Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
File: 1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa (raw, json)
Hash identifier: ZGw7nRKvooRSRv7X+AJwCj3MGhKJZCto/vLTL+0S3fQ=
Subject key identifier: 14:79:6A:3F:AA:BD:66:D1:F5:0B:F5:86:BF:CF:94:1E:73:65:D6:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 619645DC33892109651D76C0EB440B2E96EB3887
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
Signing time: Sun 18 Oct 2026 01:30:24 +0000
ROA not before: Sun 18 Oct 2026 01:30:24 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:96:45:dc:33:89:21:09:65:1d:76:c0:eb:44:0b:2e:96:eb:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:24 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=62f52ac97aa2d779533c29eaf148b39e7615f7d6875d1c6d6235794a883e9563, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:19:0b:5d:76:89:0f:d7:11:01:c1:7d:22:
78:d3:9b:5f:08:c2:a8:95:e9:31:3e:f0:7f:f3:67:
18:37:9c:1a:27:88:5a:34:e4:91:65:4a:7c:13:4b:
6a:b2:91:89:cb:94:51:b0:8a:01:a6:85:a6:df:a2:
79:54:eb:b9:8e:1c:7c:84:ed:5b:7e:7f:ae:4b:20:
a4:df:2d:d9:69:c1:43:7b:56:30:ea:5a:15:e7:fa:
87:da:3f:ad:07:d4:24:29:a6:35:9f:39:06:95:ba:
42:70:86:9f:d4:e8:3f:16:a2:ce:47:34:48:68:3c:
eb:9f:a4:62:1c:df:52:13:02:99:6f:e1:b1:0b:39:
3e:57:49:87:f7:bb:86:e3:8d:91:58:22:24:a4:8e:
d2:83:9d:ec:d1:be:16:ca:9d:81:77:4e:25:36:31:
ab:2e:10:9a:e9:73:db:76:41:3a:9c:46:2d:20:c4:
4c:79:32:09:25:01:cb:83:26:da:6f:09:55:02:95:
15:50:77:ac:a6:3a:e4:77:08:7d:b4:a5:af:a1:65:
c1:b9:7f:bc:91:3d:aa:e6:0c:ed:87:af:23:49:b8:
56:b1:e5:ed:4a:ce:fd:dd:89:b8:ab:f3:0b:48:1f:
5d:35:11:3b:1c:9b:93:d9:75:f7:7f:8a:cc:f8:75:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:6A:3F:AA:BD:66:D1:F5:0B:F5:86:BF:CF:94:1E:73:65:D6:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.124.0/23
Signature Algorithm: sha256WithRSAEncryption
40:3f:2b:db:ae:14:cb:c9:f4:06:b8:98:05:e4:f5:ae:88:5f:
92:1a:20:1d:99:e7:a6:de:b5:5a:6e:d5:f5:d6:78:2b:42:d0:
09:02:43:a3:9d:c0:ec:fe:3a:30:e6:63:23:3c:95:d6:ea:12:
1f:51:64:a1:c9:f7:83:f5:36:41:30:ee:75:23:7d:8e:4c:26:
d7:a9:73:0c:33:28:77:58:36:b9:74:be:46:02:29:d8:03:74:
17:c8:e6:eb:95:6d:57:3f:64:6d:1b:d9:a5:e4:d8:0a:63:46:
d2:bf:70:29:40:b7:05:08:42:1c:5b:31:b5:8b:ad:ae:a4:6a:
c5:52:7b:a4:3b:57:92:a8:18:d9:9c:cb:26:d2:3c:a7:fe:b0:
4b:ee:bb:52:16:45:89:9c:5e:38:1f:87:f7:bc:2d:04:08:1c:
e8:00:84:e4:5e:ce:ff:aa:18:e7:8c:ce:6b:f1:18:b7:4e:e6:
ba:3c:c0:95:a1:4d:50:19:b4:e4:5d:fc:ce:f3:21:e6:9e:2b:
28:7a:dd:cb:24:84:fe:e9:0f:8f:81:3f:49:d0:d1:7f:86:a2:
06:e5:9d:0a:09:47:a8:9a:8b:f7:0c:ef:f1:37:31:24:97:2a:
e9:8b:34:a9:a2:a5:15:d0:55:60:06:11:41:2b:ce:0c:55:53:
15:c0:b7:06
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYZZF3DOJIQllHXbA60QLLpbrOIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTgwMTMwMjRaFw0yNzAxMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDYyZjUyYWM5N2FhMmQ3Nzk1MzNjMjllYWYxNDhiMzllNzYxNWY3ZDY4NzVk
MWM2ZDYyMzU3OTRhODgzZTk1NjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPBcGQtddokP1xEBwX0ieNObXwjCqJXpMT7wf/NnGDecGieIWjTkkWVKfBNL
arKRicuUUbCKAaaFpt+ieVTruY4cfITtW35/rksgpN8t2WnBQ3tWMOpaFef6h9o/
rQfUJCmmNZ85BpW6QnCGn9ToPxaizkc0SGg865+kYhzfUhMCmW/hsQs5PldJh/e7
huONkVgiJKSO0oOd7NG+FsqdgXdOJTYxqy4Qmulz23ZBOpxGLSDETHkyCSUBy4Mm
2m8JVQKVFVB3rKY65HcIfbSlr6Flwbl/vJE9quYM7YevI0m4VrHl7UrO/d2JuKvz
C0gfXTUROxybk9l193+KzPh1zpMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQUeWo/
qr1m0fUL9Ya/z5Qec2XW5jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWE4YTcwNzYtMGM3OC00YWE2LTljMWUtZGZlYjk0NzE4OWY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbAgfDAN
BgkqhkiG9w0BAQsFAAOCAQEAQD8r264Uy8n0BriYBeT1rohfkhogHZnnpt61Wm7V
9dZ4K0LQCQJDo53A7P46MOZjIzyV1uoSH1Fkocn3g/U2QTDudSN9jkwm16lzDDMo
d1g2uXS+RgIp2AN0F8jm65VtVz9kbRvZpeTYCmNG0r9wKUC3BQhCHFsxtYutrqRq
xVJ7pDtXkqgY2ZzLJtI8p/6wS+67UhZFiZxeOB+H97wtBAgc6ACE5F7O/6oY54zO
a/EYt07mujzAlaFNUBm05F38zvMh5p4rKHrdyySE/ukPj4E/SdDRf4aiBuWdCglH
qJqL9wzv8TcxJJcq6Ys0qaKlFdBVYAYRQSvODFVTFcC3Bg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:21 2026 by rpki-client