Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2039333132.roa
File: 326130343a366630303a3a2f32392d3438203d3e2039333132.roa (raw, json)
Hash identifier: SmdZ44+ZucP257tWVbEIrDw1wsVM0cupMFGSRkGRbTs=
Subject key identifier: 1B:05:1D:7B:4D:8C:A1:01:CD:C9:6D:13:7B:3D:05:4F:C7:FD:51:11
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 1B0DD83FAC94BFEAD8A50CAF0064F0BF79B04A4B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2039333132.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 9312
IP address blocks: 2a04:6f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0d:d8:3f:ac:94:bf:ea:d8:a5:0c:af:00:64:f0:bf:79:b0:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=1B051D7B4D8CA101CDC96D137B3D054FC7FD5111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:5f:6d:ed:48:37:a2:b3:3d:c6:ca:be:e5:
55:88:7e:3d:7c:b4:9d:19:fe:44:63:0c:a1:ad:7c:
83:50:3a:0e:d3:46:57:60:d7:4f:00:14:35:1f:40:
ff:2b:ae:ec:e3:7b:36:3f:c8:3d:c1:39:78:f0:ff:
fb:2c:b9:ba:a5:df:be:af:37:78:97:0e:e8:1d:f3:
38:75:f9:4a:9c:0f:82:c5:90:a5:d0:78:a9:5b:6b:
90:23:c6:8e:14:c4:3e:e2:af:5e:8f:62:4f:4d:bc:
08:2d:0f:67:6f:e6:e3:0d:7b:be:4e:f3:58:6c:7f:
7a:5a:24:b9:b9:d8:c3:f6:c1:d1:f6:ee:8e:31:16:
03:a3:45:fc:34:04:58:10:e5:59:e4:5d:6d:d2:8e:
53:ad:8e:0c:d0:e1:46:36:36:1a:b6:60:04:5d:b1:
28:f7:2c:52:fc:19:45:a6:ed:e5:ed:e7:1e:a8:37:
fd:3c:27:86:a9:c4:30:b8:a5:ee:a8:d6:72:f9:1f:
05:89:48:e4:5a:cd:be:5d:9d:0b:a5:70:39:87:ea:
3f:c0:d6:6b:18:b1:fb:42:33:14:8e:9d:74:a2:39:
3a:9c:19:e4:d0:99:50:06:0f:b5:b2:0d:92:3b:2a:
ea:3b:31:75:80:28:a4:f5:8b:67:7b:8d:a0:c9:75:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:05:1D:7B:4D:8C:A1:01:CD:C9:6D:13:7B:3D:05:4F:C7:FD:51:11
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f32392d3438203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
a5:66:5b:b6:73:dc:1d:dd:8a:16:a2:bc:8c:ae:84:17:e2:0f:
39:6c:d4:47:46:df:66:38:fc:11:d0:32:4f:f9:d3:ac:16:91:
18:84:9c:08:e3:b6:a9:73:10:9b:ea:e1:d8:cd:40:a3:35:b1:
e0:d9:b7:6f:cc:54:f9:9c:be:00:b4:c8:47:bc:5b:f9:ee:0a:
f7:61:e9:84:76:90:ec:81:8c:60:90:b1:db:fc:d7:70:a2:97:
a3:a0:05:2d:b2:d4:82:8b:fd:e1:20:3b:28:f3:00:a2:9a:4d:
51:ba:72:6b:f8:77:65:22:2b:ad:00:37:99:bd:9a:a0:53:2a:
32:7b:d4:df:10:a0:67:1e:83:c8:ab:b5:17:6d:b6:20:e2:aa:
1e:68:65:bb:bd:5d:40:ca:22:4f:29:c1:5e:93:60:3a:4a:41:
f4:0e:fd:c1:f2:6d:a1:fa:63:3c:cd:7b:7a:59:34:0b:30:69:
83:06:60:c4:9d:96:88:87:5d:b6:bb:b1:3a:dd:d0:ca:2e:6e:
d6:ce:87:54:30:ef:dc:4f:57:20:d8:1f:94:b1:3f:e4:ef:36:
3a:1d:63:b5:64:db:a1:87:34:ad:e1:a8:52:51:4e:d4:ae:b3:
95:19:6c:22:b1:cd:1f:36:90:84:a6:57:3b:85:ca:d4:25:65:
be:84:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:13 2026 by rpki-client