Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db2d9177-e3d4-459e-980d-b68f027facc9.roa
File: db2d9177-e3d4-459e-980d-b68f027facc9.roa (raw, json)
Hash identifier: lgmOlQtEoUNc4WbC5bGcVlhvUZ+dksA5xW85WlqClZ0=
Subject key identifier: D2:AD:9C:DE:31:B1:B2:2A:ED:9B:0A:75:DF:E1:16:4F:D8:41:2D:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6371B91737C6EA21A7345DB54760860AD1A9EFB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db2d9177-e3d4-459e-980d-b68f027facc9.roa
Signing time: Fri 07 Aug 2026 05:10:44 +0000
ROA not before: Fri 07 Aug 2026 05:10:44 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:71:b9:17:37:c6:ea:21:a7:34:5d:b5:47:60:86:0a:d1:a9:ef:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:44 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=18433a8a7ea0852c564ae367612e9c6db2669c35c06c388e97fcc09cc335da6a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:3a:9e:92:f8:64:3c:9c:06:02:82:d0:c1:
1c:7c:28:6b:99:41:76:25:40:e3:b5:28:f2:18:05:
7c:f4:98:fe:2b:c8:be:35:1f:11:eb:5f:0f:01:78:
62:62:05:d1:79:99:64:23:2c:20:eb:e9:ce:03:f4:
59:b7:d6:56:4a:86:d0:cb:1c:a8:2b:16:fb:e7:27:
49:51:58:d1:0b:7c:49:51:64:59:af:b4:45:9e:df:
c4:ba:cc:77:3e:d1:2f:35:d8:bf:db:a8:a3:3f:47:
e7:5e:ab:b6:52:5b:95:9f:db:63:83:3d:cf:a4:f7:
c4:cb:59:1e:5a:82:83:e0:c6:68:20:3e:af:83:4d:
7b:3c:73:5a:bd:b4:23:cf:ad:55:e6:92:c0:c9:20:
05:a6:f1:28:a6:80:ee:63:0c:fa:33:dd:da:cc:92:
81:fd:df:2f:68:ef:a9:ad:96:0a:a7:01:7c:fe:be:
09:cd:75:cd:1f:90:1e:a9:4d:4d:ab:22:42:f8:2e:
50:3f:55:1f:97:db:6d:66:b3:00:4e:e4:05:03:c1:
58:df:d3:c5:25:09:62:7f:9a:2f:ad:06:99:39:31:
e4:15:1b:93:df:43:ed:22:02:56:e0:63:3a:60:ba:
95:7a:2a:84:03:6f:ff:74:1f:11:51:08:b9:82:0a:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:9C:DE:31:B1:B2:2A:ED:9B:0A:75:DF:E1:16:4F:D8:41:2D:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db2d9177-e3d4-459e-980d-b68f027facc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
68:94:86:66:c3:c1:2c:89:a4:ac:ab:e8:a3:db:3b:63:67:0b:
a1:15:33:5a:1a:26:d9:8a:95:07:b2:32:d0:d6:49:e6:bf:1b:
34:c5:d3:f5:b2:5f:18:8e:18:e9:a6:3b:ae:5b:0e:f5:ee:f2:
0f:ee:bc:25:aa:35:9c:89:63:1f:69:ae:1f:c7:de:98:50:10:
bd:57:75:eb:f7:82:43:98:7e:6b:8c:79:cd:51:fb:42:fa:90:
7c:5d:d4:10:81:3a:3f:a1:f4:b5:50:86:ba:2b:10:f8:89:d4:
9d:30:72:f8:30:79:66:33:87:29:c8:84:8f:18:da:b1:91:40:
f5:ea:e0:6c:f7:32:f9:ac:83:b7:1c:48:29:f8:af:54:aa:72:
7d:0c:73:5f:73:5e:2d:04:c9:e0:76:de:68:e1:6a:b4:b2:b3:
79:6b:58:17:1b:25:c6:78:fd:ae:e2:f6:59:06:ab:e9:d2:3b:
ab:2f:c3:5c:6a:16:54:25:64:ca:10:b2:aa:39:c0:a5:16:0d:
9a:8d:fe:dd:c6:fc:4d:7c:34:08:6f:b2:4b:59:2d:19:e3:61:
b8:33:d8:55:5e:eb:e6:26:c6:34:a2:71:a2:34:85:23:1b:e9:
6f:5f:55:bb:5a:d7:96:05:dd:9b:62:66:87:99:fa:3c:e4:b5:
ae:8e:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:11 2026 by rpki-client