Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
File: b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa (raw, json)
Hash identifier: NRPO4whRXSDSaIyl+Kk31IOR8RXp+WBajJ4vTOOP0hw=
Subject key identifier: 92:50:29:7D:72:A2:15:D5:22:41:0B:41:E6:65:A4:1C:9C:00:E2:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F53D0108C4B24CE8B17A3362E8C6BED46D7228E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
Signing time: Thu 30 Jul 2026 01:40:46 +0000
ROA not before: Thu 30 Jul 2026 01:40:46 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:53:d0:10:8c:4b:24:ce:8b:17:a3:36:2e:8c:6b:ed:46:d7:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:46 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=761eeb06d5e39cf25e169579db51288292103750310d552348641dec1d406b90, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:02:ec:56:76:35:8a:42:8f:b5:e6:bf:a1:
45:75:a4:ae:c5:1e:f1:3e:ab:aa:81:b1:97:1e:a1:
2e:1b:74:bf:85:a6:fc:51:91:29:09:b6:1c:14:f8:
e8:5d:be:10:46:c5:fb:57:82:02:56:f0:97:20:f7:
4d:0d:6a:42:ff:2b:66:a1:07:fb:69:04:40:55:92:
83:eb:13:2d:0a:f9:59:e3:8f:4a:07:e0:a9:2b:b1:
62:9c:73:6c:47:19:a4:5f:6f:8c:08:1f:a2:52:a0:
90:0c:5e:27:f3:6b:58:a7:98:fd:c2:0a:9c:27:cc:
2b:f7:6b:8a:b2:8f:ed:d6:b3:83:68:cf:4c:55:c9:
13:53:3e:b9:4d:32:97:90:cb:2e:83:78:fc:d3:2e:
54:0f:99:7a:66:8e:0d:ae:d8:52:b3:ac:0f:3b:c6:
90:d2:15:0b:3f:3e:bc:7a:6a:6c:4a:c5:30:c1:38:
08:28:24:c2:a0:76:8e:db:ab:6a:f6:a5:df:2a:5a:
3c:8d:25:77:25:d3:45:95:83:bd:10:af:83:82:ba:
d2:79:fe:20:e5:df:d9:59:ad:ff:e0:d0:ce:37:e2:
12:60:57:32:2f:40:86:3f:a4:b2:5e:40:d3:5b:df:
16:ee:0a:1f:b9:ac:be:4a:5e:d3:82:89:c1:5f:d1:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:50:29:7D:72:A2:15:D5:22:41:0B:41:E6:65:A4:1C:9C:00:E2:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:f7:98:d6:61:5a:7a:2c:fa:77:3c:c2:63:a8:7c:bf:53:f1:
30:8b:95:c7:86:bc:d0:cd:85:73:d2:a4:d8:65:d9:8f:b0:43:
17:41:c6:c9:a0:97:9a:fa:fd:f6:30:ca:63:8d:80:0f:1d:0e:
09:29:86:d6:3b:19:7b:90:6a:94:57:f4:a7:ac:08:42:47:b9:
c4:d2:4b:90:46:45:42:ab:e0:82:25:80:f0:a5:b1:4f:ca:5b:
07:5f:43:9c:14:27:1c:2e:d7:71:5f:37:b6:75:ad:8b:b7:c4:
a8:72:7e:f5:c0:04:48:0e:b1:ae:73:67:95:01:5b:b4:0e:34:
c5:14:53:5a:88:0a:99:b7:40:be:43:b2:e3:3e:32:7e:d0:13:
73:3b:15:e4:fa:0f:a9:13:17:50:4d:9e:02:11:bd:ec:f8:2e:
4b:68:31:b0:3c:a2:9b:db:7c:99:01:ef:c8:22:95:12:07:62:
9e:60:02:c3:83:f6:59:70:56:c8:a1:42:cf:e3:1e:10:ce:c5:
b8:e2:3f:74:1e:0f:ff:53:25:cd:c3:4c:14:5c:d9:a8:ff:44:
89:90:af:75:d5:c6:77:22:46:2b:e7:80:21:13:2c:d2:05:1c:
8c:1e:f9:c6:d3:0c:ac:64:41:0b:14:0f:26:ec:a1:19:28:4d:
36:4e:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:30 2026 by rpki-client