Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2038383838.roa
File: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (raw, json)
Hash identifier: KECIlnUqh0rn/dz9qYtYoQQ/aH77pgWsYI4+aTM2fBE=
Subject key identifier: EC:D8:B1:EE:66:4D:6D:27:FA:35:10:3A:44:28:D2:A7:14:A4:CE:C5
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 26D8D888EBB80764E7638AEA6CE500E05CBC260E
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2038383838.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 8888
IP address blocks: 185.37.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d8:d8:88:eb:b8:07:64:e7:63:8a:ea:6c:e5:00:e0:5c:bc:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=ECD8B1EE664D6D27FA35103A4428D2A714A4CEC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:0b:02:23:82:92:50:73:d6:e9:ec:b9:bc:
a5:d5:02:71:00:93:92:1b:1c:9e:b2:bd:b1:e7:3b:
fb:20:27:9a:6c:48:60:51:b8:12:17:03:57:72:0d:
c2:f1:c0:0e:28:3a:1c:b7:40:31:5f:70:dd:71:36:
1d:41:7f:75:30:00:47:7e:1b:21:d0:1f:5d:7f:a2:
89:84:71:ad:50:12:3a:76:4a:e8:b0:8f:68:90:28:
e5:93:97:44:9e:c4:22:ef:c3:c6:7f:9b:3a:58:35:
a4:54:d5:c5:20:8d:e6:75:fb:be:c6:5c:e0:b1:88:
31:28:3e:be:7a:12:ca:9b:09:57:97:d2:cb:fe:d4:
80:1a:92:b1:24:bd:09:20:ca:ec:f1:88:ba:18:91:
f5:3a:76:8d:17:65:1b:7a:7b:93:f0:66:10:39:ff:
4d:da:14:fa:8c:c6:cd:cd:9d:ab:f1:59:49:fb:74:
c7:3b:be:25:6d:35:17:21:d9:4d:10:7c:18:ef:cc:
53:29:2b:04:87:b1:04:75:58:2c:ba:83:f3:ed:05:
83:61:2c:16:26:7d:84:b1:d9:1d:d2:4b:61:0a:15:
b6:56:62:62:7d:d9:73:38:c8:49:d9:81:39:c4:87:
b2:3b:7b:82:7d:ef:4f:52:ef:44:ae:47:e2:86:3f:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D8:B1:EE:66:4D:6D:27:FA:35:10:3A:44:28:D2:A7:14:A4:CE:C5
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235322e302f32322d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.252.0/22
Signature Algorithm: sha256WithRSAEncryption
67:c4:4f:2d:9e:96:97:6e:ab:40:4f:cf:6c:98:5d:01:5a:54:
1e:fb:de:19:45:38:9b:4a:42:d8:c6:bc:14:cf:9e:1c:c0:36:
d3:76:a7:76:f1:8e:d8:e3:5a:4b:e1:64:34:57:ac:92:cf:86:
7f:93:e4:49:c4:ba:c7:d2:e6:50:d7:ed:41:6a:e9:6f:80:08:
65:58:5b:36:44:ee:ae:00:8b:f6:7f:a9:d3:cc:00:e2:77:f2:
7c:b9:81:c9:2c:b5:ef:bf:a9:07:3c:93:bf:25:64:b1:9c:de:
ad:ea:18:7f:c5:9e:83:1c:da:17:aa:c6:3c:f7:92:4c:cf:57:
93:6a:a1:e8:da:42:4a:c0:42:6d:c0:9f:aa:4c:64:a6:e3:4d:
b0:22:d7:08:c5:81:a8:cf:0c:ce:94:de:b5:f4:b5:16:d5:23:
f6:e4:4c:49:68:5a:cf:d4:47:03:06:60:af:c9:93:13:6b:64:
ec:ce:40:78:a6:a1:36:55:90:c9:c2:3a:dc:e3:b3:0d:4f:65:
d8:c4:0e:de:39:2a:92:66:3a:45:00:7e:92:a3:9a:ed:da:4f:
80:41:db:99:5a:51:66:fb:09:1e:b9:48:dc:99:c1:6d:28:d5:
2a:b5:9e:4b:b3:3a:50:bd:ba:ed:8e:6e:68:8d:48:f2:42:be:
07:e3:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:24:48 2026 by rpki-client