Route Origin Authorization
$ rpki-client -vvvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d313238203d3e203433333537.roa
File: 326130373a643838303a3a2f32392d313238203d3e203433333537.roa (raw, json)
Hash identifier: tvZeE99qoEwhPQGLmyWYPoZI+PJWtbnBI6dvTa3KQ80=
Subject key identifier: ED:1B:D7:74:F3:DB:59:7D:25:4E:CF:E6:D6:FD:F6:0C:FE:25:1C:1C
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 60191B2261797FCB78172172921E9181D4493D33
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d313238203d3e203433333537.roa
Signing time: Mon 02 Nov 2026 14:59:28 +0000
ROA not before: Mon 02 Nov 2026 14:54:28 +0000
ROA not after: Mon 01 Nov 2027 14:59:28 +0000
asID: 43357
IP address blocks: 2a07:d880::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:19:1b:22:61:79:7f:cb:78:17:21:72:92:1e:91:81:d4:49:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Nov 2 14:54:28 2026 GMT
Not After : Nov 1 14:59:28 2027 GMT
Subject: CN=ED1BD774F3DB597D254ECFE6D6FDF60CFE251C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:fa:41:09:46:2c:1e:0b:d0:43:72:e7:d0:
10:6d:d9:b1:40:cc:b8:8f:47:f2:4d:ea:78:d4:11:
ba:1f:1f:5e:7c:23:16:5a:e8:04:4b:f6:a9:5d:3c:
62:88:31:bb:2b:a0:76:59:10:bb:16:0b:e5:1d:5e:
34:b7:59:42:9f:b2:b4:43:d0:fd:fb:55:73:c9:a5:
8b:05:b4:4f:10:19:f4:90:0e:36:d5:8c:9d:1d:47:
7c:f7:a4:c5:3e:d4:f7:7f:a8:c1:e7:32:34:bd:59:
24:4e:9b:a3:8d:9e:81:4c:5e:a0:1e:0f:ff:b7:9d:
d7:db:1a:57:cc:b4:c1:bd:c7:97:77:b3:a3:1e:b0:
9f:7c:df:83:ba:92:e2:bd:9e:fe:e1:ca:05:b4:ba:
23:f2:5d:c6:c9:85:8a:07:13:9d:7e:b2:ad:0d:00:
fb:ad:6b:e1:43:6b:41:2a:97:87:40:02:f8:46:e9:
7b:51:c4:de:37:74:70:83:7c:48:d2:c7:95:fe:7b:
50:0e:a6:14:c7:7b:a7:bf:d7:02:e4:4b:c0:3f:ff:
ba:ca:13:49:19:ea:1a:10:4c:b9:25:86:81:fe:a3:
03:f4:0b:b1:82:12:80:79:d4:42:14:f2:4f:7b:77:
50:2e:e1:c6:22:18:5b:b8:bf:a2:7a:61:e8:1b:f7:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:D7:74:F3:DB:59:7D:25:4E:CF:E6:D6:FD:F6:0C:FE:25:1C:1C
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d313238203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880::/29
Signature Algorithm: sha256WithRSAEncryption
4a:30:27:f5:e2:49:8b:92:74:23:55:8d:27:ef:07:f6:dc:a5:
3a:70:4e:e8:b5:a4:fa:0f:ae:f9:92:f1:bd:74:ee:88:65:42:
f7:41:01:28:2b:99:70:92:04:5c:d4:3a:48:95:61:47:df:fe:
9c:55:2d:bb:23:0d:2a:76:d3:0a:c8:1a:f0:2b:cb:67:1a:36:
d6:b0:73:5e:3e:a5:a8:41:52:64:18:67:61:dd:3d:ce:f5:35:
7e:97:57:77:48:e5:d7:29:d7:4d:16:26:57:d0:8a:d0:80:81:
65:21:c6:e0:ea:ed:fb:45:05:6d:2a:8a:e7:18:8f:e4:19:2c:
5d:96:20:ab:f7:51:77:1e:86:db:c5:05:11:89:21:a1:0f:eb:
9a:20:56:92:08:fe:ae:4a:e9:d3:c0:c2:62:f3:2c:e5:5e:95:
86:ae:c4:40:73:44:00:21:4f:bf:7f:64:d2:88:24:dc:d3:2e:
94:f5:37:d4:0e:4d:b3:14:6f:f5:09:04:7c:b3:6f:80:1d:42:
15:12:88:f9:c6:99:63:4d:8c:78:67:bc:9e:98:ce:f0:d1:62:
25:5f:ab:b2:b3:c5:4f:6b:8e:e1:e4:6c:16:b3:d3:e6:de:75:
89:b8:36:78:1e:79:c6:4c:9f:4f:4a:61:2f:18:6b:90:41:fd:
bb:b8:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:31:56 2026 by rpki-client