Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2038383838.roa
File: 326130613a616363303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier: IQcLjxDOLUrIOOnWx1HmC7tJ30uQHCWKezIwP5pxKbI=
Subject key identifier: 22:EC:49:05:A3:5C:03:13:29:BA:A5:18:E8:7C:10:8A:1C:3F:F0:9E
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 523EE0CB58B1169CC5E0530E0FF4EBEEB99C1218
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2038383838.roa
Signing time: Thu 02 Jul 2026 10:18:56 +0000
ROA not before: Thu 02 Jul 2026 10:13:56 +0000
ROA not after: Thu 01 Jul 2027 10:18:56 +0000
asID: 8888
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3e:e0:cb:58:b1:16:9c:c5:e0:53:0e:0f:f4:eb:ee:b9:9c:12:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:13:56 2026 GMT
Not After : Jul 1 10:18:56 2027 GMT
Subject: CN=22EC4905A35C031329BAA518E87C108A1C3FF09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:32:c0:58:d0:50:19:03:9f:21:32:d9:c1:
04:2c:0b:e2:7d:69:d7:70:6c:f1:88:1b:ba:3a:26:
a0:ec:f5:c9:e7:2c:28:e8:b0:40:9e:27:05:57:39:
d0:5e:d9:c0:dc:b0:e2:a1:2b:69:af:6c:83:14:48:
55:bc:58:fa:9a:de:95:55:48:c6:1b:d4:66:dc:bc:
f8:3d:ee:c6:61:ef:26:0c:7e:d8:d6:41:94:91:38:
4f:5a:59:8a:e9:a0:63:ad:f9:17:e3:ad:67:9b:07:
1e:3d:d2:d6:0b:9b:48:9b:d1:90:23:31:69:37:ef:
a9:2a:1a:a2:27:e7:d9:c1:e6:aa:d4:93:bd:9c:2b:
23:22:49:ac:9c:17:5f:53:bc:0e:31:cb:a4:53:2a:
c8:8a:94:a2:98:29:30:a2:f8:be:66:40:5b:7d:1e:
f4:22:96:97:73:6b:4a:bb:87:b0:7d:6d:8e:93:5c:
22:92:53:2b:36:13:b2:d6:24:ca:02:a9:2c:fc:ff:
d1:30:e9:28:ad:59:f9:02:48:6d:01:57:e7:a0:3c:
a4:0b:4f:6f:fb:95:6c:81:b3:84:7b:78:46:60:51:
77:08:29:f3:80:53:c8:9d:f9:14:d0:0d:37:e4:b7:
dd:da:1d:89:9a:a6:b9:64:87:bf:1f:b1:95:f9:0a:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:49:05:A3:5C:03:13:29:BA:A5:18:E8:7C:10:8A:1C:3F:F0:9E
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:97:99:1a:b9:c0:d7:6b:45:57:a0:a3:1b:75:80:00:5d:20:
52:b9:ee:f6:29:de:9f:88:7a:98:28:fd:c0:0a:86:9d:2c:a8:
b6:e4:f4:ff:7f:2d:81:bd:2b:1d:4f:a8:20:67:4f:02:28:5e:
e9:eb:af:22:74:d7:1f:19:22:d1:c9:a0:78:a2:7a:2b:f5:88:
24:dd:b0:8c:a1:78:28:c5:df:6c:ed:81:0a:1d:9e:ed:4e:34:
8c:f4:b2:e3:95:06:5b:36:d0:d4:c8:0a:ba:e1:aa:63:23:01:
f0:75:c6:43:87:69:ec:79:f7:0c:51:f6:39:29:e8:21:f0:62:
b8:ad:af:f7:5e:35:f5:d1:b4:6e:46:a8:33:91:1a:99:14:66:
ad:74:f4:54:d3:ed:d1:b7:cb:e4:80:d0:1e:07:11:fc:88:db:
07:e3:95:5c:79:a3:e3:ae:f2:85:5b:f2:37:cc:29:17:fe:ba:
ab:f1:43:91:36:18:97:15:29:29:6a:42:c6:8f:48:57:65:0f:
e5:b1:4a:a3:d5:8c:7c:be:21:92:23:6b:5f:d7:3e:03:2b:6b:
5a:e6:03:61:13:a0:03:69:2c:0c:8a:c7:a4:62:2d:99:7e:2a:
2d:40:a1:54:73:f8:05:62:18:17:cd:bc:c0:4d:c1:b9:ab:08:
d8:72:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:42 2026 by rpki-client