Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2928b95-2f30-4b39-bb79-f70b43a46278.roa
File: b2928b95-2f30-4b39-bb79-f70b43a46278.roa (raw, json)
Hash identifier: OuLPX6iiz6To8j91F3+psgm3G3P5NPWe09y52/VWwUA=
Subject key identifier: A7:91:1F:BF:C0:45:72:27:7C:78:4C:AB:9C:D7:FD:E7:91:D7:1E:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7286BE64B2BAA2D9A4040042DE354C1CF2CB0C08
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2928b95-2f30-4b39-bb79-f70b43a46278.roa
Signing time: Thu 30 Jul 2026 01:40:10 +0000
ROA not before: Thu 30 Jul 2026 01:40:10 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:86:be:64:b2:ba:a2:d9:a4:04:00:42:de:35:4c:1c:f2:cb:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:10 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=0550836f7db72e87ead39b1bedc326ee943dbbaffba9cd1fac70a99bee2f508c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:09:c5:fe:27:c3:ce:ad:31:ce:22:31:5f:
61:69:f6:90:2d:da:ce:02:0e:f5:1e:7b:8b:97:98:
99:67:07:75:54:96:f7:da:95:18:f2:bf:a7:f9:92:
33:30:a2:c7:df:85:07:78:16:3c:6a:9c:5f:9b:65:
66:36:57:1c:37:74:85:b1:65:78:80:81:9c:cf:38:
dc:15:de:a1:be:f9:13:0d:aa:ff:20:b3:31:6a:d2:
af:00:4a:fe:52:8f:9d:bb:04:45:d7:73:cf:af:55:
dc:e2:d8:16:86:ea:44:2a:51:92:c6:34:4f:5a:1b:
c8:94:ce:40:36:6c:63:f7:5d:b0:bd:21:e9:da:e7:
0d:1f:46:1d:af:91:61:fe:64:1f:ae:ff:aa:c1:2f:
dd:71:2a:5a:67:07:f9:b4:38:77:27:01:6c:02:d4:
ec:c1:38:62:5d:5e:3a:07:14:ac:69:98:43:04:1c:
3d:f3:65:04:94:e3:ae:d9:21:64:9a:63:b7:0e:09:
a0:07:dd:9d:a7:12:83:ef:d9:7f:f3:94:7a:49:8a:
7b:e9:15:79:0e:46:15:02:4a:3b:91:c4:34:1a:f9:
cb:87:af:2b:25:47:24:07:80:18:e0:3f:90:0a:20:
20:f7:a8:70:be:60:7e:7c:c9:60:eb:1c:c8:ff:f1:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:91:1F:BF:C0:45:72:27:7C:78:4C:AB:9C:D7:FD:E7:91:D7:1E:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2928b95-2f30-4b39-bb79-f70b43a46278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.84.0/22
Signature Algorithm: sha256WithRSAEncryption
50:fc:99:ed:90:73:c7:ab:a2:19:c6:c9:78:d3:78:31:b4:28:
d4:11:3e:ea:49:b5:20:f7:94:e5:d9:90:c6:13:9a:d9:db:b5:
e6:36:2d:66:56:9e:24:c4:4f:f2:db:81:45:d2:85:c7:12:9f:
f3:f4:79:1c:01:04:b7:aa:8b:7e:eb:f0:5c:19:8f:3d:0e:6d:
af:3e:87:47:4a:b1:51:89:d2:49:c9:f8:3c:fb:81:82:8d:b8:
3c:70:9c:c8:7f:f7:9d:04:eb:8e:c6:ac:c2:eb:4c:ac:18:61:
50:9f:62:dd:cf:25:34:da:17:4c:29:12:98:4b:af:ba:2a:25:
6c:59:30:f3:ad:96:55:f3:85:d3:69:14:18:b3:3b:fd:9f:56:
7e:58:6f:85:b4:b6:57:17:be:ae:5b:6e:63:cd:7a:52:c3:77:
55:c6:32:7a:31:4c:56:5f:9f:96:e8:35:2c:cd:cf:89:c0:52:
67:df:1c:79:9f:07:b2:0f:cf:3a:09:f2:97:37:96:4c:d6:52:
c7:4b:0e:7e:7c:80:d3:06:3a:28:3e:35:41:f7:32:1d:39:72:
ec:7c:91:a5:00:6d:ef:fd:af:50:13:0f:7e:bf:69:c1:8d:3d:
19:f7:6d:6e:63:86:51:8e:f2:4b:46:92:c8:e3:ff:df:4a:4b:
9a:65:ea:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:28 2026 by rpki-client