Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838353a3a2f34302d3438203d3e20323132353132.roa
File: 326130373a643838353a3a2f34302d3438203d3e20323132353132.roa (raw, json)
Hash identifier: e1uyEHl+JctHQ7sCDbMmEajqBK28G40MfdDUe7KeSNA=
Subject key identifier: 92:47:69:11:FC:C8:5D:0B:EA:1B:E7:BC:E3:6B:30:7E:5D:1F:72:8A
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 438C9A447F77C1391CB786719AD427F0B5AEFF18
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838353a3a2f34302d3438203d3e20323132353132.roa
Signing time: Wed 25 Mar 2026 12:43:57 +0000
ROA not before: Wed 25 Mar 2026 12:38:57 +0000
ROA not after: Wed 24 Mar 2027 12:43:57 +0000
asID: 212512
IP address blocks: 2a07:d885::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8c:9a:44:7f:77:c1:39:1c:b7:86:71:9a:d4:27:f0:b5:ae:ff:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Mar 25 12:38:57 2026 GMT
Not After : Mar 24 12:43:57 2027 GMT
Subject: CN=92476911FCC85D0BEA1BE7BCE36B307E5D1F728A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:3c:2a:00:70:60:ce:69:25:1a:66:35:cd:
1b:98:1b:48:d0:0a:cd:0e:f8:6d:62:b6:51:e7:c1:
1e:ae:ff:97:52:21:01:a1:55:fa:2d:fc:af:67:cd:
f6:d9:53:5e:5b:12:dd:58:9c:6e:32:a9:f9:ff:a6:
43:68:b2:3a:22:8d:c0:60:39:56:9f:2a:e4:29:8e:
0c:4d:8c:9a:bf:e1:b7:c0:4b:31:0e:8d:e1:b0:0f:
b3:28:c8:fb:48:2c:77:ac:d0:f8:a8:86:fe:2a:dc:
02:cf:8a:18:06:27:c9:b0:1f:8a:2c:c9:cb:ce:06:
e2:d1:4e:a9:e1:f9:97:8d:30:6b:f7:84:2c:8e:a7:
90:22:5b:0b:4e:b3:4b:5f:99:8d:28:3b:06:14:58:
2e:e3:42:51:7b:e7:75:00:23:ed:b9:44:6a:78:66:
e8:8d:df:d8:47:90:55:d7:e6:c8:06:33:b6:2f:ac:
ec:e3:48:77:c6:66:80:4d:a5:a2:12:28:de:07:ae:
32:7a:88:7a:f7:22:41:2b:bf:4f:a2:c1:77:77:68:
e8:92:91:bb:86:8a:45:15:98:16:82:f4:30:45:f5:
db:16:5b:1e:b4:c3:72:4f:9e:bf:76:d4:3c:7f:c7:
9c:ec:dc:01:3b:6d:d7:f8:ba:5e:ee:cd:d1:6e:f8:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:69:11:FC:C8:5D:0B:EA:1B:E7:BC:E3:6B:30:7E:5D:1F:72:8A
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838353a3a2f34302d3438203d3e20323132353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d885::/40
Signature Algorithm: sha256WithRSAEncryption
5d:88:73:e7:20:bf:68:66:1a:fe:01:3e:d6:58:7f:e9:59:78:
81:b1:55:dd:da:ba:9c:31:44:30:54:d2:87:e5:97:fb:d6:f8:
7d:aa:33:28:7b:33:ca:30:48:97:c6:e6:2c:0b:8a:a0:c9:1e:
0d:1c:a3:01:b5:7b:eb:f2:13:5c:38:e4:51:0e:ab:da:f1:18:
ef:5c:38:dd:36:8f:c7:2f:e6:64:dd:d3:52:c1:1c:39:8e:e3:
63:56:ad:c9:f8:17:29:65:fd:39:9b:39:7e:7a:6c:35:23:59:
c3:2a:f5:42:83:7c:61:d7:42:69:40:b7:94:2e:d4:0f:13:80:
8f:14:25:e7:4e:a3:e1:55:ef:c7:e4:b6:a0:d9:83:67:31:b3:
2b:a4:4d:f5:09:0d:e4:22:54:a4:39:e8:b7:63:d8:78:f8:31:
42:87:a2:53:46:22:d7:87:dd:05:96:b8:25:f0:e0:b8:c1:b3:
dd:c9:b6:62:a5:0f:f6:b0:78:bd:3e:e3:fc:08:2e:25:ed:ea:
8f:6e:5c:e0:f5:2e:d9:51:d5:ce:94:24:7d:e1:73:dc:b8:ba:
bd:ad:1f:e9:96:93:5b:7c:72:6d:bd:c7:9a:83:68:96:f4:87:
ac:84:5c:58:fc:8f:8a:c3:77:95:b8:58:73:44:b8:4a:44:b3:
60:82:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:33 2026 by rpki-client