Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f33322d3438203d3e2033323134.roa
File: 326130373a643838303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: e82HG0cCY0mm7ZtvveCVyewkQTaStMm/Ui5MHOoSICU=
Subject key identifier: 4A:FC:97:6D:9A:86:8F:47:1B:C0:62:41:31:A8:BD:7B:1F:B4:ED:43
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 50B9295EAFCEA28FCA00825A5B81FD5B0FB61877
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f33322d3438203d3e2033323134.roa
Signing time: Thu 16 Jul 2026 17:44:11 +0000
ROA not before: Thu 16 Jul 2026 17:39:11 +0000
ROA not after: Thu 15 Jul 2027 17:44:11 +0000
asID: 3214
IP address blocks: 2a07:d880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b9:29:5e:af:ce:a2:8f:ca:00:82:5a:5b:81:fd:5b:0f:b6:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jul 16 17:39:11 2026 GMT
Not After : Jul 15 17:44:11 2027 GMT
Subject: CN=4AFC976D9A868F471BC0624131A8BD7B1FB4ED43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:df:2f:d5:fc:91:0e:12:54:c2:7d:3d:f4:ed:
7f:f9:51:1b:7b:32:26:c2:7e:1c:80:80:b0:d7:53:
09:65:2f:ca:a0:ba:73:fc:d5:4a:3c:b2:78:b0:39:
ea:9f:6c:b1:1f:26:31:ab:45:83:06:24:75:5d:c4:
12:44:6e:8a:6d:b3:78:28:a1:fc:fc:cb:de:8e:98:
6c:d6:64:39:16:14:9c:45:35:e9:f5:90:95:bd:bf:
22:46:36:cc:2a:83:0f:42:81:b9:0c:ba:b5:5d:24:
29:f3:9c:24:7f:f2:70:36:05:44:42:b0:cd:f8:16:
73:13:b0:1f:50:e1:0c:ca:d3:b9:0e:06:ce:28:bf:
07:a1:14:da:54:9b:66:74:a7:7a:d6:10:cf:ec:4c:
b2:15:5e:23:c2:bb:3a:3f:e0:21:6d:5b:45:b0:c8:
d2:31:56:3c:37:39:ad:94:51:e3:1c:d3:dc:81:2e:
06:21:69:89:3c:f7:ec:03:9a:9e:c3:bc:ed:30:60:
06:9a:29:29:42:61:db:aa:69:32:81:b0:58:2c:ee:
e9:4f:0b:c9:f2:b4:1e:a8:a5:69:46:c1:56:a8:2d:
f1:30:b8:46:a5:82:8e:00:0c:59:fb:7c:d7:3b:55:
5f:31:bc:e4:19:0e:a5:fd:5e:14:37:55:3d:d3:e5:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:97:6D:9A:86:8F:47:1B:C0:62:41:31:A8:BD:7B:1F:B4:ED:43
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880::/32
Signature Algorithm: sha256WithRSAEncryption
cd:4c:0c:ba:74:5d:3e:03:63:1b:62:1d:b4:62:48:d5:3d:02:
e6:8b:b5:0f:66:99:5f:3b:96:35:4a:8f:fb:7e:95:93:dd:11:
39:41:e0:31:58:fe:8d:f7:2f:29:f3:3f:aa:db:7d:70:e7:29:
40:cf:d8:0f:5c:e6:c6:1a:b5:83:c0:56:6d:61:a4:21:6c:dd:
6f:0d:88:da:36:13:0b:67:c0:ed:f0:e6:c5:fd:48:c6:7f:8b:
59:ee:4f:f4:d0:11:ed:67:7e:ee:f5:4e:61:1f:37:6d:66:bb:
72:3a:e7:a4:e8:51:41:f0:8a:0d:e6:9b:04:5d:b0:8c:9f:2c:
92:6b:52:a9:6b:c9:e5:70:4c:a4:32:68:f8:ba:70:5b:24:3a:
75:37:e4:8b:a7:42:40:4d:ab:95:06:84:d5:8c:aa:92:fd:d0:
52:a7:f4:98:d7:d0:d7:bb:24:57:04:c7:5c:85:34:66:e4:0c:
e1:6f:7e:55:f2:0c:cc:c4:20:75:bf:80:70:22:f9:39:d1:a6:
f6:9c:ea:50:e8:74:24:4d:bd:75:e9:fe:2c:a9:1f:c5:74:ac:
2d:59:ac:b6:eb:2b:f9:1b:ea:8a:bd:2a:c2:56:94:a1:82:a0:
23:55:b4:72:99:f6:4f:b0:a5:be:df:b2:73:ba:d9:e2:3b:b7:
1f:86:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:35 2026 by rpki-client