Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2036323333.roa
File: 326130613a616363303a3a2f32392d3438203d3e2036323333.roa (raw, json)
Hash identifier: zqWGuEhMjNAyvqxhImMVbVCLa8M2znoomR/76Hq+VTE=
Subject key identifier: B8:4E:5F:7E:24:88:95:E1:A3:93:77:19:31:73:9B:95:81:09:BD:CF
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 1E711BED130F612E0EA75D909B0FA8FF6FA5DBB4
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2036323333.roa
Signing time: Thu 02 Jul 2026 10:18:47 +0000
ROA not before: Thu 02 Jul 2026 10:13:47 +0000
ROA not after: Thu 01 Jul 2027 10:18:47 +0000
asID: 6233
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:71:1b:ed:13:0f:61:2e:0e:a7:5d:90:9b:0f:a8:ff:6f:a5:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:13:47 2026 GMT
Not After : Jul 1 10:18:47 2027 GMT
Subject: CN=B84E5F7E248895E1A393771931739B958109BDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:1c:4c:54:4b:12:c0:0e:ca:2a:a4:dd:04:
f3:5b:d1:84:f2:a5:37:45:5f:af:9b:59:e5:10:54:
29:fd:4c:e9:e8:a4:08:10:28:94:35:01:3b:ab:1e:
4c:f7:a7:d5:df:5f:bc:6c:44:01:37:dc:d4:23:3f:
ca:07:d8:a7:9d:f1:54:92:ac:7a:07:b5:ea:b8:41:
91:f6:ea:99:a4:95:8a:d1:74:64:55:e4:33:70:ee:
17:2a:e9:c3:15:48:be:33:a7:a9:b2:fa:24:21:26:
28:cf:13:1b:48:f2:1f:ec:6b:62:88:4c:b6:ba:9a:
bb:c8:f0:dd:ba:d7:e9:a6:00:3b:87:99:90:f0:93:
00:00:6b:24:4e:f1:36:fe:e3:3a:12:da:2a:b2:d1:
fa:18:4b:f1:34:bb:8f:22:ed:00:96:1a:79:ee:8c:
8d:53:21:a0:71:dc:84:ee:8a:d1:f8:59:67:30:d7:
b9:59:d4:3a:49:1f:ad:b7:42:a7:31:a0:5c:b9:34:
c2:eb:59:43:6c:02:fc:a0:0c:55:a2:da:67:bb:32:
63:15:2e:cc:df:ad:7c:0a:98:0b:b9:ff:12:b9:72:
e5:f1:e7:25:f8:df:db:98:19:54:9d:a4:ba:ee:30:
b8:11:14:28:fd:8b:54:71:6f:54:06:3a:69:c9:64:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:5F:7E:24:88:95:E1:A3:93:77:19:31:73:9B:95:81:09:BD:CF
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
95:2d:cf:66:e7:3e:09:b0:88:00:84:69:95:38:09:7c:94:cf:
71:51:8b:9f:21:f7:18:4a:3a:96:f2:0b:f1:f8:8a:17:77:ef:
06:02:16:fc:2d:ab:14:a7:95:ae:6c:16:a6:0f:6e:c3:06:de:
1e:9b:43:7e:34:46:1b:64:10:16:c7:4b:0b:2e:33:d0:c9:76:
16:02:50:d8:b3:2b:64:5c:ab:9c:a4:00:25:de:26:d5:7b:0e:
50:71:3a:00:77:c8:b9:33:da:9a:47:5c:29:9d:3d:45:35:31:
87:f1:1a:f0:0c:5a:60:d7:57:d5:44:16:b0:9b:07:9b:ba:37:
7b:0c:b9:19:e6:39:fd:5d:71:e1:5e:93:9e:83:2c:6c:dd:1a:
f0:da:23:88:a3:08:fd:dc:fd:5a:b7:d5:8c:c2:3c:f8:e3:b2:
82:43:9a:7e:6b:5c:9f:92:0c:62:10:35:30:f1:67:44:18:cb:
9a:70:78:62:74:e6:87:b6:71:eb:55:d9:7a:41:2d:cf:b7:15:
a7:1f:d6:21:ba:79:a0:c3:0a:40:53:92:ee:81:0c:30:c2:c8:
31:04:b4:ab:b1:f8:81:69:7a:71:1c:95:b8:cf:59:0a:31:d3:
64:de:07:24:2c:c3:44:f4:01:57:40:84:67:e6:91:98:37:69:
63:86:38:4d
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUHnEb7RMPYS4Op12Qmw+o/2+l27QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDEzNDdaFw0yNzA3MDExMDE4NDdaMDMxMTAvBgNV
BAMTKEI4NEU1RjdFMjQ4ODk1RTFBMzkzNzcxOTMxNzM5Qjk1ODEwOUJEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR9BxMVEsSwA7KKqTdBPNb0YTy
pTdFX6+bWeUQVCn9TOnopAgQKJQ1ATurHkz3p9XfX7xsRAE33NQjP8oH2Ked8VSS
rHoHteq4QZH26pmklYrRdGRV5DNw7hcq6cMVSL4zp6my+iQhJijPExtI8h/sa2KI
TLa6mrvI8N261+mmADuHmZDwkwAAayRO8Tb+4zoS2iqy0foYS/E0u48i7QCWGnnu
jI1TIaBx3ITuitH4WWcw17lZ1DpJH623QqcxoFy5NMLrWUNsAvygDFWi2me7MmMV
LszfrXwKmAu5/xK5cuXx5yX439uYGVSdpLruMLgRFCj9i1Rxb1QGOmnJZAsNAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUuE5ffiSIleGjk3cZMXOblYEJvc8wHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MTNhNjE2MzYzMzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoKrMAwDQYJKoZIhvcNAQEL
BQADggEBAJUtz2bnPgmwiACEaZU4CXyUz3FRi58h9xhKOpbyC/H4ihd37wYCFvwt
qxSnla5sFqYPbsMG3h6bQ340RhtkEBbHSwsuM9DJdhYCUNizK2Rcq5ykACXeJtV7
DlBxOgB3yLkz2ppHXCmdPUU1MYfxGvAMWmDXV9VEFrCbB5u6N3sMuRnmOf1dceFe
k56DLGzdGvDaI4ijCP3c/Vq31YzCPPjjsoJDmn5rXJ+SDGIQNTDxZ0QYy5pweGJ0
5oe2cetV2XpBLc+3Facf1iG6eaDDCkBTku6BDDDCyDEEtKux+IFpenEclbjPWQox
02TeByQsw0T0AVdAhGfmkZg3aWOGOE0=
-----END CERTIFICATE-----
Generated at Sun Jul 12 06:21:36 2026 by rpki-client