Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27619839-e7af-4103-a7dd-056323333518.roa
File: 27619839-e7af-4103-a7dd-056323333518.roa (raw, json)
Hash identifier: KRzkmkLXun6mu92f3witZLJLRFR2Y2LRNNrD8CwdSdc=
Subject key identifier: 07:1F:CD:CA:B3:8F:15:50:20:FC:A7:6D:30:5B:2D:2C:05:32:42:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FB4E6EE65CE8CC78E0EA3123FF80DC20055D289
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27619839-e7af-4103-a7dd-056323333518.roa
Signing time: Sun 18 Oct 2026 01:30:36 +0000
ROA not before: Sun 18 Oct 2026 01:30:36 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b4:e6:ee:65:ce:8c:c7:8e:0e:a3:12:3f:f8:0d:c2:00:55:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:36 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=73f510d59d48c07bba7e1cdfd2a3859c8292c23e674382f61139503ea9280899, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:e7:d8:ae:52:c3:9c:23:de:42:62:04:2a:
41:87:6d:44:9d:2f:c7:9b:2f:4e:af:b2:01:89:91:
3d:98:1e:2e:6d:7d:1e:26:4d:7c:b5:5f:dc:5d:10:
c2:67:94:5a:84:ff:c4:ed:05:bc:be:e8:60:fb:c3:
99:e2:d7:67:38:aa:b8:01:ba:20:62:b9:df:3f:ae:
cf:ca:6f:70:16:a4:8a:55:28:c5:f1:4f:20:e8:29:
19:08:71:03:89:46:9f:2d:b4:5b:db:52:2a:bf:ee:
06:f7:55:e1:15:e5:6f:f8:77:ba:15:ac:04:d3:dc:
b7:1e:b4:46:86:be:ba:a8:10:40:21:11:e2:b8:fc:
cc:c9:b6:7c:e5:29:21:bc:a5:9b:ef:a0:7d:d9:b7:
46:64:07:06:b7:86:43:b9:b1:11:67:4d:16:6a:4f:
4e:3f:0c:c9:6a:c2:39:3a:24:17:a1:0f:2e:c5:97:
b0:b8:78:2e:dc:f3:6c:9a:18:9f:f7:c7:80:f9:89:
19:77:1b:b2:a3:ab:ea:5e:f6:67:dd:2c:6f:d8:bd:
b9:93:8e:ba:18:72:cb:fa:b5:38:a5:9a:e9:a4:4e:
0a:28:9b:46:90:ee:dd:85:42:f5:88:f3:2b:18:e7:
3b:a5:9c:ba:61:11:c5:d5:98:d1:c3:3f:85:ab:8f:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:CD:CA:B3:8F:15:50:20:FC:A7:6D:30:5B:2D:2C:05:32:42:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27619839-e7af-4103-a7dd-056323333518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.88.0/21
Signature Algorithm: sha256WithRSAEncryption
52:7a:27:f3:a5:e0:0c:80:33:25:f7:2f:bc:c5:f0:21:f2:36:
af:16:da:14:41:40:57:02:40:16:fe:90:09:aa:25:fa:3d:4a:
8d:6f:78:07:62:6e:ff:95:9a:2d:fe:09:2f:d2:c2:43:4c:47:
3c:98:48:0a:79:71:6f:5b:e3:f9:d7:ad:1c:a3:45:74:7e:c2:
d7:72:46:13:17:56:9f:b9:71:aa:51:c1:75:1d:6e:ee:64:48:
ba:aa:4e:8c:3f:ee:a9:6a:71:7b:c4:68:04:5c:07:c6:b3:52:
9c:30:59:53:bf:31:db:48:24:ea:4e:05:44:d4:73:93:bd:5d:
5b:da:7d:48:68:2b:b6:1d:0a:88:5c:7d:33:02:b9:58:10:53:
85:60:77:f4:1f:93:25:c2:bd:e2:80:c0:76:f9:2c:10:cb:8b:
b8:8c:1e:35:9b:45:80:23:54:cd:1f:6b:74:b6:e5:e4:c5:27:
07:e8:62:91:10:a6:89:0c:6d:3f:85:8a:8e:86:d1:e9:c2:1e:
6f:4d:7e:cc:90:c8:db:7e:3a:45:c3:ae:ff:e2:ec:e7:ee:d5:
61:12:e0:13:62:92:db:89:43:51:47:97:ca:40:c8:5d:31:34:
38:61:38:8f:73:30:08:28:a3:c1:de:cc:fb:28:1b:cb:33:03:
6f:70:ef:f5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUH7Tm7mXOjMeODqMSP/gNwgBV0okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTgwMTMwMzZaFw0yNzAxMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDczZjUxMGQ1OWQ0OGMwN2JiYTdlMWNkZmQyYTM4NTljODI5MmMyM2U2NzQz
ODJmNjExMzk1MDNlYTkyODA4OTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJTb59iuUsOcI95CYgQqQYdtRJ0vx5svTq+yAYmRPZgeLm19HiZNfLVf3F0Q
wmeUWoT/xO0FvL7oYPvDmeLXZziquAG6IGK53z+uz8pvcBakilUoxfFPIOgpGQhx
A4lGny20W9tSKr/uBvdV4RXlb/h3uhWsBNPctx60Roa+uqgQQCER4rj8zMm2fOUp
Ibylm++gfdm3RmQHBreGQ7mxEWdNFmpPTj8MyWrCOTokF6EPLsWXsLh4LtzzbJoY
n/fHgPmJGXcbsqOr6l72Z90sb9i9uZOOuhhyy/q1OKWa6aROCiibRpDu3YVC9Yjz
KxjnO6WcumERxdWY0cM/hauPsYsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQHH83K
s48VUCD8p20wWy0sBTJChzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mjc2MTk4MzktZTdhZi00MTAzLWE3ZGQtMDU2MzIzMzMzNTE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgWDAN
BgkqhkiG9w0BAQsFAAOCAQEAUnon86XgDIAzJfcvvMXwIfI2rxbaFEFAVwJAFv6Q
Caol+j1KjW94B2Ju/5WaLf4JL9LCQ0xHPJhICnlxb1vj+detHKNFdH7C13JGExdW
n7lxqlHBdR1u7mRIuqpOjD/uqWpxe8RoBFwHxrNSnDBZU78x20gk6k4FRNRzk71d
W9p9SGgrth0KiFx9MwK5WBBThWB39B+TJcK94oDAdvksEMuLuIweNZtFgCNUzR9r
dLbl5MUnB+hikRCmiQxtP4WKjobR6cIeb01+zJDI2346RcOu/+Ls5+7VYRLgE2KS
24lDUUeXykDIXTE0OGE4j3MwCCijwd7M+ygbyzMDb3Dv9Q==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:51 2026 by rpki-client