Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db2d9177-e3d4-459e-980d-b68f027facc9.roa
File: db2d9177-e3d4-459e-980d-b68f027facc9.roa (raw, json)
Hash identifier: YaX43GIS9t6Tnct9zw8qnFsAuImOWkKgNm0oIvTao4I=
Subject key identifier: C6:F9:9F:4F:3A:1E:E1:5E:AC:15:AF:E2:5F:F7:55:BD:6F:42:73:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 430E42F11C1C580695CA876922FB0C772B63BFD8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db2d9177-e3d4-459e-980d-b68f027facc9.roa
Signing time: Mon 26 Oct 2026 05:02:40 +0000
ROA not before: Mon 26 Oct 2026 05:02:40 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0e:42:f1:1c:1c:58:06:95:ca:87:69:22:fb:0c:77:2b:63:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:40 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=469bf4ff7df9adf8eee9158e03d6d2fe1bf560be3660778710680f44ffd35c75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:f1:12:28:4c:47:d1:28:d3:bd:b0:8a:84:
77:f5:c1:3d:f5:45:71:18:35:a8:b4:3e:24:6d:16:
80:36:f4:9d:d4:4f:79:ff:f4:98:07:ab:b4:03:46:
17:c6:54:4c:e2:21:e2:be:2a:e1:70:a9:65:37:98:
b5:8f:cd:47:30:f6:e3:59:e6:f0:57:f5:c1:78:99:
5f:77:2f:6f:f8:bf:c2:2d:ca:2b:7a:7f:71:71:3b:
47:26:a9:83:69:c7:4f:31:98:20:dc:ea:43:99:64:
f8:84:46:37:5c:a3:c3:d7:38:84:56:fe:2c:c0:30:
c3:18:6d:14:1b:ed:9e:9f:56:35:75:1a:c7:5d:09:
95:55:c6:b9:0f:d4:7d:5f:7c:14:07:cd:ec:60:a1:
45:29:a7:55:ff:8a:9d:b7:ae:6f:db:81:72:59:84:
da:f3:ae:dc:bb:44:de:17:fb:cc:4d:aa:64:57:70:
69:9a:c1:5f:39:9d:4f:d4:e8:59:6f:a9:b7:3b:9c:
fb:74:72:78:8e:2d:a5:9e:82:5a:24:4a:f3:ae:bd:
ea:13:70:3c:65:b6:47:f3:35:e6:14:34:af:b8:f0:
34:af:7d:f0:57:1f:48:f5:1b:8a:fc:23:29:b3:26:
c3:aa:f5:72:65:d1:8c:5d:b4:3b:12:b4:c1:2a:6a:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:9F:4F:3A:1E:E1:5E:AC:15:AF:E2:5F:F7:55:BD:6F:42:73:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db2d9177-e3d4-459e-980d-b68f027facc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:e1:d8:04:d6:8d:29:78:c0:8b:4f:e3:ba:66:b1:2c:cb:31:
68:7a:f7:ad:da:6c:d2:63:ba:a8:cc:51:de:88:70:8f:c3:23:
9a:22:31:7d:e9:24:6e:73:bd:2f:13:0d:06:07:c7:96:b7:48:
24:e0:de:9c:35:1c:a6:33:04:df:c4:78:08:03:0f:aa:39:9a:
7c:83:97:ec:b5:dc:ab:c6:0f:bc:66:13:5d:9a:d9:50:a0:2e:
3d:80:48:fb:bf:94:4a:06:3a:c5:a1:21:55:27:03:84:b4:85:
3f:ae:5a:06:6f:67:8f:90:76:ce:74:45:68:23:48:32:20:0d:
ef:02:d3:27:eb:14:bf:13:d6:7f:b1:9f:79:57:b0:f9:36:40:
c4:09:ae:72:9b:bf:af:a7:69:62:df:bb:0a:bd:db:09:3c:7d:
c8:13:34:e1:1f:ed:08:75:02:76:96:f8:75:46:02:04:9a:b7:
7c:4d:dc:70:da:1f:44:c5:7f:f3:c7:81:a3:e2:c9:70:5b:0e:
08:35:50:2a:19:ba:d8:f2:7a:13:e4:b4:6a:96:e8:8d:d8:74:
40:62:c2:d7:1d:4c:28:6d:54:23:12:94:d3:3e:28:04:3d:63:
f9:57:72:1c:1a:f1:9a:c1:7c:ce:c5:1a:91:14:ea:ba:d6:ac:
d6:2c:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:24:11 2026 by rpki-client