Route Origin Authorization
$ rpki-client -vvvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d313238203d3e203233393539.roa
File: 326130373a643838303a3a2f32392d313238203d3e203233393539.roa (raw, json)
Hash identifier: XiOE9LYWOv4vyZV/gmUG64rOublSelp11dzIlg6tphw=
Subject key identifier: 4E:A8:BC:F1:A2:D1:C2:AF:29:8A:0F:9F:42:96:A2:91:F9:81:85:0B
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 1C09E4150BA62C436FDED4510CF926919F9C2899
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d313238203d3e203233393539.roa
Signing time: Mon 02 Nov 2026 14:59:17 +0000
ROA not before: Mon 02 Nov 2026 14:54:17 +0000
ROA not after: Mon 01 Nov 2027 14:59:17 +0000
asID: 23959
IP address blocks: 2a07:d880::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:09:e4:15:0b:a6:2c:43:6f:de:d4:51:0c:f9:26:91:9f:9c:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Nov 2 14:54:17 2026 GMT
Not After : Nov 1 14:59:17 2027 GMT
Subject: CN=4EA8BCF1A2D1C2AF298A0F9F4296A291F981850B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:ea:3b:00:3f:a9:d6:98:1a:46:d3:d6:22:
c8:f2:9e:49:05:11:53:1f:65:8f:65:37:6f:81:92:
53:dd:d7:bf:c1:c5:5b:9e:86:e7:fa:95:0c:7b:ab:
c2:c5:2d:b0:54:f1:1c:61:3b:8d:94:a4:3d:dd:a9:
a8:80:7c:ca:5d:de:79:80:e5:c8:9e:ce:07:33:f6:
57:60:89:17:e6:77:66:b4:9a:a0:45:23:9f:fa:70:
5b:e2:2a:0a:df:b0:dd:a1:0a:f3:4f:c4:54:1d:69:
9c:cf:8b:b3:24:5b:1d:cc:fa:80:82:f0:0e:9d:4a:
3a:e2:3f:82:94:ca:fb:a7:8a:18:35:5e:4a:34:0e:
40:2e:63:af:63:82:e0:00:6d:d1:b7:fc:3e:06:a7:
93:78:46:b3:ac:24:e3:a8:e9:cc:a4:62:60:68:40:
f7:a1:3a:84:54:89:c9:30:e9:69:7b:fc:39:53:43:
22:44:35:17:38:65:7c:8c:48:2a:94:a4:40:93:a3:
f8:7c:39:8f:27:a3:96:66:2d:bc:e5:ae:43:51:6f:
e3:b7:50:99:4a:5a:1c:92:0e:42:38:1d:49:d6:d7:
6c:8c:de:62:9d:e5:f8:ce:55:20:14:21:92:4f:2c:
c9:99:bb:b0:61:11:d0:7f:78:d9:b9:95:50:2f:79:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A8:BC:F1:A2:D1:C2:AF:29:8A:0F:9F:42:96:A2:91:F9:81:85:0B
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d313238203d3e203233393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880::/29
Signature Algorithm: sha256WithRSAEncryption
05:1d:3a:a7:9d:82:64:c5:80:98:65:0f:1f:64:39:8e:f7:b4:
4b:51:63:45:15:eb:53:9e:6b:bc:e1:ad:d4:4d:b5:29:1f:f1:
88:a0:b3:a7:6f:e9:26:ea:88:7d:4c:71:aa:ab:a0:34:67:00:
f5:76:c0:24:68:7a:12:b0:7e:0a:40:ae:bf:59:14:9b:b2:7a:
25:fc:6b:4c:4a:42:f8:1e:19:b8:23:c8:40:68:f2:d5:ab:12:
87:c5:19:cb:fb:98:88:31:a1:0f:5a:71:79:07:67:c4:a4:f5:
b6:22:69:ad:e8:30:ec:b8:ec:35:3d:8c:34:0a:99:5f:1c:78:
67:67:09:10:49:c4:cb:19:7e:a8:09:e8:7b:49:96:33:6b:79:
4e:48:52:98:03:ac:14:45:c6:41:df:da:da:5d:74:a9:7f:5d:
4e:de:78:a8:29:68:ae:ca:3e:04:ae:0b:2c:01:f1:ff:db:b1:
43:5d:3b:0e:0d:06:16:6c:86:d5:ab:05:09:b6:dc:fc:df:6d:
91:dc:cd:77:50:e1:2a:6c:82:71:26:29:0f:73:b5:ab:fb:92:
f4:98:12:e4:76:b5:f2:9a:a7:69:e3:a9:33:da:5a:f0:2e:09:
7d:b1:05:de:18:08:84:7f:78:ce:ce:2f:a5:c0:0a:67:32:4f:
eb:cc:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:56 2026 by rpki-client