Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
File: 53380a08-b071-4729-9c41-f9a83d36f4c0.roa (raw, json)
Hash identifier: 1Ul1vV26ZqnjVv+Q2nCEpnDe9DyNWQ++G2HAX0iJfP4=
Subject key identifier: B2:00:67:F4:3C:24:2A:A4:FF:3E:BF:50:79:88:4B:56:B3:A0:8A:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77A15A5EFD691A42B25A05BFDFF576D0201D980B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
Signing time: Sun 18 Oct 2026 01:30:35 +0000
ROA not before: Sun 18 Oct 2026 01:30:35 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a1:5a:5e:fd:69:1a:42:b2:5a:05:bf:df:f5:76:d0:20:1d:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:35 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=ca83b21a3fd8b1c067e3082bb53a261ff5343171af56812ee3a5e2419dffc72a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:99:33:64:ab:ed:9e:dd:84:53:19:bb:b3:
76:c1:18:c9:d8:11:98:7c:19:a1:e7:73:06:c4:ff:
2e:66:42:d5:fe:f6:f1:bd:95:ca:c1:53:75:fe:04:
de:ac:0c:4b:62:9b:5b:58:18:15:a8:c6:17:29:87:
18:cc:e6:95:56:01:5e:d4:32:96:e5:c7:57:a3:cf:
4f:8b:1b:bf:40:f3:5c:ac:cd:6c:b6:55:7f:f1:40:
82:86:f1:1f:7c:8d:7d:a5:65:51:40:81:d5:db:a2:
77:44:a1:56:f7:fe:bd:a4:af:26:67:25:e6:8c:e0:
f1:b6:a5:41:4e:82:7e:6f:be:1b:2f:1c:3f:d9:b1:
f1:6a:ac:c9:b3:21:1a:2f:f7:78:93:d4:b4:8c:6a:
52:8d:be:b1:49:a6:30:73:1d:94:2e:0e:c6:46:3f:
10:76:b7:81:fb:b6:c4:03:be:11:52:27:6b:d9:af:
10:f7:08:58:24:0d:39:0d:12:99:f0:e1:c1:75:8a:
32:d4:9c:5b:4d:69:6b:de:85:bf:43:22:57:c9:d7:
8b:da:be:88:68:f7:f7:ac:96:d3:cc:74:0e:fb:1f:
c2:96:f4:e9:1d:97:f6:c8:db:aa:20:80:13:1e:3d:
ca:89:de:5f:8b:40:e1:43:f1:4c:61:e0:4a:8d:28:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:67:F4:3C:24:2A:A4:FF:3E:BF:50:79:88:4B:56:B3:A0:8A:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.80.0/22
Signature Algorithm: sha256WithRSAEncryption
81:3c:5f:2e:dd:db:4f:60:f2:84:b6:1d:55:4c:52:68:a0:ac:
4d:65:b6:4d:07:91:17:ba:0f:d5:86:2a:23:ac:f8:8e:04:fd:
ac:f3:ed:07:0c:a6:9b:6e:47:05:2b:79:b1:67:5b:3f:63:ba:
52:02:06:d4:94:d0:1e:1d:02:d8:52:6c:f2:99:65:7f:8a:8c:
00:b3:dd:5c:8c:1b:67:ce:68:67:8e:8f:0a:37:34:2d:b6:b1:
bf:21:fa:24:d0:b6:4e:8c:ea:77:68:6c:5f:1a:2c:96:2d:d4:
b5:98:43:70:70:c1:3c:be:4e:e7:fe:d8:97:fd:63:d8:12:71:
ed:5c:ed:0b:f6:b3:17:df:64:90:f9:c5:cc:4f:08:d1:b5:2e:
a6:81:c1:39:22:fd:d2:e2:ae:a2:7b:b8:da:b0:2f:89:dd:8d:
22:6e:46:46:fe:06:2d:46:1d:a6:4a:7c:6b:3b:c2:8f:fc:58:
54:79:14:bf:0d:f1:22:e5:eb:ef:d3:6f:a0:53:a8:7e:8a:07:
30:ea:77:15:03:5c:af:6c:d7:70:ba:b2:49:10:cf:00:7c:35:
ed:cf:5e:ab:35:55:fc:47:5d:ac:d1:4f:40:7e:c3:f4:dd:14:
7e:fc:c8:37:68:b3:c1:40:39:d6:db:2c:b4:13:da:8d:63:38:
69:ce:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:56 2026 by rpki-client