Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32342d3234203d3e2033323134.roa
File: 3139342e3132372e3136342e302f32342d3234203d3e2033323134.roa (raw, json)
Hash identifier: tMBh3KrIPDBf40a5eDFSEYYfU52DDDdL7oyXJxL+jfY=
Subject key identifier: 3B:71:BF:4C:4C:5C:7C:68:AE:98:B6:C0:D7:CB:52:31:D1:63:37:3F
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 3D270F27A426917C4B79819AE7D9875117117B8D
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32342d3234203d3e2033323134.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 3214
IP address blocks: 194.127.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:27:0f:27:a4:26:91:7c:4b:79:81:9a:e7:d9:87:51:17:11:7b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=3B71BF4C4C5C7C68AE98B6C0D7CB5231D163373F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:ca:eb:2f:75:c6:1b:9e:1a:1d:9b:f8:63:
0a:b3:6c:99:97:b4:62:59:60:59:49:56:0c:53:aa:
f2:f0:6e:4d:81:3d:3c:a9:08:db:ea:13:4c:f2:05:
bd:78:4f:79:5d:63:cc:25:65:c2:fb:70:0b:4f:98:
c8:33:17:f1:f2:e3:f3:62:0e:f5:6a:6a:64:60:78:
f9:ab:0e:ca:39:a1:41:bc:b8:f0:53:ad:15:de:5a:
2c:0a:12:7e:a5:3a:58:8f:20:bd:a8:d8:27:b7:67:
b0:55:f2:60:c4:61:e3:be:a0:54:f5:0e:0e:db:0f:
9f:d6:4e:49:a2:37:03:ff:35:01:14:fb:d0:62:41:
fa:78:d3:7f:11:cb:72:04:13:04:76:48:8e:6b:9d:
63:f8:6c:39:c3:74:c3:fb:35:b6:8d:88:3e:cd:6e:
4a:41:a0:12:5b:42:a8:eb:ad:70:b1:79:b3:1d:ad:
6f:6e:cb:a6:60:4c:9d:7b:fc:f5:4c:0d:48:a3:7e:
77:3b:27:8c:a5:2c:65:b9:58:c3:db:17:f3:5d:e5:
06:3a:cf:80:16:65:8f:14:1c:2f:e0:28:b6:4f:9e:
ad:be:0f:32:06:fb:da:58:e6:35:83:47:83:23:67:
2c:eb:d2:1e:43:62:1f:cd:6c:d9:6c:fb:d6:60:b6:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:BF:4C:4C:5C:7C:68:AE:98:B6:C0:D7:CB:52:31:D1:63:37:3F
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136342e302f32342d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2b:64:89:ea:1a:dc:d8:d7:07:14:ca:e1:15:2c:dc:d6:56:
77:26:c6:c7:1f:09:e9:6f:1e:5f:de:dd:97:c9:42:09:e0:09:
25:05:d5:53:a9:82:71:cd:ed:b4:07:d5:5e:98:d8:79:08:71:
f3:4d:44:40:fe:a0:43:0d:68:41:43:60:f5:10:13:e5:e4:e3:
77:3c:bd:03:2c:69:9b:26:c0:02:bc:c5:bd:c9:08:72:fc:e8:
97:30:98:e1:9b:5e:d6:ac:ee:9f:f2:2b:ca:02:c4:27:70:5d:
f8:4a:9d:27:fa:6a:71:8e:8d:87:54:16:68:3d:c5:d3:8e:61:
6b:23:66:01:72:7a:54:5f:b5:95:4b:da:8e:4e:3c:a8:4f:d8:
30:68:35:f0:b7:1c:ab:d0:29:8c:88:f4:0f:7c:82:94:55:33:
78:42:1a:79:77:1b:31:93:a5:be:4b:e9:1c:e8:4c:be:01:3b:
30:6e:44:6a:a3:6c:8c:51:74:a5:c8:fd:8c:de:57:b4:c0:4e:
8b:33:a5:b6:72:b0:2e:87:7c:5c:85:df:a9:6c:ac:a4:e9:2d:
2e:2b:04:dd:0c:62:b3:2d:8e:9b:47:6e:69:b3:04:28:15:58:
4c:7b:70:b5:1e:52:98:1b:2a:35:c6:e1:b9:50:9d:a2:c9:4b:
9d:19:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:27 2026 by rpki-client