Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
File: cdc11efb-9ca2-4459-b55a-43b03e67b183.roa (raw, json)
Hash identifier: kNwOoWkv3M68iYiIqluNpDSQfcvUZ5xoEFF8EmdL5qo=
Subject key identifier: AE:C6:25:45:D9:AD:48:12:50:43:39:A6:C0:C5:B0:78:6D:D9:EB:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37A5AFB9267D0E95BF5F751D2F126BB0BFF1D5BD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
Signing time: Thu 30 Jul 2026 01:41:00 +0000
ROA not before: Thu 30 Jul 2026 01:41:00 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a5:af:b9:26:7d:0e:95:bf:5f:75:1d:2f:12:6b:b0:bf:f1:d5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:41:00 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=ac3d0298949d1ba9fa7131640f98fc159ba810f7c8c4c30b31e5abc50959284a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:9d:15:18:80:86:ec:c4:c5:f4:17:3e:1a:
a7:5e:86:06:e0:de:e0:f8:9c:1b:ee:2e:78:ce:a5:
53:8e:dd:99:f3:6b:1a:24:1c:55:d7:76:73:27:ac:
64:72:81:8b:92:b0:ef:69:b5:9e:f2:ac:f0:df:a1:
93:6e:39:82:a0:75:cb:63:68:62:68:00:c0:cd:21:
72:9f:0d:ee:0d:ed:1e:7e:3d:95:07:c1:ca:b2:f8:
ee:2c:64:66:98:43:9b:47:22:1f:9b:80:be:73:bb:
4e:d1:d5:53:5b:ab:21:67:68:bc:55:d8:59:99:52:
46:5a:ec:af:13:f4:b8:3f:28:e6:88:a7:1d:42:64:
51:9c:70:78:7b:03:aa:7f:6d:99:36:a4:53:19:a0:
e6:2c:e9:17:d3:0d:24:98:fc:dd:7e:30:3b:c8:3d:
b9:99:0d:1e:c5:f4:d6:6d:b9:82:21:b2:c9:62:11:
c9:68:9f:fa:e5:ee:54:0f:e2:59:bc:53:7c:c9:bd:
f3:89:34:8c:bd:6e:72:f0:1e:2a:11:b6:64:52:be:
02:b3:2e:85:56:b1:52:bf:b5:03:5e:ed:ef:8e:9a:
92:cb:ed:11:ad:17:7a:84:79:82:a4:3f:65:25:09:
19:02:9b:3c:9b:49:6a:24:ba:a4:f5:6d:f8:c7:a1:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:25:45:D9:AD:48:12:50:43:39:A6:C0:C5:B0:78:6D:D9:EB:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:3a:e1:82:55:98:dd:0b:f0:24:c0:95:97:99:51:a1:b2:d4:
58:d9:71:50:2d:9c:93:92:ad:b0:f9:66:57:d4:31:6c:cf:65:
40:da:e0:34:3c:f6:fa:4f:64:39:2e:c3:4c:ee:9d:63:20:17:
a1:f2:00:09:76:fe:27:07:71:91:1d:6c:2f:7f:80:04:19:70:
c8:bd:97:87:06:63:76:f1:58:23:55:9e:ca:09:56:10:7f:8b:
b1:19:bc:6a:be:c5:ab:b7:c9:22:56:2e:bc:5a:2e:d2:44:e8:
38:86:c9:56:6f:12:b7:42:28:eb:9a:81:cb:5b:24:08:dc:ee:
03:fd:21:63:9d:31:29:aa:f5:b1:35:9b:99:4e:a4:7b:83:21:
d5:d9:2e:2a:9a:3a:96:ce:33:4b:c1:58:c2:c6:e3:ee:ac:4e:
3b:07:29:27:a5:94:7c:a3:6b:81:e0:17:6c:91:b2:ed:02:3c:
a1:c1:0c:6b:92:e9:49:7c:3d:a0:9b:15:50:c7:3c:16:cc:10:
30:6e:f9:d6:23:d5:97:49:48:20:89:6d:52:c8:0c:9b:19:0c:
bc:a6:a3:66:f9:ad:ae:8e:47:ab:6b:2f:fc:c8:cc:b1:58:88:
ac:4d:c7:94:98:4d:9d:24:07:75:5d:7f:67:9d:57:26:b1:95:
44:1d:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:13:09 2026 by rpki-client