Route Origin Authorization
$ rpki-client -vvvf rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa
File: 3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa (raw, json)
Hash identifier: /rCvPypNn8AfE07uBlJrYmpUpyqckFPY1n51eN+xg/Q=
Subject key identifier: BD:13:8B:34:59:6E:BC:B0:CA:2B:68:31:81:8D:73:12:D1:C0:CC:F5
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: CB32F65247A734B0B1385BF8D893F0B4EAB4F1
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa
Signing time: Wed 26 Aug 2026 21:44:12 +0000
ROA not before: Wed 26 Aug 2026 21:39:12 +0000
ROA not after: Wed 25 Aug 2027 21:44:12 +0000
asID: 43357
IP address blocks: 194.127.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cb:32:f6:52:47:a7:34:b0:b1:38:5b:f8:d8:93:f0:b4:ea:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 26 21:39:12 2026 GMT
Not After : Aug 25 21:44:12 2027 GMT
Subject: CN=BD138B34596EBCB0CA2B6831818D7312D1C0CCF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:6d:52:b0:03:88:a7:30:59:96:fd:5d:c7:
86:fd:97:f2:aa:92:b6:8c:a5:0d:28:1b:c0:34:29:
6d:e6:28:25:94:e6:84:c9:3f:a0:c6:00:0f:0d:af:
12:8b:b4:7f:ab:cb:71:68:f8:5e:45:7e:fa:5f:d0:
da:5a:05:15:ec:9d:6d:82:13:b6:82:c1:93:d6:1f:
38:41:8d:c4:e4:04:0b:9e:2c:f8:ca:3f:ca:71:6b:
ed:17:8e:23:c7:9d:f9:25:9c:92:50:42:73:72:b5:
21:14:15:d3:ab:44:24:18:ca:6f:ac:12:77:12:69:
16:f3:a3:03:f3:b5:2d:3d:03:5d:ce:a7:88:f5:71:
a1:e0:0c:ea:b0:a6:2e:88:d3:e3:1a:5d:f9:26:0e:
8d:8e:1a:bf:3f:3a:ce:b6:42:5a:0c:b6:19:ad:ca:
c4:3c:ca:47:16:aa:3d:a2:38:98:20:79:da:b1:59:
6d:58:ae:23:56:e7:d7:56:58:1f:ad:51:4f:80:9b:
a9:d5:4d:8b:79:d7:f7:c2:88:70:1b:2e:68:ef:a6:
65:7a:31:23:d4:1f:f4:36:39:78:50:98:47:12:39:
f7:b2:f3:7a:0f:de:2d:9d:bf:aa:dd:dc:27:9f:03:
26:d6:cf:89:ed:0b:12:5d:7f:1a:38:85:42:76:03:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:8B:34:59:6E:BC:B0:CA:2B:68:31:81:8D:73:12:D1:C0:CC:F5
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/3139342e3132372e3136372e302f32342d3234203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e4:fc:dd:d6:ef:44:d7:76:b6:28:ec:78:65:42:70:3e:6e:
f2:57:b4:2d:ee:bf:b9:88:cb:ac:46:0b:d2:28:ad:d5:3c:30:
33:e1:3a:f5:3b:23:9c:85:c1:48:9b:93:9c:4a:2a:51:df:8f:
bf:c7:39:60:ae:35:a8:4e:f5:16:b7:9c:96:27:04:0c:00:fa:
2f:46:44:9a:ef:f0:31:db:69:1f:fb:1e:1b:7d:37:1a:bc:07:
e3:e2:81:49:35:6b:72:e5:71:56:b4:a4:0e:d7:da:1f:63:e8:
ee:1f:6e:71:b4:be:a2:b6:a2:3a:38:d8:12:6f:80:b3:8f:3d:
33:a3:96:0f:1d:c9:a0:13:90:f7:f1:e7:00:06:03:03:4e:4c:
86:71:ce:90:61:51:f1:28:9d:a2:4d:0d:8c:00:97:45:9b:24:
b6:ea:ad:e4:d5:b8:d6:1a:fb:f6:fa:1a:3a:04:45:14:05:48:
d3:de:68:84:89:72:73:3e:71:4a:8a:84:b9:63:82:b7:f8:ea:
ad:f0:ba:06:56:7e:19:b6:ef:d0:11:c8:f0:71:97:b2:20:2c:
74:53:46:03:a7:3f:e3:48:42:92:cb:b4:12:a0:81:c8:eb:33:
14:54:44:f1:15:35:bb:15:48:9d:fa:05:fe:df:c8:ba:e8:1d:
aa:e1:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:54:05 2026 by rpki-client