Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
File: 1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa (raw, json)
Hash identifier: VGFD4DrBXHVwJj5W4+1wlx0A82Yzi2iFIaXFaQRJnmA=
Subject key identifier: 6C:F8:BA:66:98:CF:EE:9F:F8:42:86:0F:6C:B5:CF:F7:49:EE:98:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C7251CB27EE575C45731ADF41BD39EA7503E1C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
Signing time: Sun 18 Oct 2026 01:20:08 +0000
ROA not before: Sun 18 Oct 2026 01:20:08 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:72:51:cb:27:ee:57:5c:45:73:1a:df:41:bd:39:ea:75:03:e1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:08 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=3dce744d23098a6707d71bb006c58ea354086314b59e58358943293cc90e8779, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:b1:12:1d:a1:1f:01:eb:6e:63:c4:da:cf:
bd:7b:38:2a:b0:cc:9d:c5:a1:35:73:6b:fb:b4:10:
81:ce:8f:b9:6d:89:d5:1f:f5:21:99:4e:2a:ed:cd:
25:e1:5a:e3:a5:d2:b3:72:54:a3:d8:a7:4c:44:cc:
e9:81:bf:67:29:60:b2:24:8f:59:53:40:47:2f:4e:
f7:12:01:17:3c:c1:f1:82:be:b1:c4:8b:3b:3a:13:
77:0c:59:7c:17:c9:32:50:85:cc:69:36:c3:cd:80:
cc:04:c6:ce:a7:21:a7:0d:78:7a:df:ab:ef:31:2b:
f6:eb:4f:1c:69:91:fb:ed:b5:22:7b:a6:fa:7b:ca:
74:ea:3c:d8:49:95:5c:50:a6:73:29:12:03:bc:5a:
9d:d9:0b:20:7a:53:18:d6:8a:d2:9b:c0:7b:ed:c0:
9b:2a:75:6c:07:89:41:e2:dd:db:e9:a2:36:cb:de:
cc:6e:84:bc:60:24:fa:ea:d0:f0:11:c3:d3:a2:79:
f6:0a:90:01:03:e7:55:28:52:8f:d8:ce:bd:10:3e:
fb:39:6d:c1:b6:e4:d8:84:eb:5c:62:b0:c0:f8:90:
ec:38:c8:63:38:b3:4b:6e:8b:50:60:2e:67:92:c3:
d7:95:91:8c:f3:3a:16:9a:1b:51:3c:6e:03:96:55:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:BA:66:98:CF:EE:9F:F8:42:86:0F:6C:B5:CF:F7:49:EE:98:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
62:ee:24:6b:92:4e:a0:64:7f:e1:88:57:1f:ae:2a:25:a5:5d:
6a:7c:5b:11:bb:f0:9a:1f:7f:e0:b9:12:3f:9b:fb:94:45:74:
60:02:11:17:b1:b1:e2:d2:96:57:d2:f7:d8:d7:0f:aa:e4:3f:
e7:de:c1:88:69:22:3a:18:09:23:6f:b9:45:5b:91:9f:a9:9d:
5b:7a:42:67:75:7b:0a:7d:b9:01:f3:dc:27:da:81:65:bf:0e:
f3:b8:73:a1:cb:c8:cf:06:fa:21:3d:38:7f:14:5b:68:dc:51:
fb:6c:d1:f8:e3:72:12:0c:84:2f:30:45:4a:b6:a6:a8:01:e3:
61:0a:36:c4:f1:e7:da:29:07:4b:38:73:5b:6c:41:3e:c5:89:
a3:ed:da:91:31:ec:84:18:1c:4f:d9:df:b8:c8:2b:8e:32:6d:
ba:99:f6:22:d1:81:8a:3a:56:0a:2c:cd:5b:67:08:f6:ce:33:
fb:c3:b0:fe:58:1a:38:c0:27:ba:f2:fb:4a:90:fc:6e:ef:f6:
91:e5:fb:90:83:4e:d8:61:96:c3:e9:33:9f:a2:50:69:f5:11:
77:83:df:7f:ec:65:9c:00:49:e2:48:30:eb:37:12:4a:42:e5:
0f:b1:02:28:56:68:53:51:8a:63:57:54:49:a3:ec:af:f2:c6:
c8:26:82:31
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPHJRyyfuV1xFcxrfQb056nUD4cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTgwMTIwMDhaFw0yNzAxMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkY2U3NDRkMjMwOThhNjcwN2Q3MWJiMDA2YzU4ZWEzNTQwODYzMTRiNTll
NTgzNTg5NDMyOTNjYzkwZTg3NzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+fsRIdoR8B625jxNrPvXs4KrDMncWhNXNr+7QQgc6PuW2J1R/1IZlOKu3N
JeFa46XSs3JUo9inTETM6YG/ZylgsiSPWVNARy9O9xIBFzzB8YK+scSLOzoTdwxZ
fBfJMlCFzGk2w82AzATGzqchpw14et+r7zEr9utPHGmR++21Inum+nvKdOo82EmV
XFCmcykSA7xandkLIHpTGNaK0pvAe+3Amyp1bAeJQeLd2+miNsvezG6EvGAk+urQ
8BHD06J59gqQAQPnVShSj9jOvRA++zltwbbk2ITrXGKwwPiQ7DjIYzizS26LUGAu
Z5LD15WRjPM6FpobUTxuA5ZVyVkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRs+Lpm
mM/un/hChg9stc/3Se6YSDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWM0ZDJkMTQtYWEwYS00NTZlLTkwZjQtYmRmYTIxZTY2OGY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7AigDAN
BgkqhkiG9w0BAQsFAAOCAQEAYu4ka5JOoGR/4YhXH64qJaVdanxbEbvwmh9/4LkS
P5v7lEV0YAIRF7Gx4tKWV9L32NcPquQ/597BiGkiOhgJI2+5RVuRn6mdW3pCZ3V7
Cn25AfPcJ9qBZb8O87hzocvIzwb6IT04fxRbaNxR+2zR+ONyEgyELzBFSramqAHj
YQo2xPHn2ikHSzhzW2xBPsWJo+3akTHshBgcT9nfuMgrjjJtupn2ItGBijpWCizN
W2cI9s4z+8Ow/lgaOMAnuvL7SpD8bu/2keX7kINO2GGWw+kzn6JQafURd4Pff+xl
nABJ4kgw6zcSSkLlD7ECKFZoU1GKY1dUSaPsr/LGyCaCMQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:25 2026 by rpki-client