Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
File: 9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa (raw, json)
Hash identifier: 1Dp6kcKUHmX097kW/yfyU+SQ2o0Vy/5sSkdDnXm+Il0=
Subject key identifier: D7:71:C8:D4:1F:60:12:01:9A:02:66:D4:09:C7:0D:17:E2:B6:59:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CBED084159F3FF7A4AAAB9B95D6B2F869C493E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
Signing time: Wed 21 Oct 2026 01:40:09 +0000
ROA not before: Wed 21 Oct 2026 01:40:09 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:be:d0:84:15:9f:3f:f7:a4:aa:ab:9b:95:d6:b2:f8:69:c4:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 01:40:09 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=abdffba401d11de1d83cc40d9dc83602c165bdc020950921ff04cd2504441efe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:31:44:27:ab:1b:6d:fe:36:5a:c5:0e:fb:
9a:91:e2:78:59:f1:0b:f6:02:e7:91:3f:c6:12:52:
58:c0:d9:38:2c:9a:ef:24:e1:6c:2a:76:a5:65:a8:
d4:15:49:54:c8:21:f1:48:9f:46:2d:43:53:b1:56:
3d:c6:a1:40:b1:24:36:3f:b8:3e:b0:22:c8:c2:ee:
1a:a5:f9:64:4b:10:b6:c9:10:af:55:88:5f:69:62:
05:b5:93:dc:24:ae:36:2f:59:51:97:95:73:dd:27:
7a:99:28:55:49:57:40:43:0a:75:4a:8c:6f:d0:77:
f1:7d:e7:fb:71:4e:55:2f:ba:ea:45:3f:20:f4:c6:
49:97:e9:c2:8c:21:e1:37:75:ad:69:1e:06:56:dc:
46:e1:f4:00:b9:a0:c2:2d:b1:5c:69:a6:23:e9:b8:
86:83:d2:6d:f7:bb:12:a3:2e:7e:a0:0b:a3:41:ca:
de:06:54:12:9d:b5:e8:ec:9c:60:70:82:31:d0:eb:
59:17:59:dc:41:05:64:2e:4d:04:55:4c:6d:98:fb:
6e:68:a1:8f:7b:b1:10:73:3e:33:b3:c5:71:6a:a4:
cd:f8:85:fd:2a:9a:de:63:30:c1:0b:52:a4:5e:77:
c4:ae:bf:dd:c5:7b:17:2c:76:31:b9:9d:51:14:8b:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:C8:D4:1F:60:12:01:9A:02:66:D4:09:C7:0D:17:E2:B6:59:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:f2:9f:71:f9:ee:3d:ed:1d:af:51:bf:f8:c1:66:5a:0f:ab:
7b:72:35:7e:38:41:92:58:da:0a:ac:8d:47:63:82:81:64:f8:
b4:c9:1f:3b:18:0b:4c:8c:eb:fd:e8:7c:2e:9d:cf:0a:81:2f:
72:a5:af:5f:23:01:5f:70:d1:8c:e2:5d:b4:e1:49:55:97:25:
e7:20:b4:83:84:cc:06:c2:5a:09:13:39:37:f1:38:56:69:7d:
e3:24:b7:2f:8c:12:b7:8b:a6:bd:d6:13:3a:c7:e8:2b:e8:d9:
41:da:79:71:0f:b8:4e:b0:7d:20:71:d4:81:07:1a:fd:23:3f:
a6:d4:61:02:2f:6b:80:75:f8:92:0c:ac:8e:22:57:16:9b:dd:
ef:0c:91:ea:dc:9a:bc:24:6f:15:a1:70:ea:30:c2:26:42:f4:
54:2a:83:7a:00:85:f6:40:2e:fb:75:78:82:10:4a:53:85:ca:
5f:ac:50:4e:99:2b:2a:3b:ba:66:67:8b:a2:a1:9e:59:49:1c:
01:8e:9d:4c:b5:e1:8e:13:72:b8:5a:30:ff:13:8a:d5:36:c4:
e8:7a:4c:b0:89:33:a0:dd:b6:38:42:af:e2:89:07:fa:7a:2c:
84:d4:f4:0d:84:f7:78:62:b6:1b:9e:d9:98:2c:88:8e:5b:23:
2b:0e:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:32 2026 by rpki-client