Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3a2f34382d3438203d3e20313337323536.roa
File: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (raw, json)
Hash identifier: 2rPocNPRKYGmxX21JXlNBoDFzTixRxC1zKgkHn/teJE=
Subject key identifier: 20:9E:51:F9:9F:F5:4C:46:0A:22:86:4A:03:78:D9:8F:E5:64:3D:11
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 47D87B3C06E7B3C78657A2D888100DCF0C642B06
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3a2f34382d3438203d3e20313337323536.roa
Signing time: Sat 18 Jul 2026 01:56:16 +0000
ROA not before: Sat 18 Jul 2026 01:51:16 +0000
ROA not after: Sat 17 Jul 2027 01:56:16 +0000
asID: 137256
IP address blocks: 2a0b:2542::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d8:7b:3c:06:e7:b3:c7:86:57:a2:d8:88:10:0d:cf:0c:64:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 18 01:51:16 2026 GMT
Not After : Jul 17 01:56:16 2027 GMT
Subject: CN=209E51F99FF54C460A22864A0378D98FE5643D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:e2:34:d1:f0:77:25:77:6a:69:7f:c9:b6:
bc:a9:ce:41:77:6d:d6:6a:bf:fa:d8:37:52:30:bd:
24:de:2c:ee:18:5f:83:34:90:ef:c1:46:39:cd:39:
7c:fa:70:5b:b3:df:56:b8:dc:1e:01:de:b3:c2:17:
4e:94:79:db:4d:e5:5e:05:a7:2b:61:e2:01:51:11:
6f:68:1e:aa:b5:c4:e3:32:c6:d1:f2:1b:f9:2f:a1:
16:94:a6:8f:a9:a3:a2:f7:38:a5:98:5c:81:65:48:
4f:4c:bd:59:07:19:bc:91:53:1f:11:3d:c3:f5:1a:
7e:9b:2c:61:db:40:fd:2a:5c:a1:8b:fa:7a:8c:c0:
38:82:bd:b1:9a:fd:f8:be:1d:21:2a:0a:44:85:c8:
04:32:ac:bc:b9:52:cb:62:e8:3b:7c:d7:98:e0:fb:
46:19:c3:a0:77:0f:11:9c:0b:55:f8:f3:5b:cb:e3:
2e:2d:f6:0d:e3:ec:47:b9:4e:94:7d:aa:ea:fb:d3:
98:1e:b5:2b:00:16:68:04:9b:34:ff:0d:30:97:a3:
c0:5f:d0:8c:15:d6:6b:81:3c:85:d7:a7:6b:be:54:
b2:aa:a8:ab:68:4a:56:60:7e:82:b2:11:16:f9:53:
65:00:b9:18:af:44:d6:ab:24:64:f2:9d:4b:6c:c2:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:51:F9:9F:F5:4C:46:0A:22:86:4A:03:78:D9:8F:E5:64:3D:11
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3a2f34382d3438203d3e20313337323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d9:0f:16:2c:5c:73:d1:05:c5:8b:0f:b1:aa:95:5b:8f:2f:
e5:ed:24:91:70:99:93:bd:71:33:42:5b:ac:77:17:1b:cf:aa:
14:9f:f2:f6:3c:e9:a6:0a:31:ee:5a:e3:99:2c:37:ee:39:59:
7f:1d:d6:a0:fe:a4:d9:bb:2e:31:67:ea:fc:ba:21:d7:f1:bd:
a9:cf:90:72:2e:3e:5e:6a:37:8d:d1:91:eb:9f:23:9d:c7:a9:
22:aa:80:31:c9:bb:73:99:cb:3f:ce:b5:64:82:34:8f:9d:0d:
ba:65:39:f4:00:6e:f6:a9:a4:6e:72:ea:4c:d5:f3:6b:96:d9:
5f:31:02:76:61:b5:fe:f6:05:3b:1c:9b:96:e1:0f:c8:0e:5b:
e1:61:21:67:78:eb:36:70:8e:98:f5:f3:5d:c6:2e:7d:82:46:
96:03:5f:5b:3a:09:ba:2e:b0:cd:3e:22:45:42:bd:8c:33:ea:
8f:18:bd:20:3e:55:62:2b:39:ab:57:b3:e5:57:09:0f:47:15:
83:eb:9f:4a:c0:af:08:cb:a8:76:e6:59:09:cc:9b:e9:a8:1f:
bb:d3:a4:59:c1:cb:a0:d9:f1:4c:22:29:96:58:9a:00:94:8f:
d2:35:04:7a:b3:e0:eb:2c:34:7e:39:2a:db:90:77:ff:77:84:
0a:0d:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:22:34 2026 by rpki-client