Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3234203d3e2038383838.roa
File: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: Ihgql9ypmtLmz9g9NyC+tlEXlUQI9mhObYIQ0n13EPE=
Subject key identifier: FC:BF:4C:34:9F:76:58:E9:EC:4F:65:CD:49:4B:A8:CA:49:27:42:C1
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 1FDA946CB46ADD27B8ABF0F613F80665539B9065
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3234203d3e2038383838.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 8888
IP address blocks: 185.37.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:da:94:6c:b4:6a:dd:27:b8:ab:f0:f6:13:f8:06:65:53:9b:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=FCBF4C349F7658E9EC4F65CD494BA8CA492742C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:25:f3:48:a1:bc:65:01:c9:69:c4:39:81:
25:5f:35:48:6f:5f:85:6a:8b:06:b7:4e:b6:e0:3d:
c1:de:30:7c:e2:52:56:6e:f8:e9:5a:11:84:be:fb:
24:38:85:74:99:d0:4c:5f:5b:a2:14:be:07:d7:89:
84:8d:18:7b:90:75:da:69:1a:d1:14:b5:84:c9:82:
3d:59:69:f3:56:03:d3:44:b7:3e:49:75:cc:43:00:
e6:6b:64:f8:56:24:cf:c2:a9:8b:65:bd:d4:ae:51:
f8:81:2d:3a:20:6c:90:10:42:1d:e3:da:4a:25:77:
6e:25:00:a1:fe:69:3e:3f:d2:ec:24:0a:ab:b9:85:
c7:37:7a:12:2a:d4:e4:5f:71:d2:bf:6d:33:8e:6d:
d1:d1:9d:db:65:8e:76:57:2a:38:74:f8:1b:13:b1:
c3:21:8f:b2:97:0e:53:f7:69:bf:c8:57:96:1e:26:
e9:21:5f:cf:1e:15:a5:94:cf:11:cc:cc:43:9e:0d:
0a:a8:47:7a:07:69:fd:ef:f0:44:8f:f2:95:ee:1c:
fc:47:3c:4f:a6:7e:c7:55:a3:29:f7:58:23:33:20:
97:dd:1a:c7:db:8e:8c:51:db:c6:b4:70:c7:9a:69:
16:3f:30:f8:38:b5:f2:95:c7:25:86:7b:11:21:2a:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:4C:34:9F:76:58:E9:EC:4F:65:CD:49:4B:A8:CA:49:27:42:C1
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cd:29:2c:ce:ad:2b:bf:3f:d4:69:d1:a7:33:4a:55:a1:87:
8d:31:29:14:b8:f2:e0:d1:11:08:59:df:ef:93:8a:f1:ce:07:
30:1b:17:d7:af:7f:cd:89:45:5d:62:6b:ac:7a:83:55:57:41:
d7:57:e1:86:69:b8:43:e9:68:d4:1e:5b:a9:aa:93:de:03:77:
9f:4f:93:f6:9e:cd:63:66:41:20:1c:68:3d:e4:d3:5c:c4:91:
df:87:5f:ea:1b:f3:d9:cd:4b:4c:88:c0:00:cb:26:f7:89:17:
e2:7e:cd:4a:50:db:6e:6d:aa:d2:24:4c:19:2b:3c:32:c2:59:
e4:46:c9:96:a3:24:60:33:52:31:97:6f:3a:d5:82:3d:ae:71:
77:31:89:5e:82:b0:a6:33:e8:e2:d2:b1:f9:ef:6c:e4:a9:22:
da:d8:22:16:c5:29:ec:32:c5:ba:b3:6e:91:3d:81:d5:72:68:
16:30:fb:63:10:3a:c5:1b:3f:21:33:45:61:0e:89:b7:e5:9d:
39:4a:e2:20:db:ce:7d:f3:34:9c:54:37:4d:1f:d6:c9:cc:5d:
4a:9c:77:3c:5c:42:ad:a5:3d:9a:29:f9:56:25:72:b9:24:e9:
50:63:4a:19:c9:ee:03:3a:87:65:89:af:15:ac:9c:34:ce:8d:
7c:e6:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:24:54 2026 by rpki-client