Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2039333132.roa
File: 326130623a323534303a3a2f32392d3438203d3e2039333132.roa (raw, json)
Hash identifier: boJIyZ5ra8++IlNuQ58F7TcaQlmm4dRSc17l5U9g5Y0=
Subject key identifier: EC:71:FC:13:6C:58:EC:E2:6C:2A:CF:86:88:85:96:B9:E6:4C:7B:4D
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 507C7B2BA0168645D8113FDEA51D1A0A6EFE33CD
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2039333132.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 9312
IP address blocks: 2a0b:2540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7c:7b:2b:a0:16:86:45:d8:11:3f:de:a5:1d:1a:0a:6e:fe:33:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=EC71FC136C58ECE26C2ACF86888596B9E64C7B4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:10:b4:1e:8e:18:8d:ab:dd:26:be:8d:16:
50:71:cd:26:36:93:e3:88:ed:bf:f5:ed:f7:9c:79:
c4:79:6b:b7:d7:8e:bd:3b:e2:4b:75:4e:6c:e3:2e:
a8:b8:e8:64:33:09:4d:42:03:e3:0c:af:45:48:da:
b0:a4:8e:3a:1f:61:19:6c:cf:2a:16:62:85:54:0d:
23:a8:11:de:8c:c8:69:87:7f:27:ee:81:87:c5:a2:
e4:0e:51:b7:37:30:83:5c:1e:7c:51:d1:70:06:08:
00:91:56:0d:3b:54:7d:b9:4c:ce:30:38:80:0d:47:
a0:c5:6d:29:f6:c3:82:e3:d6:69:11:e2:47:b5:e9:
b6:ee:8d:6e:18:18:a1:7f:a0:85:0b:b6:5c:a8:aa:
43:29:ed:a6:9c:fd:c5:e6:fb:fa:50:ab:c2:57:1c:
2b:15:66:e1:69:5f:d0:91:46:70:0a:92:0a:e2:62:
03:dc:84:e2:22:af:bd:b0:1c:f9:1b:5f:2b:64:18:
96:e6:07:42:92:cc:22:20:a6:d1:45:ef:64:73:8c:
f3:34:5c:b7:d2:6f:fe:73:3b:79:99:3b:66:ec:58:
ef:15:89:97:d7:50:ce:79:49:18:34:8e:3b:20:aa:
0d:f1:87:32:e8:3e:78:0f:db:a4:17:e7:5f:b7:5b:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:FC:13:6C:58:EC:E2:6C:2A:CF:86:88:85:96:B9:E6:4C:7B:4D
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f32392d3438203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2540::/29
Signature Algorithm: sha256WithRSAEncryption
a6:46:9a:ff:41:b7:fe:92:26:78:d2:2a:cb:bf:cf:06:f5:dd:
c1:74:47:49:10:82:2e:6c:da:b6:14:36:de:bf:91:8d:16:20:
1f:c6:9f:c9:39:9a:18:43:9b:36:32:5a:d8:fb:ed:4d:f4:2b:
91:bc:d4:3b:4e:95:2d:db:a2:2d:7c:a5:2b:36:41:c8:c2:4b:
7f:19:84:e3:c1:c7:bb:65:db:5b:bd:13:37:b0:c8:21:f4:bf:
bb:50:fa:e4:92:7c:cf:05:50:10:c7:01:cd:0f:8f:f6:bb:64:
7a:43:bc:ca:1e:83:4c:8d:fd:74:54:01:b0:13:dd:b5:2e:8c:
e8:1a:f9:30:5f:b4:89:6c:0e:aa:95:94:77:f6:76:d4:88:02:
38:8e:aa:09:40:7d:9e:91:bb:50:54:a8:a5:52:4d:5a:2a:7b:
e1:b1:be:3d:5b:b3:7e:0e:3a:4b:9f:8c:a6:3f:3e:1d:ad:ac:
27:42:0d:fd:4f:8b:eb:bd:ab:d8:91:cd:80:49:47:47:b3:5c:
dd:17:3a:b0:5c:ae:c2:a0:d9:f3:c6:2a:78:45:5a:38:67:28:
ef:c1:a8:75:83:3d:0a:56:22:cf:bd:21:8f:49:6d:ed:f3:2d:
f6:83:cb:e3:82:51:52:99:6e:5e:d8:30:53:f5:71:ad:cb:06:
27:a5:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:13 2026 by rpki-client