Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2038383838.roa
File: 326130343a366630303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier: oXa1kl5VtWjksC0XNubC3CC+tjwH8QB7Y2BFCQ9HHg4=
Subject key identifier: 4F:DD:69:5D:32:A0:62:21:2B:F1:02:5D:7D:69:0B:23:DF:FD:7F:5B
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 5E7AC4113A6690B5538B57CC22F6273430D87196
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2038383838.roa
Signing time: Thu 02 Jul 2026 10:19:49 +0000
ROA not before: Thu 02 Jul 2026 10:14:49 +0000
ROA not after: Thu 01 Jul 2027 10:19:49 +0000
asID: 8888
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7a:c4:11:3a:66:90:b5:53:8b:57:cc:22:f6:27:34:30:d8:71:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:14:49 2026 GMT
Not After : Jul 1 10:19:49 2027 GMT
Subject: CN=4FDD695D32A062212BF1025D7D690B23DFFD7F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:17:86:cb:d5:c0:00:83:e6:af:1c:e9:55:
ab:7d:8b:c6:99:7a:d5:b5:3f:7f:71:f9:89:bd:dd:
5e:eb:11:30:ff:56:8d:f3:e4:ea:75:50:e0:fc:5b:
e0:1d:55:a2:aa:17:4b:e7:4c:f1:1d:e3:e0:7e:4e:
06:f3:e6:9a:5e:11:5e:70:d8:dd:e4:6e:6a:05:8f:
c8:95:4b:6a:47:6c:e1:77:58:ae:4d:8f:68:85:5d:
fa:ba:47:48:9c:6f:18:7b:aa:28:7f:14:84:5a:0a:
2d:dc:f4:b8:83:ef:37:47:f1:21:04:8a:71:82:6c:
1f:ff:99:7e:41:02:26:7a:ae:c6:d8:e7:13:73:6b:
bc:81:88:f6:ff:f0:fd:96:1c:9c:04:8a:78:55:b0:
d0:76:6e:bc:04:98:d3:6c:c9:32:d8:90:52:1f:4d:
cb:d7:c4:2f:45:d4:f5:a3:96:99:2c:86:7d:73:51:
32:a0:90:0b:ab:58:23:63:54:10:b3:2c:46:c4:bb:
6c:10:a3:f3:9e:c4:aa:68:9d:f6:aa:97:f3:6a:19:
6c:f2:7c:23:a6:cd:da:8e:94:c1:6d:05:a8:07:34:
5f:c5:ac:92:df:69:5e:95:0d:3a:89:7d:21:04:fd:
f4:76:0a:6a:bd:a6:8c:41:67:2e:28:ad:15:a2:8f:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:69:5D:32:A0:62:21:2B:F1:02:5D:7D:69:0B:23:DF:FD:7F:5B
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
14:77:c9:55:4e:04:fa:85:18:62:31:38:93:89:56:e5:96:4f:
60:4f:e6:59:1e:da:7a:8f:43:c2:d2:c1:0c:89:3d:0b:60:a5:
f7:ab:12:b2:7b:38:16:0e:3c:a7:2f:83:55:ff:65:78:6a:15:
2f:c8:a6:0f:9b:88:c5:5f:da:cb:1c:5b:8b:dd:cf:1f:80:81:
d3:b7:e7:6d:06:80:41:4d:e7:d6:fb:ca:e0:55:37:05:ca:09:
40:07:bd:c4:bd:a8:3f:e1:21:6d:96:18:56:0e:11:c9:36:ed:
1d:97:15:7e:3c:04:bb:70:74:f6:0c:cd:88:d3:fa:fa:1d:ed:
00:e9:2c:6f:fc:be:41:3c:03:f0:97:bb:3f:a1:27:4a:c5:fe:
c8:dd:7b:69:d6:b4:dd:fe:4e:83:fc:7e:bb:e2:18:45:c2:c0:
ad:f4:67:75:75:36:7b:b4:0b:10:5c:8f:9d:10:6b:0a:11:00:
49:bf:a9:06:c8:d8:1c:b9:21:25:85:e9:a6:52:f1:0f:98:12:
bd:8d:65:29:0e:4b:3a:00:d0:f1:61:68:10:ea:8e:82:38:28:
c3:c1:a2:b1:88:5c:c9:62:e1:cb:b5:f9:a4:4e:2e:4d:22:b6:
73:2c:3f:b4:37:a8:80:1d:ea:aa:2c:b6:fb:83:c7:7a:f9:47:
92:94:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:42 2026 by rpki-client