Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa
File: 9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa (raw, json)
Hash identifier: iSEox9XyBfEAi2832Sd9rZvKr9GPf4qlQwLqp8XUVyI=
Subject key identifier: 7F:48:27:BD:B3:68:D9:05:32:D1:39:DA:73:24:55:21:5A:6F:6B:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C073BECDB2C42DC78A6BCE68282C15B0AAC2EC7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa
Signing time: Mon 26 Oct 2026 04:50:07 +0000
ROA not before: Mon 26 Oct 2026 04:50:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:07:3b:ec:db:2c:42:dc:78:a6:bc:e6:82:82:c1:5b:0a:ac:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7fff6cebe095e8e5a0a063f80f835770ba38c2e666dbc18f9340036446319fda, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:07:6d:4a:89:f3:84:ae:95:d3:45:02:fc:
59:05:f3:c6:85:80:d1:ca:19:b8:62:89:be:68:22:
9a:aa:5d:02:05:5e:44:46:bf:b3:69:cf:93:c9:5a:
e4:9e:8b:00:ab:95:d2:81:e8:49:c7:76:97:db:bf:
34:1a:ab:0e:cd:7d:d5:9f:e2:df:c9:4f:7f:39:f6:
89:41:77:cf:7b:f7:d2:45:35:44:39:55:91:4e:62:
cc:32:1e:23:e7:8b:31:95:39:b5:23:55:86:f1:e0:
d0:12:6a:cf:75:d9:0b:6f:27:05:e4:59:23:da:0a:
63:ba:50:a6:46:47:d0:4e:a3:0f:98:4d:40:2f:2a:
5f:a9:12:e8:e8:43:28:f7:fd:d9:5d:e5:e7:13:a4:
58:6c:cf:f0:70:89:1c:22:72:8a:f6:6c:87:73:a3:
57:3c:e1:eb:a0:3b:81:81:1d:47:da:78:dd:6e:62:
f5:0f:ba:a3:44:04:d3:09:af:1a:f0:17:25:a6:14:
e0:fe:1a:ff:c1:20:76:6d:a6:95:81:c1:97:f2:90:
1c:7b:c2:f3:b1:b2:27:06:d5:59:e8:d9:30:79:96:
4d:a9:00:ea:3c:71:74:92:cb:4c:49:90:aa:48:d0:
e0:15:9b:99:b2:18:00:58:ef:35:8a:8d:72:16:16:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:27:BD:B3:68:D9:05:32:D1:39:DA:73:24:55:21:5A:6F:6B:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9eecfa6d-eb1b-4f11-9ed3-450a21abdc1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.104.0/21
Signature Algorithm: sha256WithRSAEncryption
47:a6:77:e2:dc:3e:af:a7:a1:76:b1:c8:65:8d:72:c8:57:58:
ad:50:ca:0c:da:7c:0f:22:b9:c0:9c:31:29:ff:6a:5e:30:d4:
d3:2b:7a:bf:da:5d:ef:0c:a1:32:a1:34:5f:fa:d0:64:7f:f0:
ce:0a:d5:32:b2:70:90:c2:cf:8b:91:a2:96:80:a4:b8:31:7e:
ca:dc:0a:1e:79:7c:a0:3a:7a:10:a7:b0:b2:64:2d:87:64:e6:
dc:d5:45:54:f8:f0:57:9e:40:dd:d7:bf:11:ce:75:6b:84:6f:
82:d6:08:f9:0e:dc:c2:1c:36:66:67:f3:18:42:c6:af:0d:be:
c3:b8:64:08:e3:18:53:fc:9a:21:a4:e9:28:a2:dd:2b:19:91:
bc:1a:dc:47:35:1c:f7:d9:8d:bd:72:f7:31:5f:d9:c5:cc:09:
b6:e0:be:96:21:1d:f2:b4:a6:f2:b9:fe:5c:46:d5:c6:61:f7:
6f:af:80:3f:f6:25:61:7c:0c:d5:2d:7a:3a:92:4a:80:3a:07:
8a:b8:c0:cb:50:77:da:b2:96:1b:9d:4e:65:03:67:7c:43:f4:
d5:54:38:26:33:24:8c:a9:f0:01:49:36:b4:cc:7c:54:f2:19:
97:0a:47:5f:b9:db:4d:5a:1b:16:63:91:6a:3b:9c:c6:f3:5c:
77:51:da:f7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPAc77NssQtx4przmgoLBWwqsLscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwMDdaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDdmZmY2Y2ViZTA5NWU4ZTVhMGEwNjNmODBmODM1NzcwYmEzOGMyZTY2NmRi
YzE4ZjkzNDAwMzY0NDYzMTlmZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANwOB21KifOErpXTRQL8WQXzxoWA0coZuGKJvmgimqpdAgVeREa/s2nPk8la
5J6LAKuV0oHoScd2l9u/NBqrDs191Z/i38lPfzn2iUF3z3v30kU1RDlVkU5izDIe
I+eLMZU5tSNVhvHg0BJqz3XZC28nBeRZI9oKY7pQpkZH0E6jD5hNQC8qX6kS6OhD
KPf92V3l5xOkWGzP8HCJHCJyivZsh3OjVzzh66A7gYEdR9p43W5i9Q+6o0QE0wmv
GvAXJaYU4P4a/8Egdm2mlYHBl/KQHHvC87GyJwbVWejZMHmWTakA6jxxdJLLTEmQ
qkjQ4BWbmbIYAFjvNYqNchYW/2UCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR/SCe9
s2jZBTLROdpzJFUhWm9rRjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWVlY2ZhNmQtZWIxYi00ZjExLTllZDMtNDUwYTIxYWJkYzFkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgaDAN
BgkqhkiG9w0BAQsFAAOCAQEAR6Z34tw+r6ehdrHIZY1yyFdYrVDKDNp8DyK5wJwx
Kf9qXjDU0yt6v9pd7wyhMqE0X/rQZH/wzgrVMrJwkMLPi5GiloCkuDF+ytwKHnl8
oDp6EKewsmQth2Tm3NVFVPjwV55A3de/Ec51a4RvgtYI+Q7cwhw2ZmfzGELGrw2+
w7hkCOMYU/yaIaTpKKLdKxmRvBrcRzUc99mNvXL3MV/ZxcwJtuC+liEd8rSm8rn+
XEbVxmH3b6+AP/YlYXwM1S16OpJKgDoHirjAy1B32rKWG51OZQNnfEP01VQ4JjMk
jKnwAUk2tMx8VPIZlwpHX7nbTVobFmORajucxvNcd1Ha9w==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:11:16 2026 by rpki-client