Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
File: 049fd671-de95-4496-9712-c56affcb2b27.roa (raw, json)
Hash identifier: UMr+QbA2y9GvVtRJ+X3bNDZ5pS9S8MnQsJd1T5xdpiY=
Subject key identifier: 24:F6:BD:28:E6:6F:8C:7F:F3:6C:6C:81:B4:81:E0:AA:B2:88:D2:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48E388303837DF7A6DBF3959AC520D0EC916F992
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
Signing time: Sun 18 Oct 2026 01:20:11 +0000
ROA not before: Sun 18 Oct 2026 01:20:11 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e3:88:30:38:37:df:7a:6d:bf:39:59:ac:52:0d:0e:c9:16:f9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:11 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=8747628e903e4950e59bcd6d93b61e5cf28822f40e4dbc57510b9e9401f720c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:fb:0a:04:2b:b9:0a:e6:a3:57:00:11:88:
ea:7c:b8:37:67:ae:1e:8d:68:69:92:57:45:e4:97:
ba:a9:b7:f1:96:52:e6:6e:3f:3b:91:6c:76:8d:94:
35:23:7e:53:07:85:6c:de:55:94:da:d9:eb:12:ad:
21:48:90:71:91:99:2c:98:8d:bf:6c:89:b6:25:ad:
24:92:75:87:d5:9e:97:7f:cd:90:26:f9:28:92:f9:
0b:37:cd:6f:16:0d:f9:58:49:6a:3b:da:16:11:ad:
75:e6:41:1e:6b:da:8f:e1:83:63:f6:fd:52:d3:02:
2c:c1:c3:d6:74:3a:14:78:bb:c2:47:16:34:9e:cd:
03:3d:2d:94:07:df:8e:6b:1d:3b:da:85:28:e5:04:
9f:ec:19:e1:24:e2:c0:d6:6c:41:87:fa:2e:e9:b0:
1a:8f:6c:0b:c2:e6:05:72:16:7a:0b:9c:ef:5f:f3:
27:6a:b2:91:6f:17:fc:53:26:36:b9:f9:0a:71:d8:
cb:75:6a:de:d9:1f:04:2d:bf:d5:0b:da:f2:1b:59:
88:c4:85:e9:bd:75:ef:4f:8f:1d:ac:e2:e4:d3:2a:
05:8b:b6:36:b6:f0:aa:0f:07:25:a5:e9:77:3c:1c:
e9:76:88:25:92:b4:6d:a3:3e:5f:ef:d5:c3:d8:7a:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:BD:28:E6:6F:8C:7F:F3:6C:6C:81:B4:81:E0:AA:B2:88:D2:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:47:0d:0e:8a:bc:98:1d:bd:d6:56:47:11:5c:99:17:ad:cc:
58:1e:11:15:a3:5b:53:f2:80:40:4d:b7:cf:0e:0d:37:5f:ff:
00:a5:90:0e:ad:e8:b9:df:e2:a2:19:88:d5:c0:ca:4d:21:00:
35:23:56:d6:d1:b7:e9:1f:54:2b:c3:a3:75:af:3f:36:66:58:
57:15:f9:7c:41:ee:d9:59:0d:c0:51:8e:04:b7:74:fa:4f:c0:
76:51:10:3c:ec:1a:a6:b7:25:4c:92:43:59:93:d4:7e:ef:b7:
b2:d0:5e:6e:52:81:61:29:f6:0f:98:86:59:83:a4:28:d7:ba:
e7:09:7e:ee:5a:ba:67:ff:5b:90:ee:91:72:20:21:29:3c:3e:
04:45:66:56:7c:56:40:d6:97:cd:02:57:66:f2:a9:ae:2e:4a:
72:d5:71:17:e8:ca:a8:c1:29:7e:73:9f:0f:38:d1:3d:70:c3:
dc:06:3b:95:2e:ae:85:1d:e8:bb:43:31:b0:ad:64:1d:9a:79:
32:86:c0:68:d1:18:09:f2:fa:f1:ae:81:86:2d:9c:48:bc:54:
f5:34:99:e9:79:da:45:1f:ef:86:37:ac:da:8f:be:09:70:af:
ed:13:2d:55:4e:14:5e:ab:45:ef:9c:bb:c4:9a:ba:f7:49:6b:
85:08:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:16 2026 by rpki-client