Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
File: 9386a656-dfeb-4ebf-847d-bd931e09dd13.roa (raw, json)
Hash identifier: zNIAhneuqqZNP13J2okLz/W8xReibkCzBG0dl0VCVqo=
Subject key identifier: 0E:7D:85:F0:B4:67:7C:A3:FA:11:95:2B:9B:6E:11:6D:60:2A:BB:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 735258E255DAD9A28840D8755CC1F4547528BFA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
Signing time: Mon 26 Oct 2026 05:02:40 +0000
ROA not before: Mon 26 Oct 2026 05:02:40 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:52:58:e2:55:da:d9:a2:88:40:d8:75:5c:c1:f4:54:75:28:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:40 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=72993d19650e0a423380430759d19ba96565c7cd26fbea1fd965115d942da942, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:ea:ca:4f:86:d6:1f:d8:83:f1:27:8b:42:
3e:52:d6:62:93:a4:8b:9c:4c:c4:6f:94:00:30:f4:
32:9d:5c:a2:61:a3:c0:90:8d:ef:57:b7:51:87:e6:
e1:fa:7d:b8:f9:91:cf:ae:d2:e0:43:f5:cc:85:c2:
d2:4d:40:ff:0d:ad:03:72:4e:aa:7e:d0:ae:e8:0c:
2d:4e:3e:e6:dd:f4:29:1d:79:c4:02:3d:91:12:09:
b0:7a:b7:f0:a2:72:83:16:6f:48:d5:cf:a2:ce:19:
79:db:3f:d0:26:2e:43:6b:0d:ba:89:9f:19:ba:6c:
0a:8d:16:25:83:e2:6a:ae:85:c8:28:14:60:64:2f:
83:8d:e1:54:d0:cd:75:a1:5e:52:16:8c:e0:94:eb:
2e:80:5e:aa:5f:41:26:39:4d:5f:be:66:cd:01:36:
d6:b3:6d:da:e7:0f:e5:ad:1a:c1:77:cd:c2:3a:87:
33:a2:2b:15:8d:47:31:63:8b:37:57:85:df:23:17:
81:8a:b1:6a:3a:af:fc:bd:07:b4:35:d2:49:ec:7a:
93:fe:b0:8f:83:17:a7:93:a4:42:07:08:ff:47:09:
e1:86:91:e9:f8:73:53:6b:5c:fa:eb:d5:db:b8:dd:
fe:7c:34:6d:c9:6f:7d:7d:35:66:df:09:27:bf:21:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:85:F0:B4:67:7C:A3:FA:11:95:2B:9B:6E:11:6D:60:2A:BB:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:b3:41:4b:6f:8d:36:6c:14:c7:6c:e5:1e:86:16:39:44:26:
f3:77:b7:8e:5c:4d:d1:fc:b7:2c:7a:fc:e1:3f:e4:c8:b2:12:
62:30:80:65:a5:dd:7b:2d:42:9d:b2:dd:0d:fd:d3:0d:58:d7:
ea:a0:1b:50:c9:ed:3c:8d:82:c5:e1:63:00:1f:1b:ce:33:da:
ce:c8:17:4a:05:61:34:62:5d:8f:a3:a1:71:6e:10:72:0f:2f:
c6:77:dc:49:dd:32:c4:cd:7f:a0:68:b1:c8:99:df:7f:5c:7f:
34:61:3f:cf:45:9d:c5:f8:d5:ba:d2:27:f6:8f:37:b0:cf:0c:
94:89:4c:be:1f:57:ec:76:c6:0d:38:2e:2c:57:e2:ab:ca:8b:
1c:ba:84:e2:2c:2d:b5:68:9e:85:aa:2e:bd:83:d8:9a:45:56:
76:59:69:8b:2f:50:2e:3b:bb:b2:9b:98:be:b1:b2:14:1f:65:
8b:ff:c6:cf:98:78:be:b0:84:43:6d:d4:bf:08:9b:c7:fc:a9:
1c:aa:1b:20:50:33:f3:10:d7:44:ae:fc:c0:fa:26:d5:a2:b3:
ec:67:71:7b:5f:e6:4b:5d:3f:7e:da:64:07:b8:79:79:bb:94:
a9:4b:e2:f7:fe:db:cb:02:06:89:89:ca:9e:47:4b:c0:a1:f8:
12:15:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:49 2026 by rpki-client