Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2034373835.roa
File: 326130343a366630303a3a2f32392d3438203d3e2034373835.roa (raw, json)
Hash identifier: kCtu7W0EOk2Y80tbhnPA2n0lwMkAe3JkAIWfSuNjSQg=
Subject key identifier: 1B:57:6A:58:42:5D:BF:D8:DA:8C:E8:78:67:C7:B9:54:66:5A:06:63
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 06809520473469E2B012B1C39FF25BEAD37179CE
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2034373835.roa
Signing time: Thu 02 Jul 2026 11:29:53 +0000
ROA not before: Thu 02 Jul 2026 11:24:53 +0000
ROA not after: Thu 01 Jul 2027 11:29:53 +0000
asID: 4785
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:80:95:20:47:34:69:e2:b0:12:b1:c3:9f:f2:5b:ea:d3:71:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 11:24:53 2026 GMT
Not After : Jul 1 11:29:53 2027 GMT
Subject: CN=1B576A58425DBFD8DA8CE87867C7B954665A0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:7e:b6:87:51:34:9b:9a:88:31:0a:3b:1f:
99:79:42:83:ae:78:97:dc:8a:28:42:fa:5a:e4:60:
50:98:69:04:05:e9:a7:17:32:6a:7c:42:b4:00:78:
0a:f0:ef:47:74:b6:38:a9:a9:a8:c6:2b:36:30:3a:
a3:17:9e:a7:11:bf:c1:ac:e0:54:64:24:c5:82:ab:
d7:29:f9:f2:fa:6c:c0:d3:66:94:71:56:48:07:6d:
f0:df:72:99:91:91:0e:87:59:87:90:a2:51:0b:d0:
eb:f1:98:1b:e9:63:90:8f:71:b1:fe:d0:01:71:92:
fb:5a:8b:83:f3:44:7f:4b:0f:49:40:29:9e:93:90:
55:59:f0:59:2a:9e:31:c7:77:50:61:a8:5d:0d:ca:
66:8b:c5:cc:e9:e6:2e:bc:50:a1:6b:92:71:23:92:
5f:3e:a4:d4:42:c6:34:88:da:3d:fc:98:72:4c:b8:
e0:bb:23:b5:38:21:35:9d:65:ff:73:37:ba:86:e9:
c9:36:44:3b:7f:d0:cb:6c:9c:2d:43:fa:8c:9d:ea:
fd:12:5f:2f:a8:cd:a2:71:18:4a:4a:26:68:6e:e7:
ff:6e:20:dd:93:ff:c0:95:12:c7:3a:33:16:53:2f:
49:1d:b5:9d:1b:c3:03:2d:cd:c2:ad:08:c4:d5:0b:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:6A:58:42:5D:BF:D8:DA:8C:E8:78:67:C7:B9:54:66:5A:06:63
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:b2:8a:a9:a9:e2:16:9f:bc:8d:c5:a5:33:de:98:25:12:7f:
28:c9:a0:6e:81:5e:99:25:1f:71:6e:f4:df:b6:1a:04:7f:b9:
54:85:f2:3e:c3:05:36:60:8d:4c:0e:d9:15:8c:cd:0a:69:0e:
b3:c1:1f:d9:13:a2:a7:f2:b3:ef:08:8d:89:2a:91:ef:02:9b:
f1:da:f9:a9:5c:d8:28:25:8b:0c:90:c1:38:f6:d5:7e:d4:c4:
64:6d:91:53:81:9d:e8:c0:f7:ec:9a:3a:65:ef:fd:72:6b:0c:
40:93:43:af:2f:71:2b:45:e8:5d:f9:8c:77:cd:f5:4a:c4:b2:
8d:a4:9b:da:2d:51:c8:08:54:a8:ad:24:50:eb:dd:9d:a0:83:
c0:d6:77:ce:21:72:73:46:21:bf:bb:06:51:bc:91:b8:ad:62:
e5:7d:41:35:6c:34:bc:41:86:5d:7f:c3:9e:12:bc:92:af:1c:
b9:a3:46:14:d3:2e:aa:49:ad:36:3c:ad:65:6b:97:c9:05:cf:
77:47:be:5c:e4:98:59:24:57:97:4d:8f:6c:8c:95:57:af:a1:
2a:26:b2:3e:a4:9e:82:c8:2d:ca:94:db:1c:f1:fc:d6:02:d8:
4a:26:1c:30:b8:54:08:f2:f5:a7:04:7c:19:ef:bf:67:08:f4:
f0:01:f8:95
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUBoCVIEc0aeKwErHDn/Jb6tNxec4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMTI0NTNaFw0yNzA3MDExMTI5NTNaMDMxMTAvBgNV
BAMTKDFCNTc2QTU4NDI1REJGRDhEQThDRTg3ODY3QzdCOTU0NjY1QTA2NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnH62h1E0m5qIMQo7H5l5QoOu
eJfciihC+lrkYFCYaQQF6acXMmp8QrQAeArw70d0tjipqajGKzYwOqMXnqcRv8Gs
4FRkJMWCq9cp+fL6bMDTZpRxVkgHbfDfcpmRkQ6HWYeQolEL0OvxmBvpY5CPcbH+
0AFxkvtai4PzRH9LD0lAKZ6TkFVZ8FkqnjHHd1BhqF0NymaLxczp5i68UKFrknEj
kl8+pNRCxjSI2j38mHJMuOC7I7U4ITWdZf9zN7qG6ck2RDt/0MtsnC1D+oyd6v0S
Xy+ozaJxGEpKJmhu5/9uIN2T/8CVEsc6MxZTL0kdtZ0bwwMtzcKtCMTVCx+7AgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUG1dqWEJdv9jajOh4Z8e5VGZaBmMwHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzAzNDNhMzY2NjMwMzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoEbwAwDQYJKoZIhvcNAQEL
BQADggEBAI+yiqmp4hafvI3FpTPemCUSfyjJoG6BXpklH3Fu9N+2GgR/uVSF8j7D
BTZgjUwO2RWMzQppDrPBH9kToqfys+8IjYkqke8Cm/Ha+alc2CgliwyQwTj21X7U
xGRtkVOBnejA9+yaOmXv/XJrDECTQ68vcStF6F35jHfN9UrEso2km9otUcgIVKit
JFDr3Z2gg8DWd84hcnNGIb+7BlG8kbitYuV9QTVsNLxBhl1/w54SvJKvHLmjRhTT
LqpJrTY8rWVrl8kFz3dHvlzkmFkkV5dNj2yMlVevoSomsj6knoLILcqU2xzx/NYC
2EomHDC4VAjy9acEfBnvv2cI9PAB+JU=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:03:45 2026 by rpki-client