Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
File: 53380a08-b071-4729-9c41-f9a83d36f4c0.roa (raw, json)
Hash identifier: U6d1eVVTSFD9hTiQ6p0LX+W7003iqxng40V6DbJz4bI=
Subject key identifier: 7C:F8:38:3B:BB:2D:CA:26:17:6E:94:17:0E:2A:BA:90:DC:C7:6D:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01DE86D15E678A17DDF740688A8FF6E92D0654C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
Signing time: Fri 20 Feb 2026 01:50:36 +0000
ROA not before: Fri 20 Feb 2026 01:50:36 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:de:86:d1:5e:67:8a:17:dd:f7:40:68:8a:8f:f6:e9:2d:06:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 20 01:50:36 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=89ce7cc9e65402edabc1c42f5bf4a4c079129377c269dfb2002add9341e26c62, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:b9:ef:7c:b0:d5:33:bc:bb:71:52:7f:e6:
52:5e:a3:d9:a1:6a:d1:73:9d:84:e2:9c:2f:17:38:
ff:54:e6:de:f8:54:a8:ec:9b:ec:e0:d5:02:f7:da:
95:b2:fd:4c:32:da:a7:8c:b4:38:f1:58:7c:a6:9d:
bf:42:e6:28:a2:6c:cd:19:4e:47:35:8a:58:af:c2:
af:2e:64:1e:96:91:1a:4d:e5:eb:e0:47:2b:80:67:
78:55:0e:c0:e2:87:d5:3f:0c:ec:6b:52:05:5c:80:
df:bc:06:5f:3f:24:ce:af:be:0d:a9:61:db:61:f3:
f7:0b:ab:50:fc:98:60:1e:fb:e8:7c:2a:b1:f0:86:
f8:8b:e2:82:50:c8:46:4a:30:48:49:d9:0c:18:a7:
79:63:af:25:a6:60:93:b1:db:96:cd:8f:45:ae:9f:
88:ba:a1:08:de:0f:08:52:08:11:46:92:2b:f2:9d:
fe:ff:bb:b2:c2:0d:7f:59:90:08:2f:08:1b:6c:95:
f9:0e:7d:0b:06:c9:b7:26:dc:ee:5c:bb:2e:08:82:
62:fe:85:c1:6a:fa:9b:7a:b2:1b:ce:ac:6c:66:1d:
b5:3b:c0:87:73:77:46:0f:d3:ae:a3:74:c4:b4:70:
d4:09:9f:32:d3:22:5c:40:42:f8:6a:3d:c6:1d:92:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:38:3B:BB:2D:CA:26:17:6E:94:17:0E:2A:BA:90:DC:C7:6D:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:66:d3:36:9f:74:b6:ec:9f:79:ee:d4:f8:ee:1e:35:9c:5f:
e4:cb:44:15:6b:76:3a:9b:ac:6f:d9:88:04:ac:a7:53:70:0c:
c4:34:03:7e:c4:2d:72:d3:3c:bf:db:21:40:fc:a0:3c:65:7b:
89:f1:c4:56:7b:41:4c:bc:56:eb:df:8f:38:a9:40:6c:a1:63:
0d:f3:b4:c7:34:c8:e5:ca:ee:74:c3:7d:6c:f9:36:d7:23:53:
8b:d7:5a:d7:ac:11:d9:9a:98:a9:ab:bc:c7:c2:0e:10:c6:1f:
76:63:94:1a:42:45:6e:c7:0f:6e:2b:09:87:7e:b1:aa:8e:6d:
73:49:d1:79:f7:b2:e3:ad:ec:c3:1a:b9:2a:68:13:3d:1f:07:
f2:2e:f1:de:87:3f:e2:80:6f:e2:e1:48:d2:3a:e6:fe:b5:f5:
b7:b8:b0:d9:7c:08:bf:c5:8e:22:d4:2e:59:8a:eb:0c:b0:d2:
57:72:d6:0b:a3:44:bc:5c:e5:e9:4e:0f:15:64:10:c0:f4:0b:
68:cf:01:9a:62:35:e8:4a:ab:e2:31:4a:85:bb:31:14:ad:57:
11:28:4a:95:f8:18:9f:de:46:a1:ab:3c:e6:f9:8f:0f:55:26:
d6:7f:3c:f1:a0:c2:41:5d:6d:1d:d3:e6:1e:4d:e8:57:c8:85:
ad:6f:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:15 2026 by rpki-client