Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
File: b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa (raw, json)
Hash identifier: cpLNsy1639RDALaWkcemEE25JbwBBc4EdKyRh/zPQr4=
Subject key identifier: 49:00:2B:99:F3:B0:20:C1:74:08:F0:6B:9A:86:22:62:35:A6:B6:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CDCED4E2463C5FA4DDCF7553770103FF85B2D2E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
Signing time: Sun 18 Oct 2026 01:20:07 +0000
ROA not before: Sun 18 Oct 2026 01:20:07 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:dc:ed:4e:24:63:c5:fa:4d:dc:f7:55:37:70:10:3f:f8:5b:2d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:07 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=956864e5c77c73ab7324228044d07f110132e08a8f1bf7ba40d63b984ab2b39a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:11:83:5c:4b:aa:3d:b7:ee:89:0e:c2:b2:
4e:cf:26:8e:d0:bc:db:30:48:94:37:d5:02:82:5c:
b4:84:99:0e:4e:e9:b2:28:a3:b6:66:e6:4f:97:4e:
68:37:0d:02:df:be:2c:87:ec:75:55:47:d0:37:22:
ef:e1:b5:01:f6:80:be:8c:75:60:74:af:63:01:2e:
2b:4c:8a:85:b9:93:d2:2b:46:41:5a:73:62:b0:37:
26:8b:0d:14:9b:1d:dc:8d:ad:58:96:a0:90:50:0a:
bd:f1:a0:59:1b:23:b1:68:78:88:b1:b8:f7:fb:d6:
09:58:b7:06:14:a5:6d:a8:5e:cb:21:ef:e3:f2:fe:
71:95:8d:4d:e1:e3:54:66:c4:db:8e:8a:a9:8e:90:
02:e8:1d:2e:dd:b8:09:92:e1:7c:25:21:fd:df:f7:
02:10:a8:c0:f3:30:fc:63:e1:66:51:d4:93:9c:47:
8d:8c:58:6c:1a:05:bf:00:16:14:8a:07:94:38:16:
9c:28:65:00:a3:a0:76:05:5d:8e:db:52:58:3d:95:
e4:79:ae:b2:a4:6a:40:a9:cf:0f:a9:e2:2b:19:f3:
33:b6:c4:93:b2:ca:41:cb:08:a7:44:da:cc:a1:b6:
5a:c1:bb:3a:a9:03:f2:a3:7d:65:d4:e2:d6:83:81:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:00:2B:99:F3:B0:20:C1:74:08:F0:6B:9A:86:22:62:35:A6:B6:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:92:3a:9a:66:10:53:55:1b:21:8b:7f:75:6b:d3:1e:75:ee:
ce:9b:88:4c:1b:b1:4c:bd:b0:90:eb:ef:e1:04:53:c8:26:fc:
7e:a3:79:3b:ac:82:7f:c9:39:87:2f:69:70:7f:be:9c:87:14:
8c:9a:b9:66:fb:1a:7f:3a:01:38:11:6d:46:fc:71:0f:15:a4:
67:48:f7:7c:3c:b5:9d:16:f0:e5:75:b7:c8:d8:8a:36:d3:62:
63:4a:0e:18:41:99:7a:78:be:fb:06:3c:3e:ae:f2:96:e5:fc:
fa:5a:21:77:1c:bf:4a:69:39:85:e1:f9:b2:15:93:1a:6a:90:
d7:87:8e:da:0e:65:c6:7d:a0:a4:c5:a4:b6:a4:00:a6:fd:91:
38:a3:84:a4:ff:9e:c5:1a:dc:9e:b5:33:39:4c:77:b2:b0:19:
a4:e1:95:1b:35:e7:1e:cc:05:d8:17:4a:b3:27:d8:5f:9a:da:
b5:89:4c:51:22:3b:7f:df:e6:6a:ed:c5:dc:b0:72:2d:9d:09:
11:f5:37:3a:d5:29:6b:da:1f:a8:51:01:96:a1:f6:5c:41:89:
74:2b:0f:b6:65:6e:74:60:82:89:96:a4:00:c1:b9:e8:3e:84:
ff:0e:a5:15:63:10:eb:e3:82:fd:1b:fa:23:32:98:d5:bf:84:
8c:cc:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:07 2026 by rpki-client