Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa
File: 3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa (raw, json)
Hash identifier: 9DU8qnUgWwou6cMiRyTE/qYtUzrrEGldSCHbIsIYo3g=
Subject key identifier: E4:E3:94:E0:4E:47:D6:3D:6C:9B:33:00:19:36:B7:46:03:C8:F1:C9
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 704D98CB68A567E83F246C7A0F6CFDBD22C5BC79
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 43357
IP address blocks: 194.127.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4d:98:cb:68:a5:67:e8:3f:24:6c:7a:0f:6c:fd:bd:22:c5:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=E4E394E04E47D63D6C9B33001936B74603C8F1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:56:b5:83:1c:62:11:2e:8b:4b:32:d8:94:
ab:8e:cb:f2:f1:a0:67:87:35:69:5d:3a:01:2a:b3:
de:3f:25:b1:46:d5:eb:7f:3f:93:6d:9a:f0:15:a6:
1b:1f:50:c0:85:5d:95:4e:e5:8a:4d:99:0d:56:ce:
a8:26:57:9c:74:4c:d3:f4:94:1a:43:07:32:a4:0a:
7e:22:18:c6:ee:cf:c8:3b:85:7c:6d:fb:b7:1e:56:
84:f8:32:cb:56:50:51:ea:d3:d5:22:e9:d7:ef:36:
19:ac:78:67:b9:84:f1:52:45:49:8a:50:7c:fc:66:
c2:de:20:e3:e0:7f:f4:a7:2c:e7:f9:5c:de:e9:c7:
36:40:6c:ea:d9:2f:89:5a:56:25:70:7e:fe:da:4a:
3e:fa:00:10:6e:0d:d8:0c:73:8d:03:8a:25:13:b1:
8e:6b:30:f8:27:b6:02:b7:10:bf:98:83:03:a9:28:
87:56:42:1a:16:4f:80:a7:51:ac:2b:ae:6d:be:19:
66:3e:47:c5:f6:21:4a:fd:69:38:80:f3:74:df:fc:
7f:b8:83:ad:73:20:3b:d8:36:34:5d:1a:44:f3:2a:
eb:b4:1b:95:c7:32:3d:0f:20:80:48:b9:a0:94:bf:
d7:fa:a7:75:52:94:bb:af:79:a7:40:89:8e:96:0a:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:94:E0:4E:47:D6:3D:6C:9B:33:00:19:36:B7:46:03:C8:F1:C9
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32322d3234203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.164.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:23:99:7a:99:fb:62:05:a7:df:c3:c3:7a:1d:eb:d8:ec:50:
02:4b:f3:94:20:63:e5:c7:df:43:b3:a2:a3:f2:f4:a3:5f:37:
86:dd:9b:62:7c:dd:85:be:ac:46:aa:7c:26:d5:7c:80:23:ed:
7d:15:3b:5f:39:c2:ca:f2:a5:bb:fa:43:94:b4:ff:e7:0b:b9:
b0:d4:1e:c7:cd:db:9e:5d:70:7d:5a:04:fa:79:1d:e1:c3:f2:
a0:38:3d:38:94:03:ef:36:27:f8:79:78:ad:1d:4b:a1:c0:51:
a3:44:76:35:20:1e:4d:cf:ed:e7:46:d0:67:9d:cd:7d:5a:a4:
da:bf:75:75:89:c6:25:de:2e:1b:96:9d:3d:ef:15:f5:2b:5c:
e6:eb:49:8c:da:a6:bd:d9:a0:d8:31:9e:19:d9:3e:31:58:e7:
c5:24:c3:3a:5d:a5:41:33:39:e7:4e:08:9c:f0:ae:7b:64:33:
c4:9f:ea:9d:88:0f:f8:28:b7:7b:0d:f7:92:4d:43:d4:77:2c:
9f:db:20:87:48:f7:b7:0b:e2:7b:4f:c2:da:35:d3:47:b5:8b:
b3:33:25:74:3a:1d:fd:95:b8:67:38:a1:be:da:6b:45:6c:e1:
62:2a:06:d6:d0:65:5a:bf:8c:2a:0d:f4:2f:64:b6:21:6a:ac:
8e:04:cb:03
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIUcE2Yy2ilZ+g/JGx6D2z9vSLFvHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU1ZTJlNzJkN2ZmZGU2YmNlYjczY2UyNmYxODVjNjc4
YTIzODkyZDAeFw0yNjA3MTYxNzM5MTFaFw0yNzA3MTUxNzQ0MTFaMDMxMTAvBgNV
BAMTKEU0RTM5NEUwNEU0N0Q2M0Q2QzlCMzMwMDE5MzZCNzQ2MDNDOEYxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE1a1gxxiES6LSzLYlKuOy/Lx
oGeHNWldOgEqs94/JbFG1et/P5NtmvAVphsfUMCFXZVO5YpNmQ1WzqgmV5x0TNP0
lBpDBzKkCn4iGMbuz8g7hXxt+7ceVoT4MstWUFHq09Ui6dfvNhmseGe5hPFSRUmK
UHz8ZsLeIOPgf/SnLOf5XN7pxzZAbOrZL4laViVwfv7aSj76ABBuDdgMc40DiiUT
sY5rMPgntgK3EL+YgwOpKIdWQhoWT4CnUawrrm2+GWY+R8X2IUr9aTiA83Tf/H+4
g61zIDvYNjRdGkTzKuu0G5XHMj0PIIBIuaCUv9f6p3VSlLuveadAiY6WChbzAgMB
AAGjggHOMIIByjAdBgNVHQ4EFgQU5OOU4E5H1j1smzMAGTa3RgPI8ckwHwYDVR0j
BBgwFoAUtV4uctf/3mvOtzzibxhcZ4ojiS0wDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5vd2wubmV0L3JyZHAvb3dsLzEvQjU1
RTJFNzJEN0ZGREU2QkNFQjczQ0UyNkYxODVDNjc4QTIzODkyRC5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3RWNHVjdGZfM212T3R6emlieGhjWjRvamlTMC5jZXIw
eAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kub3dsLm5l
dC9ycmRwL293bC8xLzMxMzkzNDJlMzEzMjM3MmUzMTM2MzQyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzNDMzMzMzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn+kMA0GCSqGSIb3DQEB
CwUAA4IBAQDZI5l6mftiBaffw8N6HevY7FACS/OUIGPlx99Ds6Kj8vSjXzeG3Zti
fN2FvqxGqnwm1XyAI+19FTtfOcLK8qW7+kOUtP/nC7mw1B7HzdueXXB9WgT6eR3h
w/KgOD04lAPvNif4eXitHUuhwFGjRHY1IB5Nz+3nRtBnnc19WqTav3V1icYl3i4b
lp097xX1K1zm60mM2qa92aDYMZ4Z2T4xWOfFJMM6XaVBMznnTgic8K57ZDPEn+qd
iA/4KLd7DfeSTUPUdyyf2yCHSPe3C+J7T8LaNdNHtYuzMyV0Oh39lbhnOKG+2mtF
bOFiKgbW0GVav4wqDfQvZLYhaqyOBMsD
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:17 2026 by rpki-client