Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e20393439.roa
File: 326130613a616363303a3a2f32392d3438203d3e20393439.roa (raw, json)
Hash identifier: B+n7UFkCbfU+wnCVzWe8bGe/FKtKgAIZNpWlauLV9cQ=
Subject key identifier: 7F:6A:4C:1B:93:B1:99:EE:84:00:CD:6D:7E:DE:D1:35:06:8B:80:36
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 4FDC16860C28729DFAA3AC86FC0BFDA7B3277905
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e20393439.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 949
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 23:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:dc:16:86:0c:28:72:9d:fa:a3:ac:86:fc:0b:fd:a7:b3:27:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=7F6A4C1B93B199EE8400CD6D7EDED135068B8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:36:58:65:e4:13:3c:35:18:a4:6b:5a:a9:
cb:9e:23:3e:9d:42:8a:78:83:17:35:dc:e8:f5:23:
b5:7f:14:17:8c:a7:43:05:16:4a:9f:95:8a:42:a4:
19:31:6a:69:4c:54:9c:a4:9e:8f:05:af:4f:3f:52:
18:7b:29:f4:44:38:d5:47:85:cd:53:4d:0c:3c:a6:
de:62:b5:20:b3:39:c0:a4:1e:64:b0:59:27:9f:b0:
8a:05:5c:25:42:7a:58:5e:9c:f4:6e:eb:95:46:67:
a1:70:ba:71:6b:d2:1e:a2:cd:e7:e1:a3:5e:c2:72:
8d:42:27:44:ba:88:16:9a:a6:66:e8:30:af:cc:2d:
b0:b4:f8:ba:4f:b2:6f:7a:19:d7:dc:c1:e3:46:0f:
03:bf:c6:be:e3:4c:28:fa:a2:a6:a0:2d:9c:0c:5b:
7b:2e:90:a7:a3:67:6b:53:31:9e:44:2b:8e:60:d0:
99:40:b4:b9:e2:54:27:4d:51:ac:2f:05:e6:3a:0d:
c2:c3:c5:dc:65:e3:ec:76:dc:a0:41:f2:39:e3:cb:
ba:f7:3b:c4:4c:d7:d1:36:bb:7d:c6:5b:10:0f:91:
e1:da:42:54:18:6e:4b:e0:19:79:4a:ce:d5:0a:18:
66:0c:a4:83:cd:95:36:fd:b8:06:0d:39:44:43:7e:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:4C:1B:93:B1:99:EE:84:00:CD:6D:7E:DE:D1:35:06:8B:80:36
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e20393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
12:0d:0e:10:d1:4c:e5:7b:7c:21:f5:88:29:46:d4:34:db:23:
4e:53:35:af:1f:a0:bb:c4:3c:a2:80:f7:79:1e:e9:3f:d0:65:
1a:cf:38:b5:33:c7:2b:99:c7:12:88:29:d7:63:21:9d:76:c7:
75:50:39:3c:92:6c:4b:78:b1:dc:dc:83:f1:9a:e7:5f:f6:6a:
2b:38:9d:c0:13:0b:55:86:4e:c7:ca:29:18:76:74:54:5e:c1:
7d:8e:36:78:45:b7:9e:3d:c1:c4:e4:56:2c:06:03:ab:11:38:
bf:a9:23:f4:74:70:e9:0f:3c:74:5c:ca:69:1b:27:8d:10:ef:
68:0c:b9:90:c1:5b:34:63:e0:f2:53:0c:48:3f:18:27:2a:1c:
5b:81:5c:ab:06:85:28:b4:5b:68:2d:38:21:c8:a6:1c:17:47:
bb:8b:95:9d:76:f1:2f:43:ab:7d:82:bf:b3:33:33:78:bc:cf:
73:b6:98:2b:79:b9:2b:d3:24:43:61:c9:81:25:9a:ac:d5:fc:
86:55:d1:86:23:fe:d5:3d:42:09:6f:18:9f:b4:be:79:34:09:
42:6d:9d:e6:e9:a9:8e:34:79:8b:cd:1c:ef:e1:75:b6:e0:bb:
b6:3b:c8:cd:0d:bb:1f:2c:18:7f:78:11:4e:a6:7f:f8:64:ee:
d5:74:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:21:06 2026 by rpki-client