Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
File: 513c0075-edb1-461e-a07d-4eb5874bd9ce.roa (raw, json)
Hash identifier: pnacraYtFP3WwNx18yK3EsgLcMaFBpf3q6L0hb8/AAQ=
Subject key identifier: C0:07:56:D0:C5:00:A8:8E:B7:83:D9:20:4A:70:9B:31:1D:7B:AF:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76334C175E407745CAE67C119B6F31C2F00A369E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
Signing time: Sun 18 Oct 2026 01:30:21 +0000
ROA not before: Sun 18 Oct 2026 01:30:21 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:33:4c:17:5e:40:77:45:ca:e6:7c:11:9b:6f:31:c2:f0:0a:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:21 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=874afb95b8e90fcafcb00c094f9a4de8e11d6c5b6df946c9a11b87245daccec4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:8f:46:02:eb:b4:f5:af:14:ce:f2:50:92:
2f:c8:31:67:ac:f4:21:2e:87:77:b5:67:1e:c1:f1:
ac:c7:72:82:e9:22:a1:eb:0c:2c:e6:52:ec:e4:3d:
f0:c9:69:56:09:e7:74:0f:d9:8c:b0:e0:5c:5c:1b:
fc:14:e2:4f:2f:3c:09:9f:1c:5b:41:3c:23:c0:f1:
95:d7:84:e2:2c:d2:e9:2e:d2:cf:7d:5c:bc:7b:26:
a8:59:cd:87:38:2a:46:e7:8a:2f:c2:aa:48:17:82:
55:d5:d3:ab:98:34:63:42:f1:c9:aa:12:8f:96:1c:
3b:2d:01:ae:4f:bd:60:6f:6c:a3:33:8b:c3:87:7a:
d4:7f:af:8d:84:e8:91:72:42:7c:12:fa:42:29:ce:
d8:61:41:ec:03:af:da:e9:44:f4:4f:5b:a9:18:2f:
a4:b6:66:84:6d:a7:d5:9d:92:1a:96:63:ad:0d:63:
48:99:d1:bf:1c:1a:7f:45:2c:a3:68:40:24:c1:e4:
97:a3:df:7f:88:26:5a:e4:bb:ba:57:83:e7:b8:51:
35:3c:30:3c:23:d1:d2:cc:18:9a:cc:49:a7:90:92:
1c:6e:25:01:a0:e1:0a:27:da:f8:f2:c5:73:3e:1f:
fc:cb:a9:47:32:8b:be:d2:6d:57:93:00:8d:73:08:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:56:D0:C5:00:A8:8E:B7:83:D9:20:4A:70:9B:31:1D:7B:AF:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.160.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:a0:95:ca:65:6b:46:80:e9:87:2b:b6:b3:fc:0e:fa:91:c4:
24:ac:d7:89:c1:7b:f0:e2:03:8c:36:57:95:d6:af:db:77:59:
25:01:d7:29:43:6f:30:85:f3:57:bc:5d:37:8c:75:34:60:ec:
da:02:12:f5:c4:7d:24:e1:e1:dd:f5:d2:8d:71:5e:a2:dc:bf:
f8:e8:dd:54:e7:05:6d:6b:cc:73:78:86:33:aa:bc:fd:74:4b:
55:b1:1f:d1:48:e0:01:71:a5:3b:ae:99:4a:0a:a0:33:7f:86:
9c:35:b8:ad:59:27:3c:31:14:f2:f5:31:23:db:6e:c2:60:b3:
c5:7f:b6:c8:2d:8b:be:07:89:83:5b:25:8c:a3:f7:37:b5:0b:
f0:4c:03:b0:88:ba:5e:ca:d3:f1:c9:63:22:01:a3:99:49:fd:
b1:ff:40:da:b9:91:5b:dd:15:f4:6c:ce:7b:56:22:b8:b4:3d:
ce:09:43:fe:47:c5:0b:28:9f:33:c5:ff:ed:8e:4f:56:b3:ff:
93:4b:d3:d0:e9:c1:3b:65:b7:7c:5a:5a:f9:3f:16:4d:bb:e5:
14:cf:76:31:ea:55:8b:d4:9a:8c:fe:4a:6e:39:6d:81:4c:9d:
b6:9a:08:71:0f:6f:d9:1d:3a:14:36:d6:93:ee:33:11:25:fd:
46:c8:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:23:00 2026 by rpki-client