Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
File: 9386a656-dfeb-4ebf-847d-bd931e09dd13.roa (raw, json)
Hash identifier: iozVw14ScxcCKNDREnn6Ou7OQs4ldTMUnTbtq1HQDbs=
Subject key identifier: 2C:BD:EC:78:F9:73:22:B3:F5:3E:99:F6:53:9D:23:E2:3A:92:7D:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A745714FBB574BA0355CA2B2263FF701953D72E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
Signing time: Fri 07 Aug 2026 05:10:44 +0000
ROA not before: Fri 07 Aug 2026 05:10:44 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:74:57:14:fb:b5:74:ba:03:55:ca:2b:22:63:ff:70:19:53:d7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:44 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0ed537576d1387bf52444d2d485f0e74d2530ed7bc58cd2f34eb81bf4b056814, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:0b:c7:09:da:0a:18:bf:67:af:05:bb:37:
44:d4:fe:3b:58:d7:42:8c:56:5a:a3:ad:58:ba:9d:
67:45:8d:b5:12:1c:98:be:41:e1:e7:00:56:33:c3:
11:90:c4:38:35:82:69:85:f9:e4:89:e7:79:49:07:
7b:7a:48:4d:db:2c:ef:b6:e5:36:91:e3:48:7c:87:
ba:35:f4:88:a5:d3:70:69:58:aa:f7:54:d0:6e:cb:
26:3c:b5:75:67:3d:94:3f:2c:b0:84:ea:d8:a4:f0:
61:d3:2a:6e:11:3b:b0:0e:a6:69:a1:00:8f:c9:53:
59:50:f9:cf:fb:51:37:8f:96:a9:17:d3:cf:50:91:
22:44:ef:67:b4:a3:7e:4f:dd:d6:3e:4a:3b:6d:26:
6b:bf:8d:09:ec:28:18:8e:06:8c:e6:00:8d:0d:4e:
f3:eb:b8:28:ef:0d:06:9a:58:d8:8f:b8:00:ad:c8:
ee:b8:9f:f2:1a:9b:49:5c:dc:48:ae:fb:d4:3b:64:
6e:fe:fe:5b:13:f5:f7:33:de:7c:1e:56:81:96:d9:
bf:0e:03:0c:b9:39:cb:dd:c7:5a:cf:5a:ca:e6:e8:
a8:af:24:23:db:61:d9:98:e0:f4:72:21:1f:24:cf:
52:54:44:8a:01:b9:35:17:f0:e1:0c:aa:26:4a:50:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:EC:78:F9:73:22:B3:F5:3E:99:F6:53:9D:23:E2:3A:92:7D:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:df:99:26:05:64:f8:be:88:a7:4d:eb:be:b0:cb:95:e6:a8:
c0:a0:d8:17:63:dc:85:84:fd:9b:18:04:07:07:0b:6e:12:64:
bc:dd:83:4f:c5:67:fd:3a:81:30:a1:4b:0e:5d:d0:ba:4c:cf:
85:18:55:18:77:fe:28:3c:39:ab:7b:bc:3d:b3:e2:4e:79:54:
d2:4d:e5:25:3a:39:9e:5f:a6:09:28:23:88:99:0b:68:f5:34:
6a:2b:8c:72:d1:fe:4c:f5:d9:66:13:2d:31:99:9a:3c:d4:f0:
1c:cb:d2:30:28:d9:9e:ba:01:ce:16:93:e0:38:91:e2:58:d7:
61:81:ff:10:ab:44:43:e2:37:44:58:21:82:4e:d9:83:e0:f1:
9b:55:c7:88:46:2c:fe:cf:77:66:ff:92:2e:b4:83:bc:6e:ff:
48:52:dd:da:fa:6e:a7:54:81:d4:26:9f:31:71:49:98:84:9c:
21:51:62:1f:73:3e:cf:cc:8d:8d:e9:b8:4d:6a:0d:cb:70:3f:
de:b9:76:03:8e:66:e7:77:52:17:7b:86:12:9c:af:de:8a:a4:
a5:97:26:96:27:d5:04:72:60:f0:ed:c2:d9:99:e9:b5:83:11:
e1:7e:90:81:c0:43:8c:10:39:be:4d:fd:ac:06:c8:b4:0a:a9:
47:4b:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:08 2026 by rpki-client