Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e20393439.roa
File: 326130623a323534303a3a2f32392d3438203d3e20393439.roa (raw, json)
Hash identifier: M6b78dXWRKRUsX5PzdJt+RjKd05bX37x6S1TuiVZxng=
Subject key identifier: 01:FB:8F:7B:9B:DF:A0:B0:EF:EC:82:AF:C1:DE:FF:5C:F7:F7:0C:A3
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 6AE93DD4868E61A1B8F43FCF68F55CDF244FEAE1
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e20393439.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 949
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 23:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e9:3d:d4:86:8e:61:a1:b8:f4:3f:cf:68:f5:5c:df:24:4f:ea:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=01FB8F7B9BDFA0B0EFEC82AFC1DEFF5CF7F70CA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:22:08:cf:08:77:93:f3:a9:23:94:41:f5:
68:03:82:ad:b5:e9:ba:d6:34:6f:da:31:18:86:7a:
9b:f2:50:26:6e:2a:3f:3a:63:d7:1d:96:8d:80:e0:
6d:d2:e5:6a:11:84:ea:b6:16:4b:37:4d:25:34:7a:
12:6c:41:41:27:49:4d:87:04:a7:1f:6e:54:f4:2e:
77:ee:90:fe:44:e4:2d:d3:ea:9c:34:7d:88:8e:0c:
a3:69:72:35:49:a7:8a:d9:ff:5b:a8:5e:b9:d4:ec:
d5:ae:43:57:ad:8a:1b:a9:e6:29:24:aa:d5:a8:7a:
00:42:70:9c:34:64:59:0f:e3:8b:11:15:ff:8c:42:
3a:fa:7e:f4:8a:90:d8:1d:c3:fc:9f:25:6c:e8:ab:
dd:c4:08:4a:77:73:0a:cd:4a:3c:ae:05:50:78:8b:
90:a3:28:00:94:85:73:fb:c7:15:db:48:88:e5:51:
c1:17:6a:b0:b8:0c:da:4e:a6:38:90:4d:ec:20:99:
ad:4f:d0:f1:6d:4a:d2:35:ca:0d:f1:25:68:4d:9d:
e3:15:1d:9e:d1:fe:4c:de:06:48:f5:b1:5b:15:c0:
96:53:b1:fa:0a:18:3b:1c:a5:be:4e:9f:a3:e2:d5:
6d:a6:e2:9e:78:8a:8d:5b:3e:15:32:aa:da:fe:2e:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:8F:7B:9B:DF:A0:B0:EF:EC:82:AF:C1:DE:FF:5C:F7:F7:0C:A3
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e20393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
6e:a9:c7:21:74:e0:f9:1d:85:97:96:8a:3f:e0:a3:40:f3:06:
f0:5d:0f:36:97:09:8d:09:13:a0:77:ad:14:6c:2d:2a:12:07:
57:74:ab:23:65:72:5b:7b:46:d8:59:e2:bd:1e:0a:e5:ad:10:
6e:05:78:d5:a4:55:3d:89:f0:e6:46:b5:cf:1d:88:6b:04:7c:
85:fa:b3:64:c0:3b:53:7b:00:8b:4a:72:df:b3:73:ea:c5:9c:
c3:cf:2b:28:2e:3e:e1:ed:f0:9c:e6:06:5a:9d:b7:6b:88:56:
c0:81:72:b8:aa:5a:61:b6:68:e4:6d:11:b6:f5:09:8e:2c:ee:
a1:2f:f9:12:f1:94:68:e2:c6:f3:ab:0d:02:c2:e1:99:37:92:
13:34:1e:d2:67:65:ce:84:be:43:c2:9d:70:88:83:7f:32:38:
aa:0e:e4:e4:2d:59:bd:60:b4:9c:e5:0d:ee:01:f7:90:c4:d7:
a9:0e:86:58:5b:3c:d5:92:1c:b7:0a:6f:4a:4a:c3:8b:d0:fc:
78:b3:53:58:00:ea:8d:21:54:9d:1d:3e:e5:08:c3:15:51:de:
53:e0:26:ee:87:b3:5c:b9:1a:80:db:61:dd:b0:fb:40:8d:bc:
88:34:3b:8b:e2:e6:fc:1f:ae:bd:d3:95:b2:da:4d:aa:1d:3e:
fa:06:e5:46
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIUauk91IaOYaG49D/PaPVc3yRP6uEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDMwNDhaFw0yNzA3MDExMDM1NDhaMDMxMTAvBgNV
BAMTKDAxRkI4RjdCOUJERkEwQjBFRkVDODJBRkMxREVGRjVDRjdGNzBDQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1TCIIzwh3k/OpI5RB9WgDgq21
6brWNG/aMRiGepvyUCZuKj86Y9cdlo2A4G3S5WoRhOq2Fks3TSU0ehJsQUEnSU2H
BKcfblT0LnfukP5E5C3T6pw0fYiODKNpcjVJp4rZ/1uoXrnU7NWuQ1etihup5ikk
qtWoegBCcJw0ZFkP44sRFf+MQjr6fvSKkNgdw/yfJWzoq93ECEp3cwrNSjyuBVB4
i5CjKACUhXP7xxXbSIjlUcEXarC4DNpOpjiQTewgma1P0PFtStI1yg3xJWhNneMV
HZ7R/kzeBkj1sVsVwJZTsfoKGDscpb5On6Pi1W2m4p54io1bPhUyqtr+LumLAgMB
AAGjggHLMIIBxzAdBgNVHQ4EFgQUAfuPe5vfoLDv7IKvwd7/XPf3DKMwHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MjNhMzIzNTM0MzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqCyVAMA0GCSqGSIb3DQEBCwUA
A4IBAQBuqcchdOD5HYWXloo/4KNA8wbwXQ82lwmNCROgd60UbC0qEgdXdKsjZXJb
e0bYWeK9HgrlrRBuBXjVpFU9ifDmRrXPHYhrBHyF+rNkwDtTewCLSnLfs3PqxZzD
zysoLj7h7fCc5gZanbdriFbAgXK4qlphtmjkbRG29QmOLO6hL/kS8ZRo4sbzqw0C
wuGZN5ITNB7SZ2XOhL5Dwp1wiIN/MjiqDuTkLVm9YLSc5Q3uAfeQxNepDoZYWzzV
khy3Cm9KSsOL0Px4s1NYAOqNIVSdHT7lCMMVUd5T4Cbuh7NcuRqA22HdsPtAjbyI
NDuL4ub8H66905Wy2k2qHT76BuVG
-----END CERTIFICATE-----
Generated at Sun Jul 12 06:21:07 2026 by rpki-client