Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2038383838.roa
File: 326130623a323534303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier: jMrQ5lz/yD7vtasF8LBKInZLs1DQYgTQ/KpwcfnQYcM=
Subject key identifier: 3E:2A:BA:E7:FA:BF:E7:23:5A:7E:F8:73:32:8E:28:27:AD:E3:69:3B
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 40393F4CF3EB350B5C3BDE647F5D0D100EBD3521
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2038383838.roa
Signing time: Thu 02 Jul 2026 10:19:27 +0000
ROA not before: Thu 02 Jul 2026 10:14:27 +0000
ROA not after: Thu 01 Jul 2027 10:19:27 +0000
asID: 8888
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:39:3f:4c:f3:eb:35:0b:5c:3b:de:64:7f:5d:0d:10:0e:bd:35:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:14:27 2026 GMT
Not After : Jul 1 10:19:27 2027 GMT
Subject: CN=3E2ABAE7FABFE7235A7EF873328E2827ADE3693B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:8a:ab:d6:c2:6d:87:46:08:92:fe:07:18:
37:40:3e:59:57:2a:12:eb:b0:df:1e:c9:47:7a:b7:
2b:2e:2d:7d:61:9f:82:3a:5c:2f:3c:6a:55:d9:e7:
36:0e:87:0f:d7:2f:53:db:02:cb:ac:20:5d:d6:ed:
b9:77:5b:7f:0b:35:14:76:1a:fd:d1:4f:59:a2:02:
04:3e:60:1c:4d:25:26:00:36:10:27:23:5e:7a:d2:
b6:4a:de:80:92:47:ec:4e:aa:78:a8:fa:b2:d9:72:
1a:ea:1b:37:61:e3:5f:61:75:f6:a3:0e:18:dc:b0:
01:a9:d8:cd:f3:37:ee:e7:1a:be:d8:37:88:8b:e0:
1e:9e:90:df:12:8b:fd:c4:84:50:dd:b3:db:01:30:
fc:fe:90:8e:d1:48:45:2e:8b:d6:9c:d3:c0:ff:d2:
f4:e8:60:f4:92:0f:6d:8a:91:f6:5e:e3:aa:a6:31:
4f:10:78:09:dd:53:63:b8:72:51:03:dd:75:35:a6:
38:8c:50:7b:7c:ea:b9:a1:a2:af:03:aa:2c:ee:38:
c3:97:8d:7d:38:df:68:79:ec:b3:ad:db:f8:cf:7d:
7c:d1:59:72:0b:7b:5c:db:9c:b6:2b:4a:2f:03:47:
6c:30:97:f2:df:a4:c4:cc:b2:57:4c:b2:2e:b2:43:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:BA:E7:FA:BF:E7:23:5A:7E:F8:73:32:8E:28:27:AD:E3:69:3B
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
5b:5c:09:cd:43:f9:b9:97:ba:5d:01:a0:e5:c2:15:55:3d:71:
b2:c7:33:5f:da:1c:ca:32:de:6f:7c:12:13:00:77:a1:90:93:
63:ff:0c:42:6d:69:40:9b:94:ff:55:da:d3:00:52:0c:43:5f:
a4:81:80:20:71:84:bd:8f:52:13:ac:34:7e:8d:2c:15:ed:8f:
f6:75:bf:a3:bc:b0:8f:88:6c:af:95:f8:84:0a:c3:d7:ef:16:
6c:0c:97:70:c6:81:55:13:f6:35:b2:8a:95:63:6a:30:3e:b8:
1a:29:52:44:3f:59:8f:be:fc:d3:81:a1:8b:44:d1:0d:45:7c:
b0:bb:ef:ea:90:e2:b3:50:c5:e2:36:22:98:ea:e6:0d:da:91:
29:11:54:d0:9b:4c:a0:5d:f1:17:45:fc:2c:38:71:b0:12:be:
cd:45:c4:09:5e:7a:03:8b:c9:bb:5d:e2:56:40:57:0f:ef:33:
7a:61:32:3e:ff:60:e6:bc:8a:86:27:05:8f:bc:2f:0d:7d:d9:
12:a2:09:92:00:9e:c1:9e:c0:95:35:9e:c3:dd:a7:1c:c4:dc:
9a:f5:ed:b5:6e:79:8e:6d:b8:4e:d8:39:b0:cf:95:0b:a6:eb:
95:a0:1b:f6:f6:10:1e:40:1a:b5:6e:48:c5:4e:68:ce:43:e9:
93:fa:9c:13
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUQDk/TPPrNQtcO95kf10NEA69NSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MDIxMDE0MjdaFw0yNzA3MDExMDE5MjdaMDMxMTAvBgNV
BAMTKDNFMkFCQUU3RkFCRkU3MjM1QTdFRjg3MzMyOEUyODI3QURFMzY5M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfIqr1sJth0YIkv4HGDdAPllX
KhLrsN8eyUd6tysuLX1hn4I6XC88alXZ5zYOhw/XL1PbAsusIF3W7bl3W38LNRR2
Gv3RT1miAgQ+YBxNJSYANhAnI1560rZK3oCSR+xOqnio+rLZchrqGzdh419hdfaj
DhjcsAGp2M3zN+7nGr7YN4iL4B6ekN8Si/3EhFDds9sBMPz+kI7RSEUui9ac08D/
0vToYPSSD22KkfZe46qmMU8QeAndU2O4clED3XU1pjiMUHt86rmhoq8DqizuOMOX
jX0432h57LOt2/jPfXzRWXILe1zbnLYrSi8DR2wwl/LfpMTMsldMsi6yQ++vAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUPiq65/q/5yNafvhzMo4oJ63jaTswHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzA2MjNhMzIzNTM0MzAzYTNhMmYzMjM5MmQz
NDM4MjAzZDNlMjAzODM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoLJUAwDQYJKoZIhvcNAQEL
BQADggEBAFtcCc1D+bmXul0BoOXCFVU9cbLHM1/aHMoy3m98EhMAd6GQk2P/DEJt
aUCblP9V2tMAUgxDX6SBgCBxhL2PUhOsNH6NLBXtj/Z1v6O8sI+IbK+V+IQKw9fv
FmwMl3DGgVUT9jWyipVjajA+uBopUkQ/WY++/NOBoYtE0Q1FfLC77+qQ4rNQxeI2
Ipjq5g3akSkRVNCbTKBd8RdF/Cw4cbASvs1FxAleegOLybtd4lZAVw/vM3phMj7/
YOa8ioYnBY+8Lw192RKiCZIAnsGewJU1nsPdpxzE3Jr17bVueY5tuE7YObDPlQum
65WgG/b2EB5AGrVuSMVOaM5D6ZP6nBM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:42 2026 by rpki-client