Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
File: 332d3a7e-56bb-435c-b479-a81f23cb0414.roa (raw, json)
Hash identifier: 6gegEZFTqK2nuHWCJyHrtWLyBbJ8vSfHa1FpLD/U938=
Subject key identifier: 90:79:CE:BB:61:3B:EA:4D:48:6E:D5:6A:75:10:18:7E:15:C1:04:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67553B7B06595952B2B34B51773C5C2B96D93E11
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
Signing time: Fri 07 Aug 2026 05:30:52 +0000
ROA not before: Fri 07 Aug 2026 05:30:52 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:55:3b:7b:06:59:59:52:b2:b3:4b:51:77:3c:5c:2b:96:d9:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:52 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b7078b15206e0f8a79011bbc2ba364f1b443cc21381e21c9c89b50697afc49da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:42:dc:ec:dc:7a:89:73:83:96:60:6a:63:
8a:57:05:78:4f:f1:9a:c0:92:8c:8b:db:d1:01:90:
2a:26:a2:bb:16:55:3c:8a:4e:de:5e:9e:18:46:a8:
10:0c:c3:27:2e:d6:fd:1f:96:63:47:a5:7e:80:ec:
9a:a5:a1:e4:8c:40:ce:c9:f9:f1:8a:a0:54:0b:d0:
5d:4a:e1:8d:55:6f:50:cd:d1:1b:38:10:36:4e:a9:
0d:ca:d7:78:48:64:59:ec:c9:03:fc:0d:e7:34:24:
76:6b:0c:a3:6e:9d:0e:82:24:c6:df:a6:e3:0d:88:
e3:9a:0d:77:d8:03:00:55:4e:f6:e7:1d:7d:d3:76:
f9:3c:97:07:1f:9f:42:17:dc:4c:be:04:51:32:40:
da:3e:18:8d:9f:31:0d:aa:b0:75:9d:94:d1:eb:9e:
70:ac:ff:97:52:c2:e6:8f:d3:54:96:77:b8:46:e2:
4d:6a:21:55:ce:95:c2:68:c5:38:6c:36:dd:b2:f2:
8b:e1:f4:08:88:46:e4:0d:f7:44:05:22:63:4f:f9:
96:be:23:2a:15:39:2a:23:d9:1b:eb:4a:79:89:c2:
67:ef:d5:53:8c:38:4c:70:49:03:11:24:c1:c9:fa:
5b:90:fc:ae:4d:76:f2:59:b1:02:46:d1:c4:0d:6a:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:79:CE:BB:61:3B:EA:4D:48:6E:D5:6A:75:10:18:7E:15:C1:04:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.28.0/22
Signature Algorithm: sha256WithRSAEncryption
89:e2:69:f5:92:a1:32:88:23:e4:a1:33:c7:1e:05:a7:b1:a7:
83:8a:c3:d4:38:f9:6c:d7:1a:c7:fe:6a:5f:95:e8:e8:36:61:
ac:2a:cf:a2:c4:9b:f2:4c:2c:33:17:9d:8c:3d:ec:2d:c9:a0:
a9:c3:b7:e1:bd:68:f8:03:be:01:0d:83:9b:6c:a1:7e:3b:04:
d1:1f:9d:a0:36:97:59:e2:24:a6:c3:d2:d4:21:f2:ce:cc:09:
88:b1:07:81:ac:57:48:ec:1c:19:aa:64:4a:21:5a:cd:db:d7:
52:a6:6b:70:86:2a:28:48:a7:56:8d:bd:3f:32:0b:7e:aa:0c:
af:98:4b:93:01:6d:ca:d3:be:a5:be:54:bb:df:42:c2:c1:9e:
b0:84:6c:43:53:85:7d:c1:1c:23:f4:ec:ec:38:27:8c:37:08:
a4:66:f7:d0:0a:fc:04:ca:84:bf:98:75:2f:16:14:15:74:73:
34:1c:57:9d:6d:26:bd:12:7f:f7:10:56:92:a9:77:35:7b:b6:
08:94:43:97:9d:ed:75:3d:f2:1b:4e:52:47:bd:ec:7f:3e:16:
55:48:b0:93:db:54:59:3a:dc:58:77:7d:99:4f:bf:1d:3d:3a:
1a:c3:d7:ff:ce:f2:e1:4d:7c:2e:cb:d6:27:81:e5:2a:73:8a:
4c:b7:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:04 2026 by rpki-client