Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2039333132.roa
File: 326130613a616363303a3a2f32392d3438203d3e2039333132.roa (raw, json)
Hash identifier: tOBS2gY9swGZQ7YjwM/iPjwvKTbIdC5TLi/pInStkus=
Subject key identifier: 21:1A:D7:63:2F:51:EF:C0:D6:D8:2E:BA:84:2E:81:EB:97:24:56:1D
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 4A6E93D6B7C87853352E73E473C492E282177E96
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2039333132.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 9312
IP address blocks: 2a0a:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6e:93:d6:b7:c8:78:53:35:2e:73:e4:73:c4:92:e2:82:17:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=211AD7632F51EFC0D6D82EBA842E81EB9724561D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:83:b6:75:c2:89:62:1a:a0:17:94:12:c3:
f7:95:42:7c:0d:5c:fe:e6:0b:97:b9:c6:26:8e:76:
cc:e5:84:d5:53:81:44:4a:3b:3f:60:f4:f2:67:92:
11:05:52:ec:86:69:cd:dd:7b:ec:9f:97:57:ac:06:
8a:b4:ff:60:94:df:e8:7c:5f:c8:f1:f4:99:f7:df:
79:1e:db:d5:bb:2a:49:dd:61:46:fc:cd:f4:49:52:
7c:4d:dd:a7:44:6b:5a:e2:b3:87:f2:6c:6a:3e:a1:
a8:05:17:28:33:09:50:aa:e4:1a:f2:00:df:8e:53:
d7:a7:d3:a4:19:fb:7c:f2:50:3d:82:24:45:20:a4:
4f:d1:c4:7f:8d:39:64:b9:17:10:43:f2:c7:cb:01:
0c:39:c1:be:20:d7:5e:f3:29:0f:55:e1:96:93:93:
7f:59:22:5f:99:26:52:8e:64:90:c7:c6:c9:fd:94:
41:b2:9c:5b:e6:4d:4a:dd:b7:67:dd:a3:91:1c:f0:
17:dd:3d:c1:6c:9c:35:a2:a7:8c:1b:95:4d:64:9d:
e8:15:bd:63:07:26:4f:b6:e5:d2:85:a0:34:4a:7e:
af:a1:94:d1:80:4e:8f:f0:e2:2d:b7:cc:de:e6:39:
34:f8:b1:d8:c8:2a:b7:59:1a:c1:56:08:e9:f0:7a:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:D7:63:2F:51:EF:C0:D6:D8:2E:BA:84:2E:81:EB:97:24:56:1D
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f32392d3438203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
d0:cb:f1:0a:85:aa:c9:91:a8:ea:74:2d:f9:33:97:56:01:3e:
36:10:50:16:69:57:7c:31:22:03:20:bb:fe:0e:df:e1:31:a5:
8a:36:c3:87:4e:51:d4:0e:10:95:ad:91:b9:d3:b6:22:17:c3:
b6:96:3e:8b:b7:4f:0f:f2:40:04:b1:8d:57:48:25:a0:70:a0:
f0:ef:bf:8a:3a:5f:7f:cf:75:aa:23:be:0a:79:f6:74:19:f8:
2d:40:88:08:6d:0c:1d:ea:a1:fd:ea:7c:d4:6f:f3:86:84:59:
96:80:5e:6e:13:6a:e6:2f:d6:f1:e1:e0:ec:0e:35:43:8a:e1:
3f:9e:07:5d:d8:ea:5d:c7:54:36:d5:21:45:b0:93:82:90:61:
bb:ef:8b:2e:5a:1c:88:98:dd:28:93:91:49:8c:7f:99:6e:d3:
4b:f8:25:46:aa:51:65:7f:fa:10:6f:84:6f:71:bc:bb:19:4b:
a5:8d:cb:5b:93:02:62:23:2c:4e:79:d3:4d:70:e8:cc:6a:a8:
64:bd:c3:ca:de:ae:ff:b1:14:de:ca:e6:a5:81:f8:d2:b2:1b:
eb:a3:6f:a8:ad:47:50:66:67:ab:de:fd:64:46:8c:10:ff:22:
2b:c1:d8:f7:a2:9a:11:0f:89:fe:8e:26:cd:16:df:b7:29:a5:
da:14:b3:42
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUSm6T1rfIeFM1LnPkc8SS4oIXfpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDMwNDhaFw0yNzA3MDExMDM1NDhaMDMxMTAvBgNV
BAMTKDIxMUFENzYzMkY1MUVGQzBENkQ4MkVCQTg0MkU4MUVCOTcyNDU2MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdIO2dcKJYhqgF5QSw/eVQnwN
XP7mC5e5xiaOdszlhNVTgURKOz9g9PJnkhEFUuyGac3de+yfl1esBoq0/2CU3+h8
X8jx9Jn333ke29W7KkndYUb8zfRJUnxN3adEa1ris4fybGo+oagFFygzCVCq5Bry
AN+OU9en06QZ+3zyUD2CJEUgpE/RxH+NOWS5FxBD8sfLAQw5wb4g117zKQ9V4ZaT
k39ZIl+ZJlKOZJDHxsn9lEGynFvmTUrdt2fdo5Ec8BfdPcFsnDWip4wblU1knegV
vWMHJk+25dKFoDRKfq+hlNGATo/w4i23zN7mOTT4sdjIKrdZGsFWCOnwepRhAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUIRrXYy9R78DW2C66hC6B65ckVh0wHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MTNhNjE2MzYzMzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzOTMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoKrMAwDQYJKoZIhvcNAQEL
BQADggEBANDL8QqFqsmRqOp0Lfkzl1YBPjYQUBZpV3wxIgMgu/4O3+ExpYo2w4dO
UdQOEJWtkbnTtiIXw7aWPou3Tw/yQASxjVdIJaBwoPDvv4o6X3/Pdaojvgp59nQZ
+C1AiAhtDB3qof3qfNRv84aEWZaAXm4TauYv1vHh4OwONUOK4T+eB13Y6l3HVDbV
IUWwk4KQYbvviy5aHIiY3SiTkUmMf5lu00v4JUaqUWV/+hBvhG9xvLsZS6WNy1uT
AmIjLE55001w6MxqqGS9w8rerv+xFN7K5qWB+NKyG+ujb6itR1BmZ6ve/WRGjBD/
IivB2PeimhEPif6OJs0W37cppdoUs0I=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:13 2026 by rpki-client