43:f5:cc:13:ce:4a:6e:3e:2d:5a:fc:66:27:
d0:98:c0:5f:ce:48:6d:5f:17:8a:b1:a0:36:64:ca:a3:ae:f6:
b7:f7:90:22:f9:81:89:b1:b7:b7:20:da:42:72:34:b7:1e:b9:
37:58:89:16:04:f3:1b:e6:77:bd:25:6a:e4:02:29:4a:d2:3c:
99:bd:93:a6:b5:16:7b:23:d2:58:11:c4:d3:26:8b:b9:5a:e1:
57:47:be:d6:a0:97:a5:be:e5:38:93:be:6e:4b:fb:ac:fe:d0:
04:5d:d2:fa:3b:47:1f:20:f4:bc:e0:15:73:a4:cc:7d:24:04:
53:f2:2f:1a:fe:5b:7f:c5:3d:35:64:38:c2:1a:ea:a1:15:09:
2c:43:c8:4e:17:38:e0:db:6d:51:0a:64:a2:b4:7c:7c:fc:95:
ff:dc:72:c0:0c:90:16:5d:47:4d:dc:65:17:c7:67:b5:f9:2a:
54:38:2a:01:1f:e2:fd:6e:a7:04:6c:bb:21:7b:ce:fd:ef:67:
b4:6c:49:5f:82:f7:de:ad:81:1b:d3:83:9b:f8:b4:c4:f7:11:
3f:ae:ae:1f:79:70:3d:e5:2e:b5:45:5c:c7:b5:e2:e8:90:c4:
10:47:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:21:07 2026 by rpki-client