Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203433333537.roa
File: 326130373a643838303a3a2f32392d3438203d3e203433333537.roa (raw, json)
Hash identifier: mfCV9LkyEGdRemQKdu8mH1kHPLmn54juZg9GVgVwr3w=
Subject key identifier: A5:A5:78:D4:85:1F:1F:3D:55:20:E7:6F:EE:97:53:94:4E:DE:CE:BD
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 215A6772EEDEF076FA198EA9B6AB0C25E0245F05
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203433333537.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 43357
IP address blocks: 2a07:d880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5a:67:72:ee:de:f0:76:fa:19:8e:a9:b6:ab:0c:25:e0:24:5f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=A5A578D4851F1F3D5520E76FEE9753944EDECEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:fa:a8:ed:78:24:5f:cb:4f:e4:1b:45:97:
89:c6:c2:15:c8:77:c0:b2:c3:13:ee:16:c1:ed:48:
60:31:28:01:9e:bb:7f:c5:9f:2d:6d:f5:64:96:50:
25:02:fe:1e:a5:03:e3:30:bc:eb:af:d4:57:29:d4:
9b:f6:94:af:8c:19:e5:36:86:dc:de:19:89:90:71:
3a:ad:45:35:e5:03:04:30:a1:10:55:d8:64:d9:83:
ed:cb:55:69:a2:e2:83:ee:e9:b4:37:fa:1d:cd:d1:
01:91:1c:5c:ec:ba:9c:eb:32:0f:dc:cd:bc:31:c1:
39:29:c5:22:a9:a0:c5:9b:2d:78:d3:47:0e:d5:a3:
b7:6a:c7:64:7d:24:23:64:2f:3e:84:06:fd:41:15:
b8:0d:9a:7c:fb:ad:75:d9:b0:06:6f:81:e6:dc:6b:
0a:3a:e1:0e:93:a2:b3:96:71:7f:05:9e:9f:82:9b:
de:33:ec:f6:8f:80:fe:5c:fd:90:bf:4a:2f:86:ed:
53:0d:ba:51:c7:42:56:65:df:75:d0:06:30:7c:95:
e5:50:01:28:1e:28:b0:f5:f4:53:7c:eb:63:3b:b9:
be:d1:d6:25:ad:25:0f:e6:b6:88:91:a4:c5:4f:99:
0c:49:18:d7:2c:45:09:71:14:b0:a7:1b:d7:d9:1f:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:78:D4:85:1F:1F:3D:55:20:E7:6F:EE:97:53:94:4E:DE:CE:BD
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880::/29
Signature Algorithm: sha256WithRSAEncryption
13:15:ea:fe:ba:e5:fe:25:d5:93:b1:10:44:81:eb:d2:80:4f:
29:01:73:99:3c:a9:ab:d4:4b:56:50:38:d5:8b:1e:42:e5:40:
77:7f:2f:41:96:26:7d:4c:e0:89:a1:c0:2f:1e:60:26:bc:70:
8e:6b:7d:fa:42:cf:cf:ad:21:ab:05:91:0a:bd:bc:ea:81:ae:
3f:41:64:3f:44:70:4a:2f:6c:dc:43:a2:57:50:b1:72:56:5a:
0e:80:7e:0b:07:d2:55:d1:15:35:75:5d:e9:c5:7a:d7:72:ca:
c0:07:d0:17:b4:24:9c:23:fb:5c:76:e7:fc:78:e2:34:1d:b6:
76:fb:9d:1d:d7:e3:de:b9:3f:f6:d9:78:d5:b9:75:7d:51:2e:
78:31:68:b6:15:61:a2:6f:32:c0:4a:c7:4d:d8:7c:c3:6f:be:
05:35:23:64:67:f3:bb:df:2a:16:d1:b3:e5:81:66:fa:3a:8f:
5a:91:ea:5d:6e:fd:62:71:35:19:f6:97:c5:48:1a:14:82:27:
ec:d8:ba:be:34:7e:72:95:6e:81:d6:aa:fa:22:43:1f:02:9d:
7a:e1:f3:a2:26:d1:53:c2:2e:e3:2d:c2:9e:08:0a:a8:c2:de:
e4:1a:53:6a:35:9e:a1:93:22:27:f1:0c:e5:a5:40:bd:2a:92:
d2:20:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:37 2026 by rpki-client