Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
File: cdc11efb-9ca2-4459-b55a-43b03e67b183.roa (raw, json)
Hash identifier: /zUI3WGNjvU/fdeCGn9UAX1ER9hJPZ/BD+TW3zjTNIE=
Subject key identifier: 8D:08:87:B1:CC:0F:14:05:A4:8B:68:75:5B:43:55:87:88:B2:4B:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 180D14B10D027BA01496378888EDA37C8F475D0C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
Signing time: Fri 20 Feb 2026 01:50:56 +0000
ROA not before: Fri 20 Feb 2026 01:50:56 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0d:14:b1:0d:02:7b:a0:14:96:37:88:88:ed:a3:7c:8f:47:5d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 20 01:50:56 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=b876d4301d14206ccb4b1e2a7736cb21e5ac604308292e62c03cf2d99fa403fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:4d:0e:6b:98:52:0c:a6:96:53:7e:a3:19:
88:06:e2:36:46:00:03:f3:50:be:1d:0a:f9:8b:76:
ad:ee:c8:aa:90:11:ad:10:bd:cd:b1:87:7f:fb:65:
12:7b:11:36:52:8f:78:6d:a2:74:13:2f:5d:e8:c8:
c9:62:1e:b4:c1:30:19:af:5f:f8:24:ee:5a:83:98:
fc:29:7c:96:7a:96:35:38:80:87:ad:fb:6f:69:b7:
00:83:34:a7:21:d3:e2:86:24:48:1d:c3:cf:1f:4a:
e6:c7:c6:64:9b:b0:2d:d3:93:84:31:ab:7e:42:90:
e8:19:06:fe:ee:62:ec:e7:c4:8b:f1:40:12:7f:68:
c2:c6:e4:58:30:29:b4:21:72:65:c5:d7:0b:4d:81:
a9:02:af:e2:5b:37:47:80:8b:df:18:ec:2d:39:3d:
22:15:6f:14:be:25:4f:47:cb:4d:8e:d9:15:13:fc:
ac:89:44:20:e8:f3:b5:1d:0d:53:c0:d3:de:8d:69:
43:22:24:11:fe:b2:de:9a:22:ee:72:46:36:0e:be:
f2:78:e3:98:da:8d:bc:6f:72:a8:22:45:92:e5:a2:
b8:ba:09:10:7d:cf:a3:9a:4f:ce:52:a2:a3:7c:21:
2d:13:19:ea:ec:88:89:24:69:a3:0b:0c:3f:55:ff:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:87:B1:CC:0F:14:05:A4:8B:68:75:5B:43:55:87:88:B2:4B:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:63:35:53:64:fc:93:38:9e:9e:dc:f8:d9:ff:fa:28:62:20:
df:19:20:cf:b6:91:58:9a:ec:58:f6:ad:ab:d4:b7:1a:bf:54:
4a:6f:4b:63:50:63:18:b7:7c:75:5c:6a:2b:aa:5d:d1:11:ce:
6d:14:28:2b:6d:9b:87:b1:c8:e6:32:89:54:cd:90:58:99:06:
d2:b7:f2:53:c1:f8:20:86:d9:af:bb:a0:9a:36:5d:f0:d1:80:
76:8f:d9:a2:9f:b9:a4:91:46:e8:dd:fc:07:99:82:ac:7d:f5:
72:91:5e:c2:32:5a:42:9d:da:fb:0e:26:32:a1:3a:5e:df:09:
fb:65:7a:1b:69:e6:db:ba:4a:53:c0:33:8d:3f:c1:35:77:aa:
41:f5:d0:c7:92:e5:69:ae:b0:06:99:26:b5:de:08:9e:47:d9:
40:60:30:ff:16:ac:99:d3:4e:08:14:1e:a6:ce:ee:21:f5:8a:
e1:4b:bb:70:43:f5:88:57:f5:db:52:8d:6a:98:9c:b8:b0:18:
ab:52:c1:7a:5f:cf:73:e0:e9:24:ea:48:2d:75:d2:6a:34:a0:
0b:4d:1e:87:f3:74:f6:51:49:86:ff:c0:1f:3c:4c:d6:a9:64:
b7:29:42:41:50:d2:fe:a8:97:0a:a1:c5:bd:03:98:cc:9c:34:
dd:21:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:02 2026 by rpki-client