Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2928b95-2f30-4b39-bb79-f70b43a46278.roa
File: b2928b95-2f30-4b39-bb79-f70b43a46278.roa (raw, json)
Hash identifier: 8u+u+u5HWZsA+SHNnskd7Zn3+VfZQXcuH9gsfuCpRDk=
Subject key identifier: 7B:52:4F:9A:0C:D4:C5:67:FE:54:B2:75:54:69:A6:6F:C0:73:4F:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EFCB13A2116CD0C0247C7A497D0941BF642C8D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2928b95-2f30-4b39-bb79-f70b43a46278.roa
Signing time: Sun 18 Oct 2026 01:30:36 +0000
ROA not before: Sun 18 Oct 2026 01:30:36 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fc:b1:3a:21:16:cd:0c:02:47:c7:a4:97:d0:94:1b:f6:42:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:36 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=40e73e8676f1c48e56c763c6b98a7e2ca960f2c4967d5e06ab0fb3ad530f3933, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:85:5c:f7:52:90:88:71:b2:94:53:b2:7f:
c2:84:c9:15:83:9a:60:eb:c3:06:20:1f:2b:62:a7:
bb:c6:d5:6f:ad:0d:d1:82:aa:cc:2e:0b:f1:fa:c1:
e4:29:b3:5b:89:80:f3:46:ae:92:41:df:3f:3a:a8:
1c:0b:da:2a:e3:54:91:5d:26:29:99:4d:14:2a:d7:
4b:c7:fb:3a:4d:6a:ab:e6:1b:17:0e:df:ba:8c:e1:
3c:91:d5:b6:cc:73:b2:45:b1:d7:fc:64:f6:b6:21:
e1:46:80:c4:59:ea:85:b0:a2:d4:4b:07:f7:99:11:
3f:53:94:00:af:c4:62:c5:25:58:0b:c8:b9:cb:26:
c1:22:82:a9:1b:a3:fa:8d:db:db:54:fd:35:b0:5b:
5f:b8:a1:5d:4e:e7:30:38:b6:24:c5:8e:0a:54:b5:
c0:3b:af:cd:fc:00:e3:9f:d7:b5:83:42:1a:1c:30:
91:63:20:2d:26:f8:5e:b9:06:0f:9a:e1:68:44:8c:
77:6d:f4:81:50:10:b4:06:1c:ef:aa:f8:b5:4a:32:
37:e0:7d:6e:88:70:0a:29:e6:0b:ad:26:61:94:20:
89:fe:d0:fc:9f:18:ea:4f:8f:a9:87:69:8a:2a:5c:
51:c6:a9:55:20:a9:03:48:1e:1e:55:f4:76:47:6a:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:4F:9A:0C:D4:C5:67:FE:54:B2:75:54:69:A6:6F:C0:73:4F:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2928b95-2f30-4b39-bb79-f70b43a46278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.84.0/22
Signature Algorithm: sha256WithRSAEncryption
42:60:2f:d4:5d:aa:d4:23:47:e7:8f:bd:d2:32:ea:de:b7:6b:
92:de:ee:81:bb:15:1a:29:b2:f8:95:78:3a:78:ac:4d:c2:be:
95:fc:14:bc:31:63:93:37:f4:0a:0e:dd:d6:ef:a2:d2:a9:0b:
6f:16:c3:42:bc:3b:cf:d2:b3:16:10:3c:ad:ef:4d:a9:e9:28:
5d:e4:48:f8:de:13:14:b0:de:9e:d2:0d:ca:3d:d4:1e:83:c8:
c8:26:83:ad:bc:4b:95:82:d3:ed:57:ca:ff:8c:f2:51:aa:90:
a0:46:dd:0a:10:b6:cf:c3:c1:ac:a3:32:49:75:d7:c0:50:fd:
c6:6b:17:a0:68:58:5f:3d:35:9a:6d:d4:78:3c:31:29:4a:cc:
d2:10:ac:58:df:8d:d6:0a:a5:4c:bf:80:9f:1c:fc:42:11:18:
55:e7:46:67:af:f9:73:ab:00:81:b4:de:4a:c7:5e:5b:7e:94:
06:af:74:de:fd:a4:fe:43:53:99:1d:40:a2:c7:f2:5e:df:1a:
01:a4:3a:2a:4a:34:83:ca:b3:b2:a6:38:a0:d8:55:92:87:ca:
3e:bb:24:fa:55:f2:69:a7:f6:1c:6e:a8:0a:13:d8:3f:8e:e7:
2b:24:04:aa:8b:9f:c2:58:5a:40:cc:f0:07:5e:0d:c7:3a:26:
7b:96:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:29:49 2026 by rpki-client