Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2036323333.roa
File: 326130623a323534303a3a2f32392d3438203d3e2036323333.roa (raw, json)
Hash identifier: 1OzEleppYmifpTdDsbaEVfYLluNy1uNvk/KIpyGXg5Q=
Subject key identifier: D1:56:5D:7C:72:0C:BA:93:A3:63:AA:46:D9:46:3F:E2:4C:75:FA:FA
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 191799EE905DB5911240327D47991C5430C1E321
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2036323333.roa
Signing time: Thu 02 Jul 2026 10:19:19 +0000
ROA not before: Thu 02 Jul 2026 10:14:19 +0000
ROA not after: Thu 01 Jul 2027 10:19:19 +0000
asID: 6233
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 23:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:17:99:ee:90:5d:b5:91:12:40:32:7d:47:99:1c:54:30:c1:e3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:14:19 2026 GMT
Not After : Jul 1 10:19:19 2027 GMT
Subject: CN=D1565D7C720CBA93A363AA46D9463FE24C75FAFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:c5:a8:2a:ea:87:9e:74:2a:82:a8:d9:52:
23:f2:0e:b5:38:da:94:6b:f8:37:3a:4e:47:ba:76:
ff:b9:14:c4:67:81:1b:36:ec:d5:23:0f:2a:2a:b1:
49:a5:07:17:11:29:34:e5:bf:2c:3e:0e:dd:e3:49:
7e:b9:f9:76:54:19:32:90:17:95:0e:c9:96:8d:b4:
17:6c:de:d3:38:48:a8:7f:d8:18:e2:a2:a0:76:de:
a0:82:01:01:80:f1:08:fa:a8:c8:a7:48:7c:83:20:
ed:01:9d:14:dc:a3:e9:ea:6e:ee:e9:d6:cd:62:9d:
73:85:36:0b:b8:45:ae:5d:d1:97:f2:7d:69:03:cf:
4c:e6:08:46:3b:3a:80:33:a9:f7:37:80:a2:6b:bf:
67:30:15:51:ae:cc:d5:99:a4:0c:b2:ed:f6:16:ab:
98:04:cb:c6:52:e1:92:2f:91:3c:b5:32:4f:9b:8a:
41:3c:ea:d9:50:15:d2:0e:41:75:78:28:fa:ac:bf:
a2:6e:f4:41:bd:11:3e:1b:41:b4:59:38:eb:9a:a4:
6e:55:96:a7:7b:a7:76:9a:d7:09:41:fa:79:11:dd:
3d:b1:3a:8e:92:b8:9c:e1:a8:e7:f1:52:e4:8c:61:
08:1c:68:03:5c:c5:2b:8e:9c:4f:86:44:1b:c1:b5:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:5D:7C:72:0C:BA:93:A3:63:AA:46:D9:46:3F:E2:4C:75:FA:FA
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
31:d7:8e:95:59:08:68:af:e2:d8:ef:c7:8e:fe:d1:0f:b7:0e:
25:00:dc:1b:80:87:4c:56:82:43:c6:b9:02:6f:92:4f:a9:11:
7b:21:87:5c:c7:68:88:5c:49:84:0d:c9:f5:ec:ad:8c:ab:39:
cf:67:f2:d3:86:0f:8e:08:25:06:89:99:3f:ea:e8:a1:19:25:
15:a0:cf:35:ae:64:af:7d:27:4c:ad:cd:84:f4:73:8f:61:53:
51:f4:b6:d0:1d:48:39:03:88:cd:7c:6a:ce:80:4a:00:c7:94:
ae:8b:61:73:b5:3b:20:01:02:09:e4:e1:74:c3:91:5e:c7:98:
c3:60:cb:e2:1b:63:7a:2d:52:ce:06:c2:e0:2c:52:37:fa:3c:
cc:65:c1:86:8f:cf:af:b8:dc:08:b8:d4:ac:54:4d:20:3a:3e:
3c:74:f7:1b:df:df:2d:87:f8:64:52:7b:99:79:42:c8:4f:3e:
ca:62:8c:d9:b3:36:33:31:b7:6a:39:77:be:94:61:1c:7a:22:
0a:06:49:54:59:a2:39:e2:5a:07:3c:be:e4:2d:d1:83:a8:68:
af:91:ac:65:d6:26:6f:9d:4f:ab:51:fe:fb:db:f9:6f:d8:cc:
26:aa:5a:b1:a4:15:97:f5:f2:61:bd:66:4d:d6:42:fa:99:9d:
fe:17:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:21:18 2026 by rpki-client