Route Origin Authorization
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/41/34362e3235352e32382e302f32342d3234203d3e2038383838.roa
File: 34362e3235352e32382e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: jyOf+/wVWgTnv44av/YZk96WOmSkB6HUaanUxxP+n28=
Subject key identifier: 98:DB:EB:60:A2:33:B9:68:DB:4C:EC:1F:7C:B3:53:B7:B3:97:E9:B5
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 7BFD77FA07E4507BC47B15E0817D2DD4372851F7
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/34362e3235352e32382e302f32342d3234203d3e2038383838.roa
Signing time: Wed 29 Jul 2026 06:18:44 +0000
ROA not before: Wed 29 Jul 2026 06:13:44 +0000
ROA not after: Wed 28 Jul 2027 06:18:44 +0000
asID: 8888
IP address blocks: 46.255.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fd:77:fa:07:e4:50:7b:c4:7b:15:e0:81:7d:2d:d4:37:28:51:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Jul 29 06:13:44 2026 GMT
Not After : Jul 28 06:18:44 2027 GMT
Subject: CN=98DBEB60A233B968DB4CEC1F7CB353B7B397E9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:d4:e1:74:78:3f:89:ec:36:6d:fa:7b:8e:
2d:15:88:8e:f8:b5:98:bc:a1:16:f2:fd:01:14:87:
dc:7b:91:0e:51:3d:39:c6:6d:e3:ea:be:c1:8c:43:
81:84:f3:26:f4:4e:39:ac:ee:6e:15:dd:98:b0:5e:
a0:7e:3b:ef:60:15:22:0c:d2:ab:ef:c9:ef:bc:75:
8b:19:c5:12:77:91:70:7c:db:09:60:56:00:ae:42:
43:33:a7:f7:d8:38:f9:60:c4:42:5c:41:d0:3b:fd:
a1:94:95:fa:89:d7:e0:3b:18:24:0d:c3:71:6c:46:
3b:e9:f2:aa:4f:7e:cc:98:99:83:2a:1e:88:6d:00:
52:45:37:a3:bc:14:c0:41:b2:2f:2d:f6:b5:aa:a1:
1e:e9:9c:03:4a:bb:8a:fa:fc:87:7b:74:0c:ed:14:
39:61:3c:07:1f:4d:d2:6e:45:b9:93:49:46:13:04:
d7:28:5e:4d:58:bf:48:eb:d4:31:71:ea:16:aa:78:
5d:48:e2:39:f4:7c:d5:f5:67:9c:3f:6a:f5:d6:c9:
8c:51:87:c3:57:d5:9e:29:ff:4b:ab:23:3d:c2:fc:
78:f6:a6:86:07:3c:1d:72:0f:98:b3:f0:b3:73:eb:
57:70:f7:63:0c:c4:b0:77:49:d9:6c:33:0c:8b:37:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:EB:60:A2:33:B9:68:DB:4C:EC:1F:7C:B3:53:B7:B3:97:E9:B5
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/34362e3235352e32382e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e6:34:17:08:45:c3:25:46:ff:20:71:9f:90:1f:ee:31:93:
c7:32:5b:14:09:98:46:92:6d:53:46:b0:b0:98:af:64:1c:f3:
f2:54:df:b9:14:59:69:d3:6a:2d:ba:ac:39:dc:89:eb:7b:e4:
be:e9:ab:40:8d:80:77:3f:16:21:42:5b:6a:98:50:00:bd:a6:
5c:64:c7:40:4d:20:ba:ec:fd:14:d1:c4:23:c2:15:b4:fd:96:
56:21:6e:17:13:7f:7f:4e:15:3a:58:69:9d:62:25:42:53:b8:
c4:46:28:bc:d0:c6:b3:d4:e9:35:e6:8f:62:30:05:14:bf:c1:
8a:8c:5e:62:38:7d:ff:7b:68:5d:58:04:c8:b9:d7:4d:63:3e:
5d:1c:9a:da:f5:12:82:b2:53:51:8f:65:c5:a4:47:e0:01:56:
82:96:5e:1a:61:aa:fa:0b:32:f8:c1:30:7e:61:41:fc:1f:a0:
56:48:45:cd:19:4a:28:ca:a8:41:57:b8:58:9b:a7:96:7d:af:
6f:b6:ef:4e:87:c2:37:65:ec:7b:89:3f:1a:03:52:f9:a6:78:
8c:3b:9e:97:a4:83:b9:91:46:2d:6b:46:ea:63:97:78:c0:64:
63:4b:ea:8b:53:a2:1e:6a:17:46:28:49:e5:23:3c:61:60:b7:
09:e3:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:49:05 2026 by rpki-client