Route Origin Authorization
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa
File: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (raw, json)
Hash identifier: RQlW9jYxsQrCM+VVe4D+G4tBI1QpDWK1X/Qt2qjM/Gk=
Subject key identifier: 84:20:3B:15:0D:7C:11:8B:78:87:1F:74:98:26:EC:4B:00:D0:40:9F
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 14AB66A884004A9B7E8EFDA46066661BF8061E33
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa
Signing time: Wed 05 Aug 2026 04:56:17 +0000
ROA not before: Wed 05 Aug 2026 04:51:17 +0000
ROA not after: Wed 04 Aug 2027 04:56:17 +0000
asID: 205603
IP address blocks: 2a0b:2542:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ab:66:a8:84:00:4a:9b:7e:8e:fd:a4:60:66:66:1b:f8:06:1e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Aug 5 04:51:17 2026 GMT
Not After : Aug 4 04:56:17 2027 GMT
Subject: CN=84203B150D7C118B78871F749826EC4B00D0409F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:ba:0e:64:05:75:92:f2:6b:ca:27:29:12:
4c:a2:78:d0:e4:67:cb:28:41:a8:8e:ae:3d:df:d7:
89:87:9e:21:65:bb:10:fc:99:3a:a2:a7:9e:5d:34:
75:42:3e:82:d7:6c:42:d2:a3:35:1e:71:5d:f3:45:
c1:57:dd:89:a3:ce:bf:22:2a:81:0c:ce:55:1e:1b:
91:1b:ff:37:99:59:a1:5b:31:d6:8d:9e:22:e4:96:
b5:e5:43:11:f5:2c:91:07:17:7f:c6:47:15:81:e5:
69:10:cf:5a:9c:0e:bc:c6:bf:14:a9:a6:4c:a4:05:
6c:b2:21:67:93:2c:3b:3f:10:0c:91:65:1e:fd:75:
07:37:a8:bd:96:53:54:f2:d2:6f:19:8a:bd:e3:f8:
f5:27:63:77:f5:a6:23:34:9a:c5:ee:62:50:55:69:
3c:60:c9:7b:3c:98:cc:22:e6:5f:0f:bd:01:6c:99:
b3:81:fa:c9:45:a4:0d:88:07:b4:25:ff:6a:2a:dc:
52:80:e9:a1:e2:7b:3f:e1:2f:e1:8d:30:3c:66:6f:
a2:b5:58:c9:a2:91:be:b5:36:91:87:ec:9a:ac:f8:
15:22:ca:2f:23:b9:f5:58:c6:62:a0:69:4f:26:f6:
7b:42:e1:3a:a2:b2:52:2b:f5:39:57:b7:17:44:a8:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:3B:15:0D:7C:11:8B:78:87:1F:74:98:26:EC:4B:00:D0:40:9F
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542:400::/40
Signature Algorithm: sha256WithRSAEncryption
9b:2c:01:93:51:2f:86:bb:80:68:80:b0:78:7a:6c:a4:7a:3f:
a6:ed:7c:d1:ae:1e:29:a5:57:58:a2:1f:39:c2:72:28:f1:4d:
b9:91:c5:5d:f2:9f:6e:88:9b:0c:38:92:58:d4:a4:5c:73:66:
20:cb:4b:ea:9d:ee:83:f8:a3:aa:f6:e7:6f:b1:3e:54:12:33:
5b:0b:fa:47:ba:87:17:81:4f:a4:50:5f:5b:f8:f0:cc:f1:ff:
13:86:eb:d9:fc:dc:eb:48:3a:fe:e5:40:ad:b8:16:75:5a:e7:
c0:a5:45:25:f8:6c:a8:db:a5:41:b7:7e:54:c4:24:63:b2:de:
77:17:bb:f2:15:01:f9:13:b0:52:c1:f9:c5:22:64:74:df:17:
a3:b2:86:11:16:db:1f:6b:d5:53:db:4a:bb:6f:df:07:b6:8e:
d9:51:66:f2:dc:cd:1e:4d:ee:de:50:98:d2:19:28:d8:01:50:
16:fd:b0:c3:fc:5c:4b:ce:1c:3f:c5:e0:32:59:c1:6d:7c:f4:
9d:97:f1:11:2f:d9:bc:16:36:62:88:b7:d4:89:a2:a0:5c:6f:
79:0c:2e:8f:b5:bd:fd:ef:1b:1c:d9:5f:44:57:3f:0f:6a:e3:
39:12:b8:0f:7e:48:d0:06:82:69:40:55:ac:d8:d4:ae:96:91:
a4:da:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:06:42 2026 by rpki-client