Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa
File: 9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa (raw, json)
Hash identifier: i0Np53yj4XGrzFbY83Uy59xZBlC8ulASKdgEJKU5hq4=
Subject key identifier: C2:6F:47:C3:02:7D:1D:27:6A:F7:69:AD:55:86:7E:FF:35:E9:78:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BE4909A776C93CD47BBFBAD0573AFE7D6575968
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa
Signing time: Fri 26 Sep 2025 18:20:51 +0000
ROA not before: Fri 26 Sep 2025 18:20:51 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e4:90:9a:77:6c:93:cd:47:bb:fb:ad:05:73:af:e7:d6:57:59:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:20:51 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=97a56e99355a8ab3a9115d65dbffd8c978c1697d0221a9c4283f8aeace40a4a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:7f:de:64:50:07:9c:d6:fb:8f:1c:b0:56:
4f:95:fb:3b:d3:4c:40:30:87:e6:7b:6c:dd:df:24:
c7:09:6d:a4:98:f7:c0:bc:0a:36:17:19:c7:22:bb:
20:2d:38:f0:1d:72:af:e2:4f:00:dc:e2:21:76:4c:
b2:07:a7:1a:d6:ec:7c:27:c9:ae:e7:2e:9f:3a:c2:
99:c4:c9:0d:49:cd:20:9b:ff:e5:46:ae:3c:3a:ff:
75:14:1b:c9:27:8f:a6:f2:0a:23:9b:d8:0a:94:b1:
05:c0:83:b1:82:36:98:7e:ef:13:8e:78:9f:28:00:
d6:f1:ab:d7:67:23:45:a0:f7:1d:21:d2:a6:8a:82:
ee:36:79:d3:dd:6e:a5:f6:6b:b9:52:a4:f3:d4:09:
ee:d5:bf:c4:7b:bd:2b:ce:56:5e:b5:ab:b6:e3:94:
98:da:3b:e2:c5:59:72:71:07:6f:54:70:d8:f4:02:
31:98:a0:66:70:1c:05:f0:f7:12:24:0b:18:9e:41:
c0:3c:06:e8:8e:0d:fc:8e:50:5e:1d:3b:d5:86:ca:
f3:cf:f9:da:14:f2:c0:d8:64:72:64:ae:ad:de:e1:
0a:8f:f6:7a:14:b4:eb:ce:a2:f0:03:03:ef:ab:4c:
13:55:51:1c:f4:46:9a:8b:a3:70:60:4f:bb:e1:fa:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:47:C3:02:7D:1D:27:6A:F7:69:AD:55:86:7E:FF:35:E9:78:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:61:03:0d:b7:7b:ce:4a:49:23:90:c4:0b:9a:98:4f:b2:ca:
fa:07:89:fa:8f:cd:50:10:03:60:b5:ec:60:87:be:85:a4:4d:
d1:13:b6:02:dc:fc:5a:dd:36:d0:0e:e7:36:0c:70:62:47:70:
c0:22:ea:6d:32:58:04:8e:9e:33:56:7d:2b:47:b7:94:fc:59:
d6:f6:f9:6b:1d:46:41:ff:8c:28:49:81:59:1a:f4:1a:b2:4d:
45:f4:88:f2:8e:41:88:50:84:fc:10:9d:6d:d2:6d:fb:bc:c3:
9b:53:11:a8:8a:e2:13:4f:12:47:b8:36:88:47:8e:e7:89:08:
63:4f:75:6f:be:8f:c9:b4:21:fd:90:12:7e:99:1e:f4:eb:38:
01:5f:41:c7:bf:1c:b0:ab:c9:55:90:eb:fc:be:26:44:6b:a2:
a7:21:8e:a3:4b:63:1f:23:95:01:a5:92:a1:69:90:58:86:68:
74:1a:b7:4a:cd:a1:1a:a7:db:90:0b:16:ae:b5:55:ec:6c:a3:
1e:10:d9:80:c7:b3:7c:b3:3b:1a:ca:54:c1:f1:3f:fa:ac:dc:
45:32:a7:e4:f2:00:9c:10:9b:31:3f:d5:f4:dd:26:96:0d:26:
d1:b8:51:b0:e8:c8:a1:8a:f2:7f:a0:ca:d2:16:be:7a:f8:6f:
e7:6a:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:35 2025 by rpki-client