Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa
File: 3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa (raw, json)
Hash identifier: nfoAGrLyOv96LLWwTEA5zQLwduXQT7PdCc96Ex1xMGQ=
Subject key identifier: B0:2F:35:4F:C4:01:46:37:06:A9:17:48:AD:CB:C8:AC:56:38:B0:E1
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 4868B2802BB23752F1F0DE658209C3695E4ED293
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 23959
IP address blocks: 194.127.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:68:b2:80:2b:b2:37:52:f1:f0:de:65:82:09:c3:69:5e:4e:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=B02F354FC401463706A91748ADCBC8AC5638B0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:1e:22:8a:7d:98:bf:c4:47:8c:c8:0b:64:
5a:ff:06:be:61:13:b3:08:d3:c3:0e:11:e4:39:9b:
70:6d:85:15:0a:7e:5b:84:cc:4d:ab:e4:15:ba:ea:
36:af:48:f3:52:69:81:58:de:b1:89:d6:d1:2a:a1:
32:e5:6e:29:97:fa:be:e3:1d:6f:18:52:4d:84:fb:
e7:02:e3:ad:90:51:57:ff:d4:1b:46:88:c9:80:8d:
47:ee:b2:dc:59:a7:8e:a5:e9:b5:98:38:1b:1e:ad:
b3:23:0f:32:e9:51:66:55:17:e2:17:56:88:23:2e:
f0:77:51:c8:53:d4:49:5b:e4:fa:9e:8d:b6:92:6c:
93:9d:3b:3d:57:47:fa:e5:cd:0a:a6:99:cf:46:b8:
53:67:5e:af:6c:09:3f:ce:37:c6:b7:8d:66:34:a1:
93:ca:af:f5:53:90:53:84:ca:bc:8e:d4:b9:8a:ef:
1a:5c:77:e1:15:a7:ca:72:d4:01:6d:6b:2c:5e:a2:
c9:ff:ea:ae:ee:88:6d:89:17:c8:97:49:66:e9:f4:
89:82:28:81:45:b5:70:16:09:06:54:72:d3:76:da:
f3:d2:74:03:93:75:97:c4:c3:b3:bc:ff:4f:b1:ae:
2b:04:dc:7b:e2:14:83:8d:21:03:a7:ba:1d:e7:5e:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:35:4F:C4:01:46:37:06:A9:17:48:AD:CB:C8:AC:56:38:B0:E1
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.164.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e8:a5:dc:42:7d:e5:fc:f7:ff:ea:53:89:2a:84:72:c3:c8:
61:15:8f:eb:8e:a4:49:ea:8f:a2:d1:dc:c4:f3:43:89:92:14:
ee:35:ed:6c:4f:96:68:a0:79:b2:81:58:d0:35:51:df:42:04:
e3:3c:e7:5c:77:96:b7:6c:6f:5f:23:99:f9:df:9e:26:6c:b2:
11:a1:0d:d1:37:f8:fc:d0:9c:a9:ae:1a:63:4d:b5:41:f8:0e:
c3:c7:76:42:44:ea:b8:1a:0b:24:a9:7b:23:12:96:ca:b0:e7:
ea:b7:73:cc:fc:6b:6f:2b:ae:a4:ae:b6:fd:63:54:77:5b:7d:
21:78:2b:f2:17:9a:c9:06:44:b5:2d:69:cb:53:be:c0:02:39:
9b:94:65:5d:46:50:7d:93:06:29:70:f6:5c:ca:e2:f4:aa:cd:
07:3e:74:87:34:23:22:29:bb:a2:f5:e7:f8:10:a7:ab:de:7f:
e1:c9:13:06:64:00:2b:2f:95:5b:66:ce:b2:1b:2c:67:e4:c2:
58:30:a5:59:ae:ed:b2:51:4e:f5:35:02:0b:5c:6e:f4:ee:dd:
c7:48:00:8a:1d:cf:56:36:8b:86:17:87:0b:9a:15:00:08:6a:
ee:c4:64:58:c3:3f:c2:62:37:81:1d:d9:2f:bb:9a:55:bc:29:
c5:dc:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:46 2026 by rpki-client