Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/296e983c-f59b-4a15-a74d-56b2bff88779.roa
File: 296e983c-f59b-4a15-a74d-56b2bff88779.roa (raw, json)
Hash identifier: P0x9bCWIXluy11/EyeyMDXTyE48hdIhZF2HO+jwJgOA=
Subject key identifier: 60:FD:A0:37:2A:A9:62:C2:84:7D:C3:F3:DC:31:04:5E:DB:3E:1E:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D23B7B9B55883839DCA0378A733E6AC1BF23ABC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/296e983c-f59b-4a15-a74d-56b2bff88779.roa
Signing time: Sun 18 Oct 2026 01:30:19 +0000
ROA not before: Sun 18 Oct 2026 01:30:19 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:23:b7:b9:b5:58:83:83:9d:ca:03:78:a7:33:e6:ac:1b:f2:3a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:19 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=bf368a95ae567ba32dc327ef7f35bbcb5440b2e04fc1c7593474b95b36514a9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:e1:d7:18:f4:2e:07:1c:b0:a7:6d:c7:30:
28:2d:16:85:05:ab:a2:68:71:3a:9c:be:2d:fb:01:
9c:46:d2:a9:28:a0:bf:c7:bf:6b:32:95:eb:99:6b:
8a:8f:93:92:d4:cc:f4:5d:2e:ed:7f:fb:4c:67:2f:
c3:eb:d9:46:d9:b7:c2:48:28:a3:d0:97:0b:ff:f8:
30:bb:8e:32:b3:4f:a2:08:d6:cb:eb:9c:d2:d6:19:
da:99:cd:76:ca:96:2a:0d:0e:69:c0:d4:b5:f0:b6:
d5:a8:53:f5:9c:eb:00:73:47:0c:3f:5f:4d:c1:d1:
82:c9:8a:58:be:96:b0:19:e6:8b:77:cb:8f:e2:b1:
5f:0b:53:28:eb:41:23:7b:42:c8:17:8e:1c:b7:6e:
1a:d9:7e:3a:63:2c:f0:a5:c1:78:73:11:54:49:d2:
5c:57:7c:84:3e:f6:56:e8:7a:44:51:c4:c7:31:08:
c1:da:7c:2d:c1:39:78:a8:61:0d:e1:3d:3b:55:30:
e8:81:c1:ec:aa:28:75:8c:c1:87:e1:cf:ab:50:b2:
c6:06:37:98:c8:8c:e2:10:24:e2:a7:0c:43:9b:79:
03:5d:05:0b:40:14:c7:ef:f3:c3:ad:b7:71:e3:d6:
94:2e:b1:87:1b:06:97:e2:ec:51:84:31:8c:ab:db:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:A0:37:2A:A9:62:C2:84:7D:C3:F3:DC:31:04:5E:DB:3E:1E:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/296e983c-f59b-4a15-a74d-56b2bff88779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:d7:c6:63:0b:f2:61:d0:2e:59:f6:cf:3d:a8:d4:6b:8e:62:
23:14:23:be:ea:af:bb:b7:ec:4c:8a:70:5d:56:db:ae:d6:32:
5e:b6:42:4b:56:d8:d9:8d:27:b5:73:1d:9d:f9:d5:18:6d:c8:
d1:08:90:22:85:7a:29:aa:c4:84:69:87:53:b2:97:4f:2b:38:
5d:32:62:2d:bd:8a:4f:c3:99:3f:90:4b:0a:3a:ab:09:07:31:
10:9d:a0:3f:35:1c:f9:21:6c:7a:c4:4e:3c:94:e0:74:75:72:
9a:f3:b1:3f:97:18:2f:0d:87:4e:50:54:ca:44:4a:cc:40:04:
14:2e:4c:9e:42:4f:0c:fd:8a:c6:cf:43:9b:cc:a8:45:7b:31:
46:de:03:f5:bc:0c:70:90:33:9e:2b:9d:c8:58:dd:03:39:42:
ea:18:93:e9:ae:42:92:10:b4:8c:fd:96:e7:a3:f6:93:2b:d2:
a6:bc:8e:8d:1e:f0:da:16:1a:56:09:0c:9c:f4:01:6c:f1:1c:
ce:84:de:2a:9c:46:b4:4b:f6:02:f1:80:c2:6d:91:e8:36:cc:
06:ec:4b:0e:74:31:1b:9a:d9:f4:bf:a0:52:6f:6a:1d:2f:6e:
f8:45:11:3a:9f:91:0c:1f:cb:a7:e8:39:44:6b:80:72:b6:24:
bb:33:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:03:05 2026 by rpki-client