Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
File: 513c0075-edb1-461e-a07d-4eb5874bd9ce.roa (raw, json)
Hash identifier: VteCvXjiX5pO2Y1kptvsmCTbq5VAFtD+3lz3vuzV8f0=
Subject key identifier: 05:7B:46:25:CA:93:11:4F:58:8F:0C:3E:0E:02:28:30:FB:15:48:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 194B826A9D85221D659DCF2AD3FF01E3056BFF45
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
Signing time: Thu 30 Jul 2026 01:40:32 +0000
ROA not before: Thu 30 Jul 2026 01:40:32 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4b:82:6a:9d:85:22:1d:65:9d:cf:2a:d3:ff:01:e3:05:6b:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:32 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=b1ae2ca102588ec03a628f2b987bf22217aa1c839f6195a9f9b54dfdadfed8e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:b2:6e:a3:61:73:29:76:7d:63:e0:c8:50:
b4:64:e4:01:85:55:81:a7:11:b2:e3:fa:bf:2d:a2:
21:57:1d:93:cc:5d:81:5c:a9:cd:14:88:63:19:80:
49:29:00:37:ea:de:75:4e:48:69:ba:92:d9:de:ac:
ca:5a:8b:b9:c9:fd:7e:a1:bd:8d:ef:c2:72:10:33:
e4:19:ba:fc:90:55:4f:49:b4:0b:ba:b8:57:79:b3:
9f:24:3f:3d:90:b4:d8:db:ce:7c:bb:15:0b:df:bd:
c0:fd:9b:b3:5a:cd:5d:72:99:39:5c:ca:4b:95:88:
17:c7:69:54:3c:12:c7:f3:0e:1c:6f:9e:88:10:40:
29:46:c1:78:59:b3:56:51:19:b4:2e:4a:96:91:73:
d3:a8:e7:30:84:93:96:41:19:bf:46:04:fd:7c:b2:
97:32:75:e3:b4:24:44:9f:ca:c4:01:b5:4c:89:b5:
d8:5a:c8:7a:7c:b9:69:04:1d:6b:0e:fe:4b:9f:7a:
23:0e:99:8e:42:f7:4d:98:15:6e:1a:f1:35:79:2e:
f4:68:2c:02:64:e7:34:00:b7:27:72:54:1b:0f:3e:
9a:75:34:83:5f:ae:f1:27:1b:a3:1d:04:a2:a3:50:
cc:91:9e:67:f1:d0:f7:0e:05:bf:00:61:5b:25:e8:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:46:25:CA:93:11:4F:58:8F:0C:3E:0E:02:28:30:FB:15:48:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.160.0/20
Signature Algorithm: sha256WithRSAEncryption
09:ca:02:22:3a:43:37:3d:87:8f:95:58:b6:a1:c0:ad:89:29:
fe:cf:0b:c7:41:5b:0c:3e:11:23:d9:f7:61:49:f8:09:87:c3:
6f:b3:19:81:51:4b:e0:42:ec:f3:64:22:81:19:bc:54:f5:5a:
2c:25:fe:ad:8d:19:e4:28:d7:6b:21:c9:3c:e9:68:f5:df:c8:
97:06:12:ea:2b:27:97:0a:13:da:d1:b6:a6:c6:c3:b7:24:89:
ac:8a:46:5e:69:8c:1a:70:9c:4f:35:55:96:cf:71:b6:30:a5:
c1:e8:e3:a9:0f:d5:cf:14:80:f2:85:26:13:21:6e:aa:29:c7:
7e:3a:01:2d:5f:4c:ab:56:49:af:13:7e:0d:6c:83:a9:ee:0c:
d8:b5:9b:3c:5d:c5:3b:89:7c:32:2c:6b:7e:4b:f7:f0:25:59:
6c:7d:76:0e:45:3d:61:70:2c:7a:dc:5a:5d:64:f8:ab:63:2d:
32:3a:7f:b0:33:9f:be:b4:62:a0:aa:0c:ae:11:e1:9f:a1:e0:
ac:e1:be:4a:ff:f4:ea:05:56:41:e1:f1:bd:54:ea:4c:f8:c1:
32:3b:c7:34:9c:b5:7c:93:20:b6:91:f1:47:e4:03:26:cd:ca:
0c:9e:4f:25:b5:df:cb:8b:bf:45:f7:0a:b7:8d:82:02:13:47:
d7:7d:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:14:17 2026 by rpki-client