Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5744d03-14d6-49dd-bcc7-bbf41846c647.roa
File: e5744d03-14d6-49dd-bcc7-bbf41846c647.roa (raw, json)
Hash identifier: lqp2Hg4hz5GtJb9e0m2DUcCmOKgQFlEMTEoBl3ljLpk=
Subject key identifier: B6:1A:FD:64:52:56:BF:0B:BC:57:A5:18:12:63:EC:3F:2E:DC:6A:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 465B7C0A62C2AF8D2C6E0F9A19EFF35DCE42E0D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5744d03-14d6-49dd-bcc7-bbf41846c647.roa
Signing time: Sat 28 Feb 2026 05:20:08 +0000
ROA not before: Sat 28 Feb 2026 05:20:08 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5b:7c:0a:62:c2:af:8d:2c:6e:0f:9a:19:ef:f3:5d:ce:42:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:08 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=5e00a47b82804316f6dee458a09ae1eb003e6fdf7c3948608bf3a0022e68db39, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:67:a9:7b:59:4a:1b:10:a3:f1:9a:aa:1f:
6e:7c:60:75:40:ed:82:59:ac:58:2f:26:9a:4f:8f:
73:ae:35:d2:99:56:69:ed:69:b4:e4:f1:a1:9f:21:
5a:b6:a3:b1:f7:d3:bc:78:f8:e1:a3:40:27:fd:56:
08:c0:8c:48:6c:cd:d8:95:c5:47:ae:1d:dd:3c:25:
48:07:32:71:7a:ae:f3:92:41:e8:d1:ec:10:cc:21:
ac:93:4b:8a:55:5d:69:6f:2e:86:fb:92:83:3e:eb:
aa:56:94:e5:f5:c4:4b:c1:49:db:34:f6:7a:cc:55:
41:5d:7d:e0:6d:8e:55:84:25:95:67:bb:ee:68:44:
88:29:a8:1f:a7:ef:1b:1e:dc:03:62:ad:41:5b:32:
a9:2f:b5:dd:7c:9d:34:8e:d3:ff:90:5a:00:9b:2e:
a6:1f:1c:20:a4:36:96:13:18:b0:40:78:c8:a9:62:
f2:09:7f:a4:d2:06:94:e4:62:1c:2d:15:ff:86:a7:
46:b8:bd:f4:67:ea:20:d9:53:19:76:37:43:f6:14:
4d:68:00:2a:33:dd:a3:cb:0c:80:6c:13:96:d3:1b:
aa:c6:e6:34:fb:3f:b5:09:4b:6b:92:97:09:64:c1:
e1:9e:62:59:20:40:c7:19:8f:cd:ce:91:48:6a:b5:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:FD:64:52:56:BF:0B:BC:57:A5:18:12:63:EC:3F:2E:DC:6A:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5744d03-14d6-49dd-bcc7-bbf41846c647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.126.0/23
Signature Algorithm: sha256WithRSAEncryption
51:1b:97:3e:97:30:95:9f:97:f7:fe:4a:28:a0:5c:91:81:f6:
f2:cb:2c:39:d8:9b:74:a7:af:e3:00:82:3e:f7:3a:fd:e6:71:
64:73:6b:ec:e3:52:89:fd:d0:01:40:ac:c5:46:7c:84:14:05:
f3:03:8e:5b:a7:0c:e6:86:47:4b:e2:d6:13:60:da:03:e8:c0:
3c:f5:6c:61:61:06:ce:ba:75:44:f0:44:a4:b8:d8:1b:a4:02:
68:71:62:f6:0e:cd:18:58:d0:14:f7:ed:a5:b9:61:75:ae:6d:
f3:6d:ad:10:56:6b:e2:f5:41:e9:6e:11:8b:fd:ee:1c:9b:6a:
36:87:00:4a:08:65:95:75:5f:cd:88:73:d2:15:40:c5:90:0a:
64:c6:95:25:b9:b8:28:4f:d8:1e:8a:b1:c7:30:35:b1:03:fd:
b8:62:50:5d:0d:5f:e4:dd:6e:67:e8:db:27:9f:47:a0:19:14:
08:20:47:ef:2d:17:ad:fb:16:17:b8:ce:c7:5f:62:c7:f8:47:
cd:9a:5f:9b:03:7e:f7:46:46:10:df:3d:36:b8:ab:96:db:50:
55:45:64:a1:9b:4e:03:a0:25:05:54:33:0b:05:4e:7c:e4:c8:
af:5e:31:6c:57:db:df:69:e3:94:50:72:13:c2:48:3e:e8:c4:
44:88:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:48 2026 by rpki-client