Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
File: 9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa (raw, json)
Hash identifier: kfARqmGs7mj7MURxMbeCZOx+DAZtplyARVqaboOtxGg=
Subject key identifier: 7A:EF:BB:96:A6:69:C3:E3:E9:42:66:70:A9:EB:A3:41:35:62:79:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F93499B6B3EB9D4463725590342CB0399608A2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
Signing time: Sun 02 Aug 2026 01:40:17 +0000
ROA not before: Sun 02 Aug 2026 01:40:17 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:93:49:9b:6b:3e:b9:d4:46:37:25:59:03:42:cb:03:99:60:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 2 01:40:17 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=2ea953fcbd24066b4d5e5a0ee90136adb592919aaaeb6492623a0cc5c94a3b91, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:fe:48:70:5e:10:e1:31:50:1b:1b:66:00:
f9:24:5d:0b:e1:4e:0e:c2:06:87:bd:02:67:b3:96:
cb:b3:8f:11:a1:ad:36:25:02:1d:a7:e0:8a:75:cb:
05:a6:75:c6:89:25:14:c7:f2:02:09:19:63:2b:5f:
04:5b:55:44:08:21:1b:63:a5:3e:46:d5:e9:d9:7a:
a9:00:ac:5a:f9:3c:91:fe:33:c8:85:9d:c3:f9:9e:
ae:63:e0:f7:ed:58:39:ae:df:39:78:ae:ce:f2:83:
2c:c3:6f:ea:d9:5b:cc:56:cd:ec:dd:fe:fe:f2:e8:
b6:5f:fd:0e:b4:4f:b6:be:6b:27:0c:cf:2d:34:af:
28:05:85:f4:86:fd:e0:4a:9b:5b:93:83:52:07:a7:
00:92:e4:05:10:52:7a:be:e2:7f:7b:4d:41:30:ac:
1b:35:91:fc:ee:79:e7:08:0f:7e:2e:b8:c3:d7:0e:
4a:f2:82:c2:f8:30:bb:2a:64:ee:63:6a:9a:c6:81:
b4:03:78:f0:94:f8:0a:15:d0:8d:45:21:2f:7b:1b:
5a:01:26:90:b5:63:1a:ff:93:f1:4f:a4:29:46:c0:
41:66:0c:45:22:e0:f3:1b:87:d9:0e:ea:56:14:71:
78:81:78:55:2e:99:96:ff:27:2c:7c:53:02:a6:67:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:BB:96:A6:69:C3:E3:E9:42:66:70:A9:EB:A3:41:35:62:79:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:ae:e1:68:43:93:d4:39:85:86:a2:7a:3b:2d:9f:89:cb:5d:
81:a8:f2:86:c6:23:d8:13:8e:d1:2d:c7:37:c3:1c:45:85:68:
b7:d5:72:f7:3b:20:ef:8d:01:77:e0:dc:39:f0:d4:a9:1b:bd:
de:d4:1a:55:fd:fb:0b:36:39:2c:af:e0:f2:df:2d:0f:92:fd:
6d:15:9c:76:b2:6e:3f:8b:76:a8:93:dd:86:4e:d2:5b:9b:e0:
4b:c0:bb:c0:1f:f1:60:63:05:ea:4e:16:21:a5:fa:5a:d0:0b:
97:96:0d:c3:f7:16:61:b4:78:03:97:aa:53:e1:15:78:cf:4a:
4f:47:b0:39:83:a6:47:f5:9a:28:4c:09:66:94:39:ea:97:cc:
60:aa:2b:12:5e:ff:72:65:e4:49:35:97:9d:bb:b8:25:8a:7a:
7f:62:82:b2:8b:21:de:c3:f1:c3:4d:c0:b3:ef:b3:b0:3f:bb:
da:f0:82:5a:73:4b:16:ce:1d:64:71:8c:fb:ff:c1:7f:5b:f8:
eb:91:74:ae:b3:42:58:18:61:a1:30:6b:09:6b:16:3b:db:73:
2f:e6:82:57:88:a7:b4:95:47:6f:17:0c:ed:4a:18:8f:0f:a1:
52:a4:9b:3c:50:cd:75:e1:b4:61:9b:66:62:4f:03:18:87:41:
21:b4:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:03 2026 by rpki-client