Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File: 0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier: +wrrD8dlG0p9jKXvKH2Ks7PMCWIZcy/4N1UFtZw9s7k=
Subject key identifier: E6:D7:E3:44:C4:55:28:04:56:A4:B2:26:65:2F:00:CD:46:A9:58:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ED19EACE3ED93271EAAC8FEC11C225C7C62570E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time: Sun 11 Oct 2026 15:08:16 +0000
ROA not before: Sun 11 Oct 2026 15:08:16 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d1:9e:ac:e3:ed:93:27:1e:aa:c8:fe:c1:1c:22:5c:7c:62:57:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:16 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=b02b35df4501b8eb95c8c0866b257526d6c4b50a24a511724a09776bbbb7af0e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:b8:cf:cf:e1:ac:67:17:d5:4e:29:1a:64:
90:45:34:40:34:4b:01:0e:96:7a:5c:1a:75:3c:5d:
9d:38:47:7d:8a:aa:9f:08:42:ff:9b:4e:bc:ae:87:
60:68:51:ca:2d:ec:46:90:ac:4d:71:42:a5:ea:5d:
cf:d7:4b:e6:70:5f:28:da:35:e8:25:34:dd:69:ff:
0e:ae:02:36:2e:62:fd:43:87:1f:36:54:6f:6e:cc:
86:4a:83:26:fb:d7:24:ce:63:b8:a4:94:8e:8c:01:
6b:56:a2:49:b7:a9:fb:a1:70:10:33:3b:50:7b:5b:
05:32:61:1c:65:c7:b6:46:d6:aa:f7:e4:4f:6c:0a:
39:6d:f9:a8:f6:d1:3b:ad:8b:ad:74:9a:b5:71:8a:
d7:98:0b:cf:7c:ef:4a:9d:4d:e5:22:22:95:f7:8b:
01:b7:58:f0:24:c2:25:13:3d:99:56:e5:45:df:d6:
d4:5e:8e:a3:2d:1e:37:5e:02:5d:e0:e0:7e:92:d2:
0b:ec:43:e6:b0:b5:27:48:72:d9:05:24:9e:15:38:
32:c9:fe:0c:67:e6:6e:5d:2c:80:22:cd:0d:94:82:
e3:c0:9d:df:c0:23:ff:19:b9:ad:82:42:a8:3e:63:
dc:9d:5f:1e:a3:80:a0:da:6e:d7:e8:66:26:ee:19:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:E3:44:C4:55:28:04:56:A4:B2:26:65:2F:00:CD:46:A9:58:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
34:c3:38:f3:06:5c:de:5a:09:c8:61:a5:93:af:9d:ef:44:b5:
be:91:53:de:06:9b:51:ba:6e:b7:2a:14:65:2e:03:19:5c:6b:
3d:7b:e7:77:3b:9c:83:ef:ca:9e:30:b3:ae:05:45:43:06:ed:
f4:1d:21:34:94:43:8a:39:c5:cb:b5:47:7e:36:2b:ea:34:b9:
e9:a2:56:13:65:e1:2e:cc:95:03:65:46:6b:b2:8b:88:6a:a2:
39:87:85:fe:78:4a:3c:e3:ae:99:c2:1d:79:0b:cb:d8:1c:0c:
7c:04:ad:70:d4:73:95:d1:17:86:1a:30:1d:b6:4c:17:95:74:
b0:3e:78:88:1b:c5:75:2a:54:dd:56:2e:bb:1b:d5:90:83:ef:
2a:81:62:1a:97:6a:b1:91:a4:22:1b:a1:8f:69:86:06:f3:6b:
32:ef:6d:38:6f:7f:8a:2f:d1:2d:73:1f:76:72:ee:89:10:87:
22:78:2f:0c:aa:da:0e:ba:e3:00:b8:ed:5b:78:f9:7f:3f:2a:
60:6b:d1:1f:b9:92:1f:fb:54:53:fb:c7:0b:93:c7:14:07:16:
5f:a5:6b:28:c2:52:0c:4a:38:67:b4:10:2b:92:fe:61:e9:21:
de:c6:e7:ab:b7:ff:72:ac:c0:68:c2:93:16:20:26:e4:17:15:
b1:8b:3b:28
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXtGerOPtkyceqsj+wRwiXHxiVw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTA4MTZaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGIwMmIzNWRmNDUwMWI4ZWI5NWM4YzA4NjZiMjU3NTI2ZDZjNGI1MGEyNGE1
MTE3MjRhMDk3NzZiYmJiN2FmMGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQeuM/P4axnF9VOKRpkkEU0QDRLAQ6WelwadTxdnThHfYqqnwhC/5tOvK6H
YGhRyi3sRpCsTXFCpepdz9dL5nBfKNo16CU03Wn/Dq4CNi5i/UOHHzZUb27MhkqD
JvvXJM5juKSUjowBa1aiSbep+6FwEDM7UHtbBTJhHGXHtkbWqvfkT2wKOW35qPbR
O62LrXSatXGK15gLz3zvSp1N5SIilfeLAbdY8CTCJRM9mVblRd/W1F6Ooy0eN14C
XeDgfpLSC+xD5rC1J0hy2QUknhU4Msn+DGfmbl0sgCLNDZSC48Cd38Aj/xm5rYJC
qD5j3J1fHqOAoNpu1+hmJu4ZTksCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTm1+NE
xFUoBFaksiZlLwDNRqlYGDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDk5MmM4ZjMtOTFiOC00ODNlLTgyYTMtM2M1YzljMWE5ZTg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLLsADAN
BgkqhkiG9w0BAQsFAAOCAQEANMM48wZc3loJyGGlk6+d70S1vpFT3gabUbputyoU
ZS4DGVxrPXvndzucg+/KnjCzrgVFQwbt9B0hNJRDijnFy7VHfjYr6jS56aJWE2Xh
LsyVA2VGa7KLiGqiOYeF/nhKPOOumcIdeQvL2BwMfAStcNRzldEXhhowHbZMF5V0
sD54iBvFdSpU3VYuuxvVkIPvKoFiGpdqsZGkIhuhj2mGBvNrMu9tOG9/ii/RLXMf
dnLuiRCHIngvDKraDrrjALjtW3j5fz8qYGvRH7mSH/tUU/vHC5PHFAcWX6VrKMJS
DEo4Z7QQK5L+Yekh3sbnq7f/cqzAaMKTFiAm5BcVsYs7KA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:48 2026 by rpki-client