Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1172536b-2edc-4ffb-9fca-b111f3d038a9.roa
File: 1172536b-2edc-4ffb-9fca-b111f3d038a9.roa (raw, json)
Hash identifier: tRmQ9jXhIOWyVvI3DBPL5/fHrgQJkC4O/TmTcISX9Kk=
Subject key identifier: 07:44:54:8E:27:09:0A:1B:A2:44:86:8E:68:59:9C:B2:23:EB:68:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5377CF30D8E399921BA2C419FA532301629875FE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1172536b-2edc-4ffb-9fca-b111f3d038a9.roa
Signing time: Fri 07 Aug 2026 04:30:18 +0000
ROA not before: Fri 07 Aug 2026 04:30:18 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:77:cf:30:d8:e3:99:92:1b:a2:c4:19:fa:53:23:01:62:98:75:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:18 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=933469df3c0f549c8b2b50741876b5c032c2074d0c26830424cf484beef716f5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:c2:7f:d9:b2:1d:1e:18:d6:2e:e6:96:3a:
cf:58:fe:4f:30:14:49:47:1a:11:a0:28:51:6a:37:
bb:9d:39:be:21:7e:1d:0e:cc:f7:91:c0:b1:68:48:
79:8f:a4:4a:c2:0c:95:38:e0:78:c7:36:48:54:5c:
86:f5:b5:ea:5c:72:c1:3a:1a:1b:a6:8c:e3:44:99:
f1:af:22:1b:90:c3:4e:85:51:10:4a:81:60:00:a7:
13:aa:42:fd:a4:f6:e0:bb:38:a7:66:9f:45:a5:19:
61:05:ca:89:e3:de:50:6e:ca:26:c1:f5:a7:e6:4e:
ae:ae:8f:8b:3d:ca:e4:2e:c9:2b:c5:6b:a7:6c:78:
9d:79:38:e4:4f:b8:04:be:0e:32:42:9f:46:e1:f5:
c7:d4:7b:d6:34:d1:0d:c3:3a:43:6c:a6:60:b3:48:
96:49:00:e4:5b:a6:c2:ed:1d:a1:a2:9f:05:39:59:
39:c7:3a:4f:e6:7d:2d:80:b8:27:de:b8:1b:0c:70:
ac:4c:9d:02:bf:4f:83:10:5e:07:39:a2:2c:c5:57:
6f:36:72:ec:0a:c1:ca:3b:c7:10:5c:d7:0e:59:dc:
92:8f:55:4e:83:72:a9:5f:c1:7c:63:18:05:c8:94:
f0:51:06:49:54:f3:3a:94:04:57:3f:8d:5a:1d:76:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:54:8E:27:09:0A:1B:A2:44:86:8E:68:59:9C:B2:23:EB:68:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1172536b-2edc-4ffb-9fca-b111f3d038a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.112.0/21
Signature Algorithm: sha256WithRSAEncryption
10:7f:fd:6f:f2:4d:4c:2d:c4:0e:4a:e0:c2:1d:6c:3e:25:90:
b2:61:78:29:31:f3:86:6d:12:b3:23:c7:90:a9:b9:f3:17:f5:
fd:8b:f2:1c:f8:1e:ff:37:29:6b:8b:be:15:04:4c:69:08:46:
c3:4c:8c:20:1e:24:81:a0:94:41:64:89:5e:74:a8:de:f8:bc:
ed:aa:ea:ad:3c:19:fc:56:6e:14:bf:cc:38:5b:0b:8e:d1:92:
bf:0c:f3:55:55:64:c0:19:69:d6:ec:d6:d7:57:94:7c:74:c8:
50:76:6c:8a:30:58:ca:d1:40:72:5b:ae:ac:c0:6b:2d:1f:87:
38:6e:67:6c:b9:40:3e:3a:3f:87:f5:20:22:fa:b2:99:2f:96:
f5:9d:28:97:bf:7e:d6:b8:a0:2d:fc:d0:7d:39:e1:7f:63:a5:
ac:cd:c2:56:97:2d:76:46:ce:1c:a3:3b:75:09:ba:d6:29:c0:
58:07:4a:16:d8:c6:1a:50:78:48:64:c9:5c:a5:ef:18:27:aa:
d8:85:9c:af:e2:25:24:a3:2d:d6:d7:36:8b:e9:63:fa:31:18:
69:17:22:87:0b:66:93:d6:0f:8f:6c:40:e2:79:d0:24:f3:ee:
40:d9:c4:f4:2f:8a:a3:1a:5a:63:c1:e5:17:14:c5:df:c5:2e:
c0:b8:17:44
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUU3fPMNjjmZIbosQZ+lMjAWKYdf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMwMThaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDkzMzQ2OWRmM2MwZjU0OWM4YjJiNTA3NDE4NzZiNWMwMzJjMjA3NGQwYzI2
ODMwNDI0Y2Y0ODRiZWVmNzE2ZjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnewn/Zsh0eGNYu5pY6z1j+TzAUSUcaEaAoUWo3u505viF+HQ7M95HAsWhI
eY+kSsIMlTjgeMc2SFRchvW16lxywToaG6aM40SZ8a8iG5DDToVREEqBYACnE6pC
/aT24Ls4p2afRaUZYQXKiePeUG7KJsH1p+ZOrq6Piz3K5C7JK8Vrp2x4nXk45E+4
BL4OMkKfRuH1x9R71jTRDcM6Q2ymYLNIlkkA5Fumwu0doaKfBTlZOcc6T+Z9LYC4
J964GwxwrEydAr9PgxBeBzmiLMVXbzZy7ArByjvHEFzXDlncko9VToNyqV/BfGMY
BciU8FEGSVTzOpQEVz+NWh12KIMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQHRFSO
JwkKG6JEho5oWZyyI+toJzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTE3MjUzNmItMmVkYy00ZmZiLTlmY2EtYjExMWYzZDAzOGE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgcDAN
BgkqhkiG9w0BAQsFAAOCAQEAEH/9b/JNTC3EDkrgwh1sPiWQsmF4KTHzhm0SsyPH
kKm58xf1/YvyHPge/zcpa4u+FQRMaQhGw0yMIB4kgaCUQWSJXnSo3vi87arqrTwZ
/FZuFL/MOFsLjtGSvwzzVVVkwBlp1uzW11eUfHTIUHZsijBYytFAcluurMBrLR+H
OG5nbLlAPjo/h/UgIvqymS+W9Z0ol79+1rigLfzQfTnhf2OlrM3CVpctdkbOHKM7
dQm61inAWAdKFtjGGlB4SGTJXKXvGCeq2IWcr+IlJKMt1tc2i+lj+jEYaRcihwtm
k9YPj2xA4nnQJPPuQNnE9C+KoxpaY8HlFxTF38UuwLgXRA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:41 2026 by rpki-client