Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
File: 1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa (raw, json)
Hash identifier: zhGIL09jaeAqmRFbsSKY1q2JOkjakSAS9l24QJyPXC8=
Subject key identifier: 08:F3:5B:92:9A:C3:2F:7D:FB:3D:23:81:50:2B:47:B0:B1:B1:1E:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AB814AA7B742DE289CA826C6DE407BD5FD0CF47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
Signing time: Thu 30 Jul 2026 01:40:36 +0000
ROA not before: Thu 30 Jul 2026 01:40:36 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b8:14:aa:7b:74:2d:e2:89:ca:82:6c:6d:e4:07:bd:5f:d0:cf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:36 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5208b4f98626f0ff7cf429ea839cadf703a8d603ce51189200de83cb21ef80b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:97:da:3e:b7:ab:24:25:6e:af:22:7d:64:
2e:43:09:52:47:22:cf:e9:85:bb:ef:a9:45:4d:fc:
d5:f5:31:ec:89:a9:a3:6a:68:a2:34:06:c6:73:5b:
d6:b4:c7:cc:b2:34:57:65:5a:2c:2b:b1:35:e8:9f:
cb:56:48:b5:0f:db:39:d4:91:05:73:61:38:1a:fc:
3b:10:d6:e0:87:fe:8d:8d:5a:ca:67:11:06:48:3c:
8c:52:7e:c3:ce:f0:1e:98:71:49:fd:ed:ba:c0:15:
90:36:b5:08:26:b2:92:97:c1:de:20:9b:96:a3:e7:
65:15:af:ae:46:22:78:a6:65:a6:f8:54:fa:f1:74:
0d:1d:6f:bb:c6:3b:42:d9:1c:0e:4d:e3:cf:9d:ad:
b5:27:f6:4f:c9:dd:26:ca:53:71:14:bd:d9:5c:30:
fd:d7:9d:ec:22:80:fb:23:dc:b1:94:28:c7:73:ad:
fb:a1:05:63:31:28:23:fe:67:3a:34:6e:c7:6a:08:
fc:90:7a:ee:df:4b:e5:8b:c0:64:69:ed:aa:27:23:
15:2f:f1:cc:83:19:74:5c:14:87:22:38:91:dd:f2:
1b:fc:70:d0:99:aa:2a:09:0d:4b:34:df:c4:7c:af:
e7:ad:2e:d3:c4:a7:47:cf:be:bb:14:be:47:cc:3a:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:5B:92:9A:C3:2F:7D:FB:3D:23:81:50:2B:47:B0:B1:B1:1E:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ba:7d:1e:67:67:25:51:71:28:ab:46:f7:0c:02:14:78:c9:
0b:08:66:31:3b:32:7b:01:03:b2:22:95:62:7f:30:f8:c1:53:
c1:d5:f3:4f:12:05:e9:3f:97:33:aa:89:25:ac:0a:c4:fb:c5:
c1:81:f6:d9:3d:94:24:55:cb:76:00:dd:11:2f:00:db:75:84:
61:6f:7a:07:28:e3:15:94:77:df:ae:50:0f:19:0e:15:b0:a1:
cd:d9:a5:8e:1d:d9:e6:35:ab:e6:51:49:44:43:84:d3:45:91:
51:f7:2e:ec:19:af:d4:aa:f0:3a:92:cd:54:95:01:08:35:3b:
b1:47:73:16:11:22:51:8a:0c:72:43:8c:46:fe:8f:33:80:ac:
14:14:db:7d:1d:9e:72:37:bf:02:16:62:e4:ec:4e:81:0a:77:
f7:de:ed:eb:04:3e:62:9a:7d:c8:c1:d0:b5:27:94:a3:1c:15:
c5:b1:2b:f8:29:89:79:69:a8:38:0c:81:e1:60:a7:f2:b5:40:
e9:8c:ec:61:33:27:95:36:2e:aa:2f:fc:7d:da:fb:fd:9e:ac:
49:56:0c:dc:e7:a8:77:55:f3:35:9e:94:e8:97:6e:ac:0b:ad:
89:9f:fd:26:9b:6d:e6:21:73:a2:17:ef:4b:cc:ff:04:83:98:
8d:73:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:33 2026 by rpki-client