Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2780ebe2-8258-4510-a848-89116418e1c7.roa
File: 2780ebe2-8258-4510-a848-89116418e1c7.roa (raw, json)
Hash identifier: 8M04yxN2e3dNu3LyvfmIA03Q6mm+8H0WM3F/6cR3BFU=
Subject key identifier: 84:0B:12:D8:89:EB:22:2A:F4:EE:84:43:F3:EF:50:16:25:AB:39:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 501637D7740A0615142479DEA382B3ED8DC6F424
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2780ebe2-8258-4510-a848-89116418e1c7.roa
Signing time: Thu 30 Jul 2026 01:40:31 +0000
ROA not before: Thu 30 Jul 2026 01:40:31 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:16:37:d7:74:0a:06:15:14:24:79:de:a3:82:b3:ed:8d:c6:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:31 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=1bc8b94e18de689f17abe33677cbacd5a9d2399cc5b92b18a0c8c5813a09f2e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:aa:14:ef:2a:ca:ac:95:c8:15:c3:3c:13:
33:e5:4d:a0:00:c2:36:e7:42:95:ab:ec:12:01:ef:
30:6e:2b:94:7a:12:7c:8f:57:6b:70:a5:42:96:82:
e9:c9:a4:d9:9e:71:3f:88:7e:04:f7:52:63:fc:55:
d7:7d:85:3d:20:69:29:84:ac:d4:24:b8:7e:73:eb:
d1:cd:ef:58:58:5c:6a:c1:2d:5f:22:48:6d:2d:63:
81:33:87:18:bb:c1:30:4f:d1:2e:db:85:c8:b4:67:
46:22:ce:cc:56:f4:d6:6a:c5:82:cd:3b:91:ed:64:
2d:61:1c:7d:c6:d6:d4:1f:94:9d:2d:05:7b:9d:59:
4c:18:88:d1:35:fe:d7:36:9f:67:9d:dc:b2:bd:ad:
34:68:06:1c:4d:7e:38:4b:44:d2:0c:dc:87:55:30:
da:fb:8f:84:be:fc:2c:06:54:1f:23:8c:ec:f7:9f:
15:ef:d2:17:10:96:b3:20:34:2a:96:6b:b0:9d:1a:
37:83:58:af:47:91:81:35:9b:72:9c:dd:f8:0a:10:
c7:df:f5:f1:24:2e:46:92:c4:cc:57:04:40:21:41:
be:86:56:27:88:99:9a:dd:17:cf:6a:06:85:fa:c6:
ac:70:d1:45:2a:68:a9:13:14:62:d3:b1:4d:0c:f6:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:12:D8:89:EB:22:2A:F4:EE:84:43:F3:EF:50:16:25:AB:39:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2780ebe2-8258-4510-a848-89116418e1c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:cb:e8:18:60:b3:29:5f:81:8a:d2:50:4d:f5:ca:57:6a:a3:
c3:32:b2:06:69:99:8c:cf:64:05:4f:3b:66:c6:64:77:fe:93:
74:a5:a4:ca:ec:04:d7:88:3e:1a:0e:41:6a:53:49:09:c6:ae:
cd:f3:42:94:4a:9c:9a:b1:1a:32:87:03:65:af:6c:2f:64:df:
38:dd:dd:94:4f:73:a0:0b:ba:1e:17:70:94:11:3e:3e:7d:47:
58:f7:49:6b:8f:27:df:ca:1f:f9:61:23:72:79:0a:36:2c:0a:
7f:29:dd:6f:f8:56:cf:8f:21:d7:9d:16:db:eb:e8:e8:1f:59:
09:e9:03:36:99:cc:65:e9:2b:8b:02:3d:55:be:5f:f8:9e:01:
cf:3a:4e:42:9d:b7:80:77:5e:12:47:9c:53:aa:05:8e:c4:7c:
6a:8d:12:69:23:b7:dd:23:8c:3d:c8:1a:bb:90:e5:e5:92:2e:
4b:17:d0:99:ac:a4:80:99:88:61:1a:36:97:7e:95:2c:2f:e5:
c5:5b:1c:1c:09:2f:79:e5:71:4c:4d:53:db:09:ba:97:7b:d0:
46:86:6c:6f:f6:a7:b2:10:18:82:40:2d:ac:c6:2c:93:ac:b1:
c4:ee:a9:93:44:9b:a4:b5:3c:ba:8f:43:70:43:e7:d0:f9:04:
1e:9f:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:18:24 2026 by rpki-client