Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27619839-e7af-4103-a7dd-056323333518.roa
File: 27619839-e7af-4103-a7dd-056323333518.roa (raw, json)
Hash identifier: CpKCaxVjZcGaCEP18nNH46FCSBDtEs8dl8bn41+Cb8c=
Subject key identifier: E4:F4:8F:18:BA:39:CD:58:4E:48:3B:25:5B:FA:D4:54:96:1A:4D:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38D55B30904C3AB3DD3E9F70351ABC2ADA17F861
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27619839-e7af-4103-a7dd-056323333518.roa
Signing time: Thu 30 Jul 2026 01:40:11 +0000
ROA not before: Thu 30 Jul 2026 01:40:11 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d5:5b:30:90:4c:3a:b3:dd:3e:9f:70:35:1a:bc:2a:da:17:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:11 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=bac4bf02226cf08025688d69e17838c602f781f6fb6047e808ea4f3bf1cc0ec9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:93:ae:a7:14:05:3e:f4:58:64:f9:e0:41:
a4:fe:12:35:7a:cd:2b:4b:d1:aa:e4:ba:54:3c:5b:
56:f0:08:2e:e7:a8:9b:bd:18:60:7f:8b:b0:34:d0:
50:3e:c0:2e:e4:ab:b3:f1:52:13:b9:83:16:d2:83:
27:5e:07:69:1e:4a:11:6e:8d:43:a0:e2:a6:d6:7e:
b3:4e:28:36:db:1c:bf:60:28:61:b7:71:26:96:81:
a5:ac:49:bf:49:9d:0a:3f:49:61:bb:c1:01:f5:f5:
5d:4d:ca:e0:67:52:d0:70:b9:3f:d2:ba:1d:60:36:
20:ae:1b:e4:2a:31:4b:2e:be:d2:cd:f7:89:f5:fc:
03:31:23:d2:29:ae:5a:a4:57:84:fd:f9:18:72:b6:
d7:51:78:71:ea:2a:35:68:51:46:8f:ab:f0:e3:d7:
4e:cf:2d:7d:c9:ec:84:92:ee:a1:5f:94:36:42:01:
fd:3c:85:cc:27:13:55:bd:7f:2f:ec:18:4e:42:92:
3a:1d:80:82:89:1f:39:e9:8a:07:ff:24:89:32:39:
38:b5:7b:b1:c0:7a:55:fa:75:f0:54:82:dd:0d:fa:
c4:b2:5c:f2:ab:19:93:16:72:43:27:56:29:f6:35:
af:f8:1b:1d:67:20:96:e0:6f:aa:fa:b0:ec:05:ff:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:8F:18:BA:39:CD:58:4E:48:3B:25:5B:FA:D4:54:96:1A:4D:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27619839-e7af-4103-a7dd-056323333518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.88.0/21
Signature Algorithm: sha256WithRSAEncryption
50:ab:24:12:94:cc:5d:ff:8a:2e:51:cc:f4:91:77:ca:7a:77:
3f:28:f9:60:0c:31:2e:95:52:b6:2e:28:4a:02:08:c3:60:fb:
ec:73:4a:64:15:5d:7c:8e:ff:db:b0:0b:71:ae:d5:0f:1b:bc:
14:fa:ea:8d:a2:e9:d9:16:32:5c:e1:06:b5:ed:44:f0:c1:96:
78:78:2c:ee:b4:a8:f0:a0:3e:7d:e8:29:ef:2e:33:9f:49:08:
35:0b:c1:aa:b5:ec:74:4e:f5:11:8d:15:df:bc:ad:c0:d9:56:
0c:b6:a9:c2:97:74:96:91:93:e8:ff:00:6f:8c:fe:61:68:5b:
d9:a5:fc:de:fb:54:ab:45:14:d3:13:38:1e:9f:8f:cc:dd:79:
e6:b9:1c:16:fe:dc:23:3f:b0:e9:4c:e5:ff:4d:f1:48:e8:86:
24:67:44:d1:c6:67:ac:41:f9:e8:ba:82:98:9f:34:79:0c:30:
15:ca:60:a2:a3:02:15:67:d1:d4:98:bd:97:4c:22:da:93:05:
c5:69:78:9a:47:8a:d1:09:01:c5:42:ca:be:3b:f6:6f:a6:be:
68:fd:00:b2:6a:3c:d5:fd:02:79:2f:cf:85:53:af:93:f8:12:
c7:75:16:4e:03:28:e6:08:58:6f:ad:7d:5f:b7:b6:f3:c8:3e:
75:2e:42:69
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUONVbMJBMOrPdPp9wNRq8KtoX+GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQwMTFaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhYzRiZjAyMjI2Y2YwODAyNTY4OGQ2OWUxNzgzOGM2MDJmNzgxZjZmYjYw
NDdlODA4ZWE0ZjNiZjFjYzBlYzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdNk66nFAU+9Fhk+eBBpP4SNXrNK0vRquS6VDxbVvAILueom70YYH+LsDTQ
UD7ALuSrs/FSE7mDFtKDJ14HaR5KEW6NQ6DiptZ+s04oNtscv2AoYbdxJpaBpaxJ
v0mdCj9JYbvBAfX1XU3K4GdS0HC5P9K6HWA2IK4b5CoxSy6+0s33ifX8AzEj0imu
WqRXhP35GHK211F4ceoqNWhRRo+r8OPXTs8tfcnshJLuoV+UNkIB/TyFzCcTVb1/
L+wYTkKSOh2AgokfOemKB/8kiTI5OLV7scB6Vfp18FSC3Q36xLJc8qsZkxZyQydW
KfY1r/gbHWcgluBvqvqw7AX/qdECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTk9I8Y
ujnNWE5IOyVb+tRUlhpNmTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mjc2MTk4MzktZTdhZi00MTAzLWE3ZGQtMDU2MzIzMzMzNTE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgWDAN
BgkqhkiG9w0BAQsFAAOCAQEAUKskEpTMXf+KLlHM9JF3ynp3Pyj5YAwxLpVSti4o
SgIIw2D77HNKZBVdfI7/27ALca7VDxu8FPrqjaLp2RYyXOEGte1E8MGWeHgs7rSo
8KA+fegp7y4zn0kINQvBqrXsdE71EY0V37ytwNlWDLapwpd0lpGT6P8Ab4z+YWhb
2aX83vtUq0UU0xM4Hp+PzN155rkcFv7cIz+w6Uzl/03xSOiGJGdE0cZnrEH56LqC
mJ80eQwwFcpgoqMCFWfR1Ji9l0wi2pMFxWl4mkeK0QkBxULKvjv2b6a+aP0Asmo8
1f0CeS/PhVOvk/gSx3UWTgMo5ghYb619X7e288g+dS5CaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:17:29 2026 by rpki-client