Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54957543-b22c-43fb-b523-8f40c64fe15d.roa
File: 54957543-b22c-43fb-b523-8f40c64fe15d.roa (raw, json)
Hash identifier: ExaPCATS6wFD/V6CVgeOaShvE9pQ5oDyiE1hV/4K264=
Subject key identifier: E7:6B:A5:21:3B:30:3F:A3:86:C5:C3:1A:52:B3:91:2F:0C:50:81:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01EBB33B53A6147EC20A290108438DEF0225051F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54957543-b22c-43fb-b523-8f40c64fe15d.roa
Signing time: Sun 02 Aug 2026 01:40:17 +0000
ROA not before: Sun 02 Aug 2026 01:40:17 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:eb:b3:3b:53:a6:14:7e:c2:0a:29:01:08:43:8d:ef:02:25:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 2 01:40:17 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=91706083f9cc38d789b946813ca9bac30237a6421b4d1c4d944e78cf29235d6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:ef:a1:9c:c4:ff:13:c9:33:ca:5a:2f:a4:
6b:22:82:24:c1:a6:e8:f9:a7:31:6d:84:0d:ed:5b:
03:e3:07:72:12:7c:4d:a0:34:41:f9:9d:20:6c:85:
39:52:4f:3a:a4:ea:61:1b:e2:55:da:6f:a1:e3:7f:
ee:95:d3:f6:1c:a0:83:a6:4c:c0:ed:8e:fa:c8:38:
2a:4b:48:af:d9:2c:4f:63:ba:30:29:f6:7e:fd:93:
2d:0a:a2:ba:be:06:44:4f:23:12:b7:e7:ca:ac:61:
83:b2:39:9a:5d:bd:66:47:51:1a:9e:bb:b2:ec:52:
ea:d3:46:8c:90:03:e7:d2:87:ac:b2:4a:9e:6c:3c:
5a:b9:ba:7b:0c:19:62:9a:e8:c3:06:2c:05:39:8a:
6c:7d:26:66:81:a1:99:bb:52:80:b1:88:ab:3d:d3:
13:7d:cd:7b:c2:54:5c:d4:4b:6a:bd:09:3d:cb:2f:
79:4d:3d:a3:ed:75:bf:45:f5:7c:14:d0:52:06:b9:
94:e6:36:6b:8f:99:a7:5a:8e:d2:d4:12:19:7b:fd:
81:13:8b:99:20:b6:da:f6:c7:8d:9c:d3:cc:e9:17:
85:ca:18:ac:dd:84:7e:70:74:8c:53:25:23:84:bc:
be:9b:01:8b:68:14:a1:b8:e8:56:48:b7:4c:cc:9d:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:A5:21:3B:30:3F:A3:86:C5:C3:1A:52:B3:91:2F:0C:50:81:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54957543-b22c-43fb-b523-8f40c64fe15d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:8a:de:e3:2d:77:58:21:d3:1e:5b:4b:55:56:08:9e:48:19:
6b:eb:97:cf:85:fa:b5:5b:cb:e6:93:dd:fe:3a:72:cd:d9:ea:
8c:20:9c:38:7c:48:77:61:4b:0c:b4:54:4f:e7:b4:9c:54:ce:
cf:24:80:99:d8:7c:9e:f4:6a:51:05:8e:7e:aa:5e:f2:b7:e8:
2d:0b:8a:32:db:a4:ad:03:6b:3b:a7:34:42:f1:5a:da:f8:21:
3b:d9:4f:43:09:df:11:61:7c:fd:06:7a:75:87:f7:0b:8b:50:
b9:47:6a:61:d2:6b:1f:40:52:30:87:1a:3a:97:4e:e0:ce:05:
a2:98:45:06:be:22:bb:bb:3b:3c:93:e9:c4:c5:d4:5b:78:de:
cf:71:59:89:9f:16:1c:af:a1:f2:09:85:1f:3e:3f:84:8c:bf:
e1:b9:54:61:2e:fb:f2:98:8e:9f:99:3b:3e:83:72:71:e6:83:
ec:1a:a6:73:e7:f0:88:5d:f4:c9:1d:3c:0e:c2:27:56:4c:e0:
02:a1:be:61:f6:61:11:69:cb:f3:be:db:a2:62:39:06:79:fc:
f1:ae:1d:03:dc:06:3f:28:7f:ed:f0:21:0b:4e:f4:b7:7d:4c:
65:dc:bf:90:89:da:4b:b5:87:2c:06:34:64:b5:6c:1f:2f:ab:
b5:4d:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:08 2026 by rpki-client