Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
File: cdc11efb-9ca2-4459-b55a-43b03e67b183.roa (raw, json)
Hash identifier: O9/BSN1P65lwUxEo9IIYiK2wNiNzW4Ip3WQLv5VhvYk=
Subject key identifier: F7:9F:5E:F6:09:C1:73:0F:C9:8A:A0:3D:FD:79:5C:DC:49:B5:01:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FEFAD87AE779AE8EE7346B7B7E1E287F487261F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
Signing time: Sun 18 Oct 2026 01:30:12 +0000
ROA not before: Sun 18 Oct 2026 01:30:12 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ef:ad:87:ae:77:9a:e8:ee:73:46:b7:b7:e1:e2:87:f4:87:26:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:12 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=ffd1305d8c7e02b9e2d4955de35cf9ed5c760007523c00f2121630d9aed284a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:fc:e7:26:95:aa:7e:96:c7:f6:5d:c3:32:
00:c2:b5:24:93:4a:80:e3:fd:1f:02:05:a8:53:41:
28:96:50:25:23:78:2e:ee:c5:06:71:34:f4:3f:ef:
cc:d6:cc:bc:93:3a:e3:4f:7e:f2:0f:4c:50:04:c4:
3e:bf:d4:84:fe:a7:e8:03:19:81:05:09:75:89:25:
66:6f:9e:6e:2e:47:17:61:dd:ce:8c:5c:59:5f:e8:
d0:c9:79:f1:fa:b1:a5:2c:dd:7d:ce:49:15:ff:20:
97:55:db:01:fa:b6:39:3c:df:e4:03:75:87:33:fd:
45:a8:33:4f:a8:46:a3:f9:51:ef:b3:bf:f4:56:a9:
f5:27:c0:2e:20:6b:60:e8:7d:54:89:d6:5c:43:d1:
45:1b:ca:27:f8:64:83:44:54:c6:34:cc:bd:d7:07:
9d:94:e0:39:12:2a:e1:cc:77:9f:c2:5a:26:19:2b:
3c:53:e2:92:9c:50:e3:85:c2:98:c0:08:4f:41:01:
b6:66:e9:9f:1c:92:66:67:0d:70:2f:04:dd:12:5c:
fc:c6:9f:5d:54:f5:a5:7d:c7:a6:6b:c7:92:f5:8c:
b1:39:36:68:8c:55:6f:3b:a3:b9:42:44:58:f3:e2:
f8:6b:77:ad:73:c1:5c:13:e6:f2:2f:22:25:d3:a4:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:5E:F6:09:C1:73:0F:C9:8A:A0:3D:FD:79:5C:DC:49:B5:01:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/18
Signature Algorithm: sha256WithRSAEncryption
be:e1:d5:6b:93:c6:c3:ce:5d:49:8d:54:e7:32:4c:30:42:e7:
0e:97:ff:b2:2b:45:f7:6b:a4:d8:af:bd:55:ff:51:26:9a:05:
65:e9:dc:9b:45:ed:08:62:72:93:be:07:76:ee:41:0d:1b:83:
4f:64:0b:a5:ef:27:a5:6b:cf:09:dd:f0:21:ed:c5:8c:bc:11:
36:95:3b:45:3c:4f:6b:cb:22:c8:1a:fe:c5:51:01:5c:97:7d:
61:ec:73:e8:80:a7:45:fb:b9:13:83:27:08:1b:0d:a6:6d:7d:
88:23:97:ac:81:e9:87:52:c8:0f:d3:c4:3e:f6:d9:fb:f1:c5:
47:b6:64:c0:91:bb:cc:16:d7:f5:d2:b6:99:7b:d1:12:4b:07:
d6:82:9a:de:11:2c:3e:f9:13:6d:92:87:71:b2:f0:7a:67:95:
63:f0:30:a6:c8:d8:13:e9:36:c9:7a:e9:57:33:a5:4e:b5:06:
fb:08:2d:b4:d3:f9:16:1b:b6:3c:52:f2:ef:e4:9c:35:0b:e8:
bc:df:ec:9d:e8:03:43:c5:7f:fe:0d:fb:df:13:b3:5d:20:2c:
af:d4:50:55:a9:de:f9:ce:a0:b7:d2:24:b9:89:c7:1b:89:d6:
c1:87:c2:f7:23:2d:61:a9:48:36:27:93:47:37:1d:c0:f0:d6:
ff:bf:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:47:04 2026 by rpki-client