Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
File: 332d3a7e-56bb-435c-b479-a81f23cb0414.roa (raw, json)
Hash identifier: vncChLRXtbqWrwMfO0CfEtXolkoUQxcPaFuqN5shV+c=
Subject key identifier: 21:2B:B9:96:52:27:BB:58:92:A2:2F:D4:47:50:B7:0B:47:65:B6:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36C4E0A3742509E6DE60306FB8D9E89101EC24BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
Signing time: Mon 26 Oct 2026 05:30:31 +0000
ROA not before: Mon 26 Oct 2026 05:30:31 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c4:e0:a3:74:25:09:e6:de:60:30:6f:b8:d9:e8:91:01:ec:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:31 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7501118082231a94ca4f8054d49b3ddccb9d45543d82e32df2431e74268e35a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:9f:ea:e6:a0:8e:39:2a:4e:28:d3:b7:79:
5d:b3:61:a2:cf:b2:86:73:ef:2c:38:32:20:20:f8:
59:26:43:c0:df:fc:f4:23:78:17:7e:ac:72:29:2b:
35:0e:34:60:52:51:31:ff:92:24:7e:93:e3:22:a3:
75:28:17:42:24:27:f0:64:d7:b0:a2:0d:22:e9:0d:
45:a0:d0:da:07:e9:a5:15:5b:c3:54:61:4c:08:2c:
6f:80:16:dc:1e:fd:92:7c:ec:a0:fb:02:ab:0d:de:
06:f3:ed:43:ae:6a:e6:c3:54:98:58:e6:0e:81:4a:
5f:75:c0:b9:29:38:9a:d4:5b:26:95:b9:d3:f6:00:
d2:c3:ca:0b:26:1a:c3:2b:56:a4:f6:09:01:d9:e1:
28:a9:4a:5a:19:dc:ab:6f:db:a1:c6:61:c4:d9:ed:
5c:24:98:6c:49:78:6e:b1:0b:5b:15:57:32:ba:4b:
a4:45:1b:99:9c:4b:56:0f:83:0c:68:7d:ed:88:a8:
ad:d3:f2:fe:5b:db:39:81:d1:1d:e6:81:d8:0a:80:
00:e9:51:f1:93:a9:58:17:bf:5c:be:7b:71:b2:e2:
3b:4a:ed:62:34:dc:41:37:ea:06:8d:91:dc:27:5f:
c4:13:a6:6f:9f:2a:80:a0:d3:0c:3b:a9:da:85:80:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:B9:96:52:27:BB:58:92:A2:2F:D4:47:50:B7:0B:47:65:B6:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a9:a4:4a:f7:41:e9:0d:48:40:7f:b9:f7:c7:75:57:d4:24:
55:e9:01:c2:6a:56:1a:f5:cd:0a:51:74:82:83:32:72:26:f2:
9b:7e:e7:67:d4:58:f5:a1:5e:24:1a:da:ef:2d:6d:31:74:5b:
eb:06:1e:2b:c8:cb:3b:46:54:2a:15:36:1f:45:2d:0c:70:33:
83:69:d6:5d:e2:ba:33:3b:93:1f:7e:5d:1c:d2:f5:cb:b3:63:
27:20:5e:c0:db:ec:25:9d:7d:be:24:e2:21:35:3d:66:af:0a:
b8:d1:65:91:51:52:96:92:53:4f:41:f1:29:19:52:11:e6:97:
db:06:22:3e:48:dd:86:f5:de:12:ff:89:79:66:02:f4:47:2b:
90:00:9e:c5:09:e9:b4:2b:c6:4b:81:78:f3:79:29:7e:7d:e6:
b9:f0:19:d6:79:3a:39:30:38:db:c0:74:9d:63:6a:ed:b0:73:
62:25:93:5d:50:8b:68:6d:8f:16:5b:b5:f4:41:ee:92:77:e2:
c8:27:64:31:6f:d9:55:89:6b:74:3f:62:7c:e4:29:df:96:66:
7d:6c:a2:4a:b7:f2:7b:8d:16:dd:91:87:e4:2b:84:b9:27:44:
0e:30:2d:ab:8a:6e:f6:9f:22:57:0d:e9:f0:2b:4e:4d:d8:ae:
b0:83:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:42 2026 by rpki-client