Route Origin Authorization
$ rpki-client -vvvf rpki.owl.net/rrdp/owl/1/326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa
File: 326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa (raw, json)
Hash identifier: zJceELcjHFflj+G4GUkUFuAjzeVCaTCwSaS2fSduq4c=
Subject key identifier: 86:53:A4:42:99:EA:4D:21:0D:BC:EF:F0:AF:54:A4:29:82:A6:10:8D
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 5F411651074EED44CF1388B3A8241581263D6196
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa
Signing time: Fri 13 Nov 2026 14:44:15 +0000
ROA not before: Fri 13 Nov 2026 14:39:15 +0000
ROA not after: Fri 12 Nov 2027 14:44:15 +0000
asID: 43357
IP address blocks: 2a07:d884:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:41:16:51:07:4e:ed:44:cf:13:88:b3:a8:24:15:81:26:3d:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Nov 13 14:39:15 2026 GMT
Not After : Nov 12 14:44:15 2027 GMT
Subject: CN=8653A44299EA4D210DBCEFF0AF54A42982A6108D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:d2:21:bd:49:cf:b7:fc:03:e6:e8:95:bd:
02:e7:22:97:a9:02:60:2f:dd:a3:f9:de:90:2b:b8:
52:80:58:ca:b2:7d:aa:41:94:e3:da:a4:cc:ba:bb:
88:72:5b:84:b6:db:3b:b5:2c:d6:9a:33:9b:31:e6:
65:2e:18:33:97:2b:22:0c:11:c8:c5:13:e4:69:c9:
7c:9e:87:7f:41:79:df:33:1e:1a:0f:50:5c:32:3a:
6a:4d:57:f1:87:3e:93:11:ba:a9:5a:94:a7:34:2c:
42:f6:b2:12:95:07:30:45:32:68:69:a5:5f:26:39:
a9:a4:a1:60:8b:c3:4c:46:e6:ec:ed:d8:0f:2a:63:
95:90:c6:3b:fa:ee:8c:9f:41:9b:b9:a9:07:3a:d6:
06:90:1b:4d:38:02:6f:fe:09:63:95:90:be:5d:21:
01:ad:6d:25:29:ef:74:84:2f:15:bc:a1:2d:06:d2:
af:ef:42:f7:ae:d5:e9:a8:ee:3a:32:e0:2f:a5:c3:
67:75:42:fe:12:36:fe:11:aa:cc:ab:b9:ad:85:15:
07:8a:ad:0b:05:d4:93:0a:99:72:ed:71:47:f9:13:
44:ee:31:31:9e:77:72:0e:37:2f:cd:f2:97:64:23:
8a:66:69:f1:db:5c:e4:ce:e3:bc:f0:75:83:49:a7:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:53:A4:42:99:EA:4D:21:0D:BC:EF:F0:AF:54:A4:29:82:A6:10:8D
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d884:100::/40
Signature Algorithm: sha256WithRSAEncryption
48:37:1d:90:4b:74:47:a6:b9:ba:d4:ab:16:7f:1d:97:83:8d:
37:66:ad:d4:cb:74:8e:80:e7:60:15:b7:54:44:d7:cc:a9:fe:
9f:47:e9:a1:da:78:ad:dc:4b:60:75:a8:a9:29:37:24:dd:81:
a4:d4:81:eb:33:7d:73:9d:56:51:30:48:5d:33:86:11:75:52:
26:6b:4d:59:8d:71:33:30:2b:af:20:b0:45:c2:77:e7:43:14:
4a:10:ba:3a:32:57:86:af:88:57:62:20:6b:d8:07:37:0d:d0:
e2:c9:fc:6f:7d:5f:9b:50:7b:02:2a:7d:34:1a:94:29:a9:e9:
32:73:de:47:10:4f:91:2f:da:6c:f8:85:fc:5a:48:66:fe:db:
e9:fe:70:43:ac:e6:b3:14:d1:5a:9c:58:e6:be:fc:e6:00:8b:
7c:09:2a:09:7e:af:80:fb:44:b3:fe:25:94:df:d7:d9:be:5d:
54:f4:72:66:0d:83:08:91:5d:0b:9a:14:a4:a9:e2:2d:f8:ca:
c1:62:c2:65:bd:dc:19:de:bb:89:7b:7a:c4:c6:4a:30:5d:28:
31:7c:ce:68:02:94:b1:a1:c2:50:89:db:06:67:06:32:13:b1:
7b:c6:09:a2:6e:fc:74:30:98:09:3d:da:0a:43:60:72:37:d1:
54:06:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:41:54 2026 by rpki-client