Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa
File: 3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa (raw, json)
Hash identifier: q9Ue5D6lC/ESJ4sGyUbFTYvdAHOBgvb3v4ka30bP/Sg=
Subject key identifier: 1A:F5:B5:17:75:C1:DC:F6:9E:55:EA:31:E6:99:94:20:6A:DF:3E:1E
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 4B9953D5917BB04E9525B439AD65D0246BF06FFA
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 3214
IP address blocks: 194.127.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:99:53:d5:91:7b:b0:4e:95:25:b4:39:ad:65:d0:24:6b:f0:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=1AF5B51775C1DCF69E55EA31E69994206ADF3E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:50:ef:dd:4d:14:d8:99:b7:d4:9f:2f:a2:
c6:c3:bc:ec:6b:b4:99:34:c1:aa:5a:c0:7e:df:e7:
77:3c:d2:fb:72:53:a3:a4:39:e2:b9:b3:40:ec:71:
56:86:9a:11:a2:d4:11:9f:74:3f:19:46:90:6f:65:
33:2d:39:60:a1:bf:44:5a:b3:ca:86:20:4c:c5:c4:
2f:3d:f6:b6:dd:d1:37:51:ba:58:2b:40:0e:83:0a:
bf:a0:62:0b:4c:00:3a:d6:05:e9:fb:4b:1f:37:6f:
eb:72:80:9c:e1:a3:7e:a0:1f:c7:fa:04:56:8f:87:
1d:8e:d0:ed:f4:4a:95:ce:06:d8:c0:38:7b:da:67:
f4:cd:58:03:49:39:3e:19:ca:00:77:a0:b5:b1:ee:
5a:28:72:17:2f:ac:8f:77:72:6b:1c:8a:bc:aa:8d:
a6:ea:f2:e9:f5:f1:8e:ed:ca:0b:2e:30:51:5a:65:
b2:14:a5:8d:50:cc:7d:1e:76:12:2f:e3:84:0a:e8:
a5:59:e3:b5:24:84:de:b3:61:1f:ff:6a:94:00:80:
19:89:d0:89:dc:51:86:21:2a:fd:f9:43:62:68:b0:
d7:46:1b:90:d6:4d:be:06:59:35:f4:7a:77:8d:40:
7f:cf:99:85:06:01:57:71:7f:a1:97:65:e7:ea:9c:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:B5:17:75:C1:DC:F6:9E:55:EA:31:E6:99:94:20:6A:DF:3E:1E
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.167.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:59:67:76:77:a4:d2:eb:49:d1:46:5c:f7:6a:a3:7f:e0:d4:
fb:58:76:0c:24:db:27:5c:3b:4f:d9:f2:83:cb:cd:fd:72:3b:
05:f2:c9:13:d8:2d:d0:4f:74:9f:72:a1:c6:85:c4:ed:72:c0:
a9:ca:e1:90:af:eb:b1:68:60:45:13:27:40:13:74:af:87:b6:
14:2c:8b:d9:b8:7d:3d:0c:e0:a0:a3:fc:9f:61:27:03:5d:e2:
9f:0c:ea:66:62:35:21:5b:1c:7b:b6:74:3c:e6:b9:92:f6:d7:
95:78:5b:6e:b5:c3:8a:73:dd:9b:86:ac:c0:c4:e1:f7:e7:f2:
6d:57:87:f8:ff:d5:34:cb:4b:ec:de:ab:96:3a:7a:2b:f5:c1:
89:2d:b5:60:6c:22:57:95:a1:1c:9b:fd:9e:57:d5:b3:ef:b1:
35:80:bc:b6:84:f6:d4:15:b6:45:da:2c:ec:ab:af:4b:a8:bb:
6e:bb:b6:a9:f0:3a:c0:ec:04:5d:4f:c5:88:6b:5c:c3:9f:27:
09:ba:7a:22:64:8c:a1:1f:62:4f:94:e9:dc:b7:4b:81:ae:8e:
99:09:16:59:0d:5f:25:ea:30:fa:3c:9f:83:be:fe:2f:cd:fd:
4d:6f:10:b9:17:84:7e:97:66:63:36:8a:d3:dc:39:6e:74:eb:
48:25:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:41 2026 by rpki-client