Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203433333537.roa
File: 326130373a643838303a3a2f32392d3438203d3e203433333537.roa (raw, json)
Hash identifier: h9jlMyru/mF5bgKpwYywfw+wBKjDKt/TDMysH3JiXHI=
Subject key identifier: 60:FF:AF:B6:71:5C:ED:77:88:68:C6:5F:B7:5A:84:9F:EA:C8:EE:03
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 4665ACE6CC8DFD7202E3C4B39E71F3F638E66EE1
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203433333537.roa
Signing time: Thu 14 Aug 2025 17:43:56 +0000
ROA not before: Thu 14 Aug 2025 17:38:56 +0000
ROA not after: Thu 13 Aug 2026 17:43:56 +0000
asID: 43357
IP address blocks: 2a07:d880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:65:ac:e6:cc:8d:fd:72:02:e3:c4:b3:9e:71:f3:f6:38:e6:6e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 14 17:38:56 2025 GMT
Not After : Aug 13 17:43:56 2026 GMT
Subject: CN=60FFAFB6715CED778868C65FB75A849FEAC8EE03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:90:e6:de:cb:76:36:2c:b1:38:4e:e8:7b:
37:69:d1:03:c7:33:61:88:1d:1c:81:87:71:19:40:
26:83:9e:3c:fd:68:c3:30:1b:07:33:aa:bd:53:b2:
22:4e:ff:7c:d8:80:ff:0d:96:cf:b0:61:a5:42:cc:
80:20:8d:2b:75:5c:3c:bb:78:d6:de:5c:8c:a1:45:
75:08:0f:84:2a:bd:39:74:50:c2:52:bb:29:c8:ed:
f7:9a:f2:23:3f:69:ed:d4:43:f9:f3:bd:ac:6a:0e:
d2:05:37:1f:97:07:1a:32:18:ff:9d:a5:41:ce:af:
c0:40:ab:91:a5:5f:04:dc:83:75:99:47:ff:76:ee:
73:eb:44:0c:64:4e:f9:a5:01:48:c5:1a:17:30:72:
b4:db:e0:f1:f2:dd:da:6f:90:e6:5b:ca:c2:f2:4c:
c8:29:67:a7:a0:9c:bc:79:dd:09:e3:e2:f7:89:80:
85:8c:b8:65:23:4e:eb:22:ce:85:4b:eb:ad:6f:5e:
5a:2f:8e:d0:19:e6:19:37:ff:66:0e:89:ab:1b:c4:
0f:fa:49:23:3e:19:a0:e2:3d:63:77:0e:8d:23:0a:
7e:e7:c8:e4:47:29:4c:d0:1a:6c:67:20:1e:d4:53:
5a:1d:46:87:9c:fa:b1:62:c7:90:61:b6:3e:01:c0:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:AF:B6:71:5C:ED:77:88:68:C6:5F:B7:5A:84:9F:EA:C8:EE:03
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880::/29
Signature Algorithm: sha256WithRSAEncryption
16:89:53:30:94:a0:22:e3:5e:b5:14:ea:90:a7:42:99:c9:57:
da:33:ae:06:4e:71:fc:a2:54:be:ad:54:0a:cf:ac:94:63:ba:
25:95:d7:b9:80:a9:79:1c:03:44:14:17:67:09:a7:c1:8b:b8:
40:78:26:78:f5:6a:c1:82:a8:53:d7:e9:65:56:c2:17:ae:70:
b7:ae:8d:0e:64:80:36:95:93:8d:93:71:b3:5c:73:bd:d9:a3:
49:07:de:97:13:9e:e7:b0:d2:49:2c:74:9c:8a:ce:97:48:c3:
87:d0:9f:dc:d4:92:dc:09:9c:c8:1d:81:bb:e2:cc:d7:57:3c:
7b:13:ee:6a:ed:52:bd:fb:82:53:50:03:d6:09:c3:f9:1a:87:
66:c2:8f:f9:96:bb:5f:18:bb:60:e3:64:9b:f4:4f:01:be:b9:
f3:e2:15:12:4c:1f:16:a8:48:9f:bb:99:9c:f9:ed:eb:c9:fd:
60:6b:09:49:89:fb:d5:f4:c3:b8:0f:3a:30:88:9a:89:4b:8d:
b3:8b:e1:fe:a9:9a:ca:d0:85:03:78:28:f7:2b:c0:a8:8d:73:
ed:c4:e2:be:e7:ad:2c:b4:68:53:29:23:cd:22:14:68:cc:62:
f0:0c:06:7e:43:76:fe:c0:9f:50:e2:05:1b:50:fb:8b:96:76:
d3:85:ca:0c
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIURmWs5syN/XIC48SznnHz9jjmbuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU1ZTJlNzJkN2ZmZGU2YmNlYjczY2UyNmYxODVjNjc4
YTIzODkyZDAeFw0yNTA4MTQxNzM4NTZaFw0yNjA4MTMxNzQzNTZaMDMxMTAvBgNV
BAMTKDYwRkZBRkI2NzE1Q0VENzc4ODY4QzY1RkI3NUE4NDlGRUFDOEVFMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNJDm3st2NiyxOE7oezdp0QPH
M2GIHRyBh3EZQCaDnjz9aMMwGwczqr1TsiJO/3zYgP8Nls+wYaVCzIAgjSt1XDy7
eNbeXIyhRXUID4QqvTl0UMJSuynI7fea8iM/ae3UQ/nzvaxqDtIFNx+XBxoyGP+d
pUHOr8BAq5GlXwTcg3WZR/927nPrRAxkTvmlAUjFGhcwcrTb4PHy3dpvkOZbysLy
TMgpZ6egnLx53Qnj4veJgIWMuGUjTusizoVL661vXlovjtAZ5hk3/2YOiasbxA/6
SSM+GaDiPWN3Do0jCn7nyORHKUzQGmxnIB7UU1odRoec+rFix5Bhtj4BwJAxAgMB
AAGjggHLMIIBxzAdBgNVHQ4EFgQUYP+vtnFc7XeIaMZft1qEn+rI7gMwHwYDVR0j
BBgwFoAUtV4uctf/3mvOtzzibxhcZ4ojiS0wDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5vd2wubmV0L3JyZHAvb3dsLzEvQjU1
RTJFNzJEN0ZGREU2QkNFQjczQ0UyNkYxODVDNjc4QTIzODkyRC5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3RWNHVjdGZfM212T3R6emlieGhjWjRvamlTMC5jZXIw
dAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kub3dsLm5l
dC9ycmRwL293bC8xLzMyNjEzMDM3M2E2NDM4MzgzMDNhM2EyZjMyMzkyZDM0Mzgy
MDNkM2UyMDM0MzMzMzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqB9iAMA0GCSqGSIb3DQEBCwUA
A4IBAQAWiVMwlKAi4161FOqQp0KZyVfaM64GTnH8olS+rVQKz6yUY7ollde5gKl5
HANEFBdnCafBi7hAeCZ49WrBgqhT1+llVsIXrnC3ro0OZIA2lZONk3GzXHO92aNJ
B96XE57nsNJJLHScis6XSMOH0J/c1JLcCZzIHYG74szXVzx7E+5q7VK9+4JTUAPW
CcP5Godmwo/5lrtfGLtg42Sb9E8Bvrnz4hUSTB8WqEifu5mc+e3ryf1gawlJifvV
9MO4DzowiJqJS42zi+H+qZrK0IUDeCj3K8CojXPtxOK+560stGhTKSPNIhRozGLw
DAZ+Q3b+wJ9Q4gUbUPuLlnbThcoM
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:27 2025 by rpki-client