Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2034373835.roa
File: 326130613a616363303a3a2f32392d3438203d3e2034373835.roa (raw, json)
Hash identifier: RKXMzviCZvk1IB+PsABYrV6dhnmh023yE16Wt72ZWBI=
Subject key identifier: 5D:FF:F2:CC:EF:24:79:AA:61:5D:2F:75:82:B6:FD:B6:9A:2B:2A:12
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 55EE4062B965CC495F0DB2653EB9B23368B580F9
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2034373835.roa
Signing time: Thu 02 Jul 2026 11:29:53 +0000
ROA not before: Thu 02 Jul 2026 11:24:53 +0000
ROA not after: Thu 01 Jul 2027 11:29:53 +0000
asID: 4785
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ee:40:62:b9:65:cc:49:5f:0d:b2:65:3e:b9:b2:33:68:b5:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 11:24:53 2026 GMT
Not After : Jul 1 11:29:53 2027 GMT
Subject: CN=5DFFF2CCEF2479AA615D2F7582B6FDB69A2B2A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:59:a0:85:c4:1b:2e:1c:67:af:46:69:15:
a4:c9:9a:58:5a:a7:09:d3:8a:89:93:b6:95:57:39:
1a:1d:13:91:86:33:dd:ef:df:68:c5:77:cd:9b:53:
30:99:a9:9e:3a:eb:4f:ce:1a:b3:f8:36:66:a4:a5:
07:63:04:9a:8a:a9:40:9f:f3:b0:69:41:b4:93:e4:
94:f3:d4:67:36:cf:be:51:7a:bc:a5:5d:f7:32:87:
55:1f:2e:16:b7:fa:07:3a:3f:42:df:b7:a9:0a:b6:
1d:62:8e:83:4e:1b:4b:86:e4:7e:21:6b:97:57:bc:
02:27:97:82:89:97:31:16:7d:f5:24:8d:ce:9a:23:
52:89:66:6f:a0:68:23:3b:78:df:e9:26:34:b9:71:
aa:89:36:4d:47:15:aa:6d:0b:b1:a2:ac:a8:c9:4d:
15:c5:02:f7:b1:69:88:56:66:9d:d0:f0:e8:e0:7b:
1b:32:d6:c0:43:e7:27:c6:14:a7:84:7c:8e:82:d6:
29:2f:7e:a6:0f:89:b7:38:a1:6d:16:9d:6a:6a:ca:
b0:35:7f:6c:b1:04:c7:a4:e4:ba:63:cb:5f:6d:b5:
97:69:e8:14:19:40:d0:15:18:07:17:59:8e:21:df:
68:7b:e0:a7:7d:49:33:90:93:3e:eb:a5:06:91:ca:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FF:F2:CC:EF:24:79:AA:61:5D:2F:75:82:B6:FD:B6:9A:2B:2A:12
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:6d:b6:ed:28:8e:50:bb:cb:a5:c6:c5:e2:85:08:9f:ce:0b:
96:09:25:ec:06:4f:b8:1f:24:87:6e:56:7a:18:e2:40:e0:fd:
1c:b8:5d:74:b8:0f:d7:e3:63:31:60:aa:65:a9:66:7f:33:93:
5e:db:7e:3c:1a:cf:2f:e5:d0:a1:7d:5f:f3:54:74:7b:a0:ba:
dc:f8:5a:d6:60:9f:2a:3b:6e:fb:30:81:5f:6e:4b:d1:49:3d:
a7:f4:65:ce:8a:2b:ca:0b:a5:f7:ec:49:84:aa:4d:5f:54:7f:
85:bf:74:68:b0:89:12:24:03:4f:99:06:4d:31:7a:5b:fe:ac:
79:94:9a:e0:cc:4e:b2:60:7f:e9:95:fe:b3:0a:d2:90:64:eb:
d1:7d:e3:26:69:96:82:3c:c5:1e:7b:c4:92:25:59:09:2e:57:
9c:eb:65:67:17:c9:ff:98:6b:33:95:0b:36:14:96:d1:4c:2f:
a1:3a:15:91:b5:d3:15:9c:aa:c0:30:0f:d4:65:19:e6:5c:04:
c8:a0:63:c8:05:a7:92:22:fd:a1:b9:c7:5d:25:e7:8e:25:ed:
18:81:6d:e0:47:c4:54:19:2e:4f:aa:10:2e:37:f7:40:7f:05:
2c:ea:b9:84:fc:60:63:eb:d4:96:5d:97:5f:0e:3e:f1:5c:63:
95:2c:43:a3
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUVe5AYrllzElfDbJlPrmyM2i1gPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMTI0NTNaFw0yNzA3MDExMTI5NTNaMDMxMTAvBgNV
BAMTKDVERkZGMkNDRUYyNDc5QUE2MTVEMkY3NTgyQjZGREI2OUEyQjJBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCky1mghcQbLhxnr0ZpFaTJmlha
pwnTiomTtpVXORodE5GGM93v32jFd82bUzCZqZ4660/OGrP4NmakpQdjBJqKqUCf
87BpQbST5JTz1Gc2z75RerylXfcyh1UfLha3+gc6P0Lft6kKth1ijoNOG0uG5H4h
a5dXvAInl4KJlzEWffUkjc6aI1KJZm+gaCM7eN/pJjS5caqJNk1HFaptC7GirKjJ
TRXFAvexaYhWZp3Q8Ojgexsy1sBD5yfGFKeEfI6C1ikvfqYPibc4oW0WnWpqyrA1
f2yxBMek5Lpjy19ttZdp6BQZQNAVGAcXWY4h32h74Kd9STOQkz7rpQaRyv0nAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUXf/yzO8keaphXS91grb9tporKhIwHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MTNhNjE2MzYzMzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoKrMAwDQYJKoZIhvcNAQEL
BQADggEBAA9ttu0ojlC7y6XGxeKFCJ/OC5YJJewGT7gfJIduVnoY4kDg/Ry4XXS4
D9fjYzFgqmWpZn8zk17bfjwazy/l0KF9X/NUdHugutz4WtZgnyo7bvswgV9uS9FJ
Paf0Zc6KK8oLpffsSYSqTV9Uf4W/dGiwiRIkA0+ZBk0xelv+rHmUmuDMTrJgf+mV
/rMK0pBk69F94yZploI8xR57xJIlWQkuV5zrZWcXyf+YazOVCzYUltFML6E6FZG1
0xWcqsAwD9RlGeZcBMigY8gFp5Ii/aG5x10l544l7RiBbeBHxFQZLk+qEC4390B/
BSzquYT8YGPr1JZdl18OPvFcY5UsQ6M=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:03:45 2026 by rpki-client