Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2034373835.roa
File: 326130623a323534303a3a2f32392d3438203d3e2034373835.roa (raw, json)
Hash identifier: ZEj0DTD25bZ7PC0opsTPkh7gkNxTCDCLDG9C1Twmxzw=
Subject key identifier: 67:6C:B1:CE:22:C8:DF:D1:B5:BB:3E:2E:30:B5:87:17:FD:28:66:1D
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 637329B85478CF6C63859B5E1750AE5CB71CE34F
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2034373835.roa
Signing time: Thu 02 Jul 2026 11:29:53 +0000
ROA not before: Thu 02 Jul 2026 11:24:53 +0000
ROA not after: Thu 01 Jul 2027 11:29:53 +0000
asID: 4785
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:73:29:b8:54:78:cf:6c:63:85:9b:5e:17:50:ae:5c:b7:1c:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 11:24:53 2026 GMT
Not After : Jul 1 11:29:53 2027 GMT
Subject: CN=676CB1CE22C8DFD1B5BB3E2E30B58717FD28661D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:c6:85:7a:80:0a:a1:a5:a7:50:7f:d7:ac:
7f:12:3a:aa:b5:f0:29:43:62:df:fa:ad:a5:91:c3:
1d:0b:ee:ad:7b:c9:de:8a:0a:89:a2:78:44:af:07:
10:c3:55:c1:2d:95:7f:a8:00:10:73:23:73:5a:29:
99:86:a0:bf:d0:4c:2f:65:94:49:c8:f4:9a:af:3b:
33:63:5c:49:0f:ec:ee:45:6b:c9:b3:2f:04:11:bc:
95:ec:69:c0:b1:f3:49:75:27:1c:94:88:0d:16:1f:
ca:dc:0b:18:99:36:be:a5:79:4d:02:5c:0c:34:92:
85:2b:72:d0:3f:e3:65:59:2e:2b:ac:96:a2:11:29:
a3:1b:33:87:16:1d:7d:69:33:6b:8f:f9:f0:d3:ef:
27:2b:17:a1:13:ef:96:a3:e7:6c:59:da:47:9d:07:
2b:93:40:f8:81:98:5c:84:37:ae:98:36:e4:db:6e:
e8:53:1a:d0:24:25:eb:34:cc:69:32:9e:7c:7e:ba:
25:34:f8:12:db:ed:d0:3e:a9:f9:18:ae:5b:16:69:
35:df:86:af:0c:7b:4d:7a:0d:4c:b3:c2:e1:e3:96:
65:69:26:7f:e6:5e:23:a6:a9:e2:1f:72:87:cd:2b:
f2:c0:ac:3e:fe:14:09:f5:df:36:08:b5:2d:ce:a1:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:B1:CE:22:C8:DF:D1:B5:BB:3E:2E:30:B5:87:17:FD:28:66:1D
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
04:57:85:2a:bb:85:7a:da:ad:64:01:5d:bc:d8:70:d3:2f:bc:
ba:a6:b4:96:c8:17:03:3a:4a:29:ab:d4:d1:29:a4:67:15:72:
58:11:d7:5e:37:d6:6e:84:47:fa:42:5e:8a:e7:ef:d7:d0:6f:
f3:15:73:6e:91:0b:bc:90:84:ce:75:64:3a:ad:93:de:f9:8f:
12:b9:e8:46:81:d5:bc:62:d1:17:49:bb:7f:6c:d0:30:e5:2b:
3e:89:fe:74:a6:86:a5:1f:53:cb:9b:e6:32:0d:95:47:58:08:
aa:fb:9e:79:b4:87:2e:3c:59:18:b7:af:9f:7c:09:97:42:80:
32:75:ad:5c:a2:cc:c7:3d:c3:33:8a:26:2a:db:92:28:24:fe:
eb:96:82:ea:78:ae:dd:1b:2c:28:e8:7b:af:0f:9d:5e:2a:92:
0a:d0:74:a7:b6:bf:7e:96:de:7f:ff:f3:ba:5a:96:01:26:4f:
56:50:af:54:5d:ab:2e:08:bb:ae:6e:70:f0:84:59:43:9e:34:
c8:cf:1b:75:30:d0:c5:40:d4:ea:73:09:a3:5a:72:cd:c2:29:
58:07:22:3d:79:98:f9:e7:c5:ce:21:1a:c0:3d:bf:b6:66:64:
e1:d3:07:50:6a:b6:2b:6e:57:e6:09:c7:96:8d:b4:2c:ff:2d:
60:f2:f6:80
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUY3MpuFR4z2xjhZteF1CuXLcc408wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMTI0NTNaFw0yNzA3MDExMTI5NTNaMDMxMTAvBgNV
BAMTKDY3NkNCMUNFMjJDOERGRDFCNUJCM0UyRTMwQjU4NzE3RkQyODY2MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChocaFeoAKoaWnUH/XrH8SOqq1
8ClDYt/6raWRwx0L7q17yd6KComieESvBxDDVcEtlX+oABBzI3NaKZmGoL/QTC9l
lEnI9JqvOzNjXEkP7O5Fa8mzLwQRvJXsacCx80l1JxyUiA0WH8rcCxiZNr6leU0C
XAw0koUrctA/42VZLiuslqIRKaMbM4cWHX1pM2uP+fDT7ycrF6ET75aj52xZ2ked
ByuTQPiBmFyEN66YNuTbbuhTGtAkJes0zGkynnx+uiU0+BLb7dA+qfkYrlsWaTXf
hq8Me016DUyzwuHjlmVpJn/mXiOmqeIfcofNK/LArD7+FAn13zYItS3OoUnhAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUZ2yxziLI39G1uz4uMLWHF/0oZh0wHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MjNhMzIzNTM0MzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzNDM3MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoLJUAwDQYJKoZIhvcNAQEL
BQADggEBAARXhSq7hXrarWQBXbzYcNMvvLqmtJbIFwM6Simr1NEppGcVclgR1143
1m6ER/pCXorn79fQb/MVc26RC7yQhM51ZDqtk975jxK56EaB1bxi0RdJu39s0DDl
Kz6J/nSmhqUfU8ub5jINlUdYCKr7nnm0hy48WRi3r598CZdCgDJ1rVyizMc9wzOK
Jirbkigk/uuWgup4rt0bLCjoe68PnV4qkgrQdKe2v36W3n//87palgEmT1ZQr1Rd
qy4Iu65ucPCEWUOeNMjPG3Uw0MVA1OpzCaNacs3CKVgHIj15mPnnxc4hGsA9v7Zm
ZOHTB1BqtituV+YJx5aNtCz/LWDy9oA=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:03:45 2026 by rpki-client