Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/40318891-5508-4eb6-bace-e245fbeb145a.roa
File: 40318891-5508-4eb6-bace-e245fbeb145a.roa (raw, json)
Hash identifier: CObKgdR3iCvgtT82EYAZnZvAe1FmWGNX2f4w2M/GTcI=
Subject key identifier: 25:C8:32:FE:86:F5:DA:9F:9F:58:7C:32:29:60:30:5D:21:3C:E5:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 405B0B39D640BB648579808CB6AE05B2E791A0E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/40318891-5508-4eb6-bace-e245fbeb145a.roa
Signing time: Sun 18 Oct 2026 01:20:27 +0000
ROA not before: Sun 18 Oct 2026 01:20:27 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5b:0b:39:d6:40:bb:64:85:79:80:8c:b6:ae:05:b2:e7:91:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:27 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=476e2b026a4d9119fcd638b72c6208f3021cf7b9602ec59fbc4a9a29d8df5c98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:e2:3c:a1:9a:ba:0c:86:12:af:80:8d:ca:
2e:5d:44:20:5b:e9:03:2d:8c:06:68:3d:8a:d4:68:
85:f4:fc:a8:b7:2b:71:46:31:a1:5b:11:33:2e:dd:
59:29:c9:1e:77:11:c0:c6:76:58:7f:c0:9f:7e:de:
2b:a3:bf:18:7b:e2:d7:09:b9:21:36:c3:48:dc:39:
9c:e4:6b:d1:de:bc:90:0b:cd:98:26:91:88:4b:fd:
22:f2:27:c8:d9:b1:d0:ad:ed:be:fb:be:05:1a:ca:
1d:c9:2c:57:63:9c:66:61:6f:df:e0:86:91:8a:56:
02:93:21:0d:e5:8c:75:30:da:1f:14:71:a3:a9:7f:
04:1b:4e:cd:24:68:be:fe:e9:bf:29:b4:26:a0:97:
a5:41:4a:9e:b0:f0:d7:20:b9:05:3f:7d:37:51:ac:
fa:6e:c2:99:26:99:79:96:0b:62:04:1b:3d:0b:70:
dc:3e:59:4f:66:dc:84:01:88:5d:23:70:c9:90:ca:
29:23:9a:b4:88:8f:e0:7d:e7:fe:7c:e8:a9:2f:27:
3d:88:08:94:3b:46:cb:9a:0b:a5:e4:9d:0d:b5:55:
67:e3:e1:d6:7b:18:3b:c8:99:fe:8c:1c:5e:d7:03:
70:b2:fc:08:91:35:34:53:4b:7f:24:28:31:3e:c8:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:32:FE:86:F5:DA:9F:9F:58:7C:32:29:60:30:5D:21:3C:E5:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/40318891-5508-4eb6-bace-e245fbeb145a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.160.0/19
Signature Algorithm: sha256WithRSAEncryption
11:54:ee:cf:35:b4:e4:2c:fe:e4:79:4d:c8:c9:20:8b:bb:5c:
ab:26:94:d2:db:12:1a:9e:19:57:1d:83:96:82:18:8e:1c:ad:
eb:39:ee:6f:9e:e6:4a:51:01:3b:48:f2:b9:e8:04:11:75:b9:
1b:65:6f:a2:6f:34:88:02:54:9e:4a:8c:9e:31:6b:8a:0c:cd:
6e:5a:79:a2:9d:cb:ff:51:ed:22:d1:b4:63:cd:eb:44:ac:a9:
b5:d5:b2:cc:c2:2a:36:66:25:4f:ad:71:92:a7:56:09:1e:5c:
93:5b:02:5a:81:63:dc:47:54:7d:14:41:df:2d:78:53:bd:2c:
c5:68:a7:b1:71:60:7e:24:bb:71:2c:12:82:ca:97:63:52:53:
2a:34:47:c7:0d:79:9c:7a:77:be:c4:c7:66:4f:de:56:6a:78:
7d:91:05:fb:11:6d:52:14:dd:10:9b:4b:90:59:6d:a6:be:b8:
d8:fe:16:06:b7:d0:f6:ba:2e:50:c8:4b:42:b8:74:7d:fe:e0:
7d:cf:47:bc:d1:a4:c2:ae:8d:3c:63:1e:c6:c5:d2:ad:4e:34:
b9:dd:59:a1:21:63:bd:f5:5d:cd:71:ab:c6:47:5b:88:53:94:
bb:21:47:f8:f5:60:2e:29:a2:71:d0:b5:de:20:ae:fd:d0:33:
ee:95:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:54 2026 by rpki-client