Route Origin Authorization
$ rpki-client -vvvf rpki.owl.net/rrdp/owl/1/326130373a643838303a323a3a2f34382d3438203d3e203433333537.roa
File: 326130373a643838303a323a3a2f34382d3438203d3e203433333537.roa (raw, json)
Hash identifier: 4LPx+zWmyFbHbymWSrYxEtoJgsSvm/NNWXcEtJVcC7o=
Subject key identifier: B0:AE:77:64:2C:0A:35:44:BD:7C:84:A1:8E:BB:39:61:03:FF:96:92
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 1B805F476E7DBF456F1A924D933AC0382A2F9478
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a323a3a2f34382d3438203d3e203433333537.roa
Signing time: Wed 26 Aug 2026 21:44:12 +0000
ROA not before: Wed 26 Aug 2026 21:39:12 +0000
ROA not after: Wed 25 Aug 2027 21:44:12 +0000
asID: 43357
IP address blocks: 2a07:d880:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:80:5f:47:6e:7d:bf:45:6f:1a:92:4d:93:3a:c0:38:2a:2f:94:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Aug 26 21:39:12 2026 GMT
Not After : Aug 25 21:44:12 2027 GMT
Subject: CN=B0AE77642C0A3544BD7C84A18EBB396103FF9692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:2d:e5:c0:8f:4a:c2:25:25:d0:75:c3:87:
12:41:c8:d0:4b:4f:25:9b:8e:11:bd:cb:3b:24:bd:
ab:58:ca:57:b5:fd:73:54:86:16:40:88:c5:a6:6f:
2d:f6:7f:11:90:ca:79:5e:02:de:1e:ad:91:4c:4c:
4d:2c:eb:24:c4:31:f6:66:ac:24:dd:d9:f4:fc:f9:
bd:0a:60:29:8c:87:aa:39:64:a2:4e:be:b3:44:49:
3b:77:1f:94:1a:94:f8:09:5d:48:55:68:77:da:a6:
14:82:8d:7c:7b:5e:77:aa:dd:9a:e4:5e:67:dc:25:
44:3f:b0:39:7e:34:54:e3:93:60:18:1e:3c:d5:aa:
ac:88:3b:7a:1d:e8:62:1b:6e:4e:d5:da:70:27:c0:
7b:f2:48:22:f4:36:7a:a4:8c:9d:a1:c6:d1:6f:f2:
53:39:bf:ae:aa:b3:30:c3:5d:33:0c:04:fb:c1:62:
d6:2d:07:9c:80:82:52:5e:00:18:26:c3:7a:f2:8c:
37:68:b6:58:58:00:47:df:39:c2:57:76:bd:1f:01:
a4:d3:e6:6b:e4:3f:e5:94:ce:c1:69:da:4c:1a:80:
15:ca:f6:97:a7:9b:fd:19:de:02:54:49:c5:fb:2a:
dd:28:1b:bb:ed:64:ef:50:43:7d:19:88:8d:46:22:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:77:64:2C:0A:35:44:BD:7C:84:A1:8E:BB:39:61:03:FF:96:92
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a323a3a2f34382d3438203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d880:2::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b8:6a:e6:19:37:b5:2c:7b:4a:8b:c3:d1:c4:ab:17:0e:07:
f8:db:54:a2:60:5d:ec:08:a7:77:d8:1b:57:2c:5b:e3:20:f1:
3d:50:6c:d5:05:92:d9:a2:11:58:18:d4:64:95:31:21:9d:c4:
64:a1:c8:d2:98:46:55:d3:56:e6:46:ab:2d:62:f3:39:c5:c9:
ac:d5:b4:09:f1:31:da:17:3d:e0:77:b0:50:a0:ef:4f:95:99:
c9:89:61:8c:a9:65:c7:6e:eb:38:c8:62:46:c9:bc:28:c1:4d:
9b:c3:80:8f:2c:29:b9:97:c6:82:0f:49:da:2a:53:39:48:df:
11:7f:e9:c9:0d:69:ec:07:29:4a:00:00:33:56:72:e8:d8:a3:
49:24:9c:9d:70:ca:7e:3f:db:0d:8f:d6:75:a0:44:46:a4:a6:
08:84:40:d3:b1:8b:c7:2e:3f:ff:c5:13:ef:57:74:e3:37:28:
d9:48:fc:31:da:8a:55:7b:67:5b:ce:a4:53:22:80:e6:99:60:
7f:d4:e2:e0:40:76:7e:8c:31:b3:d9:0e:d9:94:d5:0e:33:37:
9e:cb:80:d9:82:82:cc:f7:34:9e:95:64:cd:b2:41:de:23:74:
37:00:85:c7:a8:54:09:78:62:1a:5d:85:3e:b5:f6:11:87:04:
76:1c:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:14:12 2026 by rpki-client