Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ee6a43b-b4e4-489a-9cd2-21a72f1cf6f5.roa
File: 8ee6a43b-b4e4-489a-9cd2-21a72f1cf6f5.roa (raw, json)
Hash identifier: CYt4Gt4B89Ta+pVwnp8aeDprGLZrR3GkuvR9DKh+qi0=
Subject key identifier: 6A:8A:A9:5C:6C:1E:C6:25:55:A5:CD:99:EE:D8:3D:68:08:CA:07:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 139A68553D2FEF78359A05FE08558130B18DB06D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ee6a43b-b4e4-489a-9cd2-21a72f1cf6f5.roa
Signing time: Thu 30 Jul 2026 01:40:06 +0000
ROA not before: Thu 30 Jul 2026 01:40:06 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9a:68:55:3d:2f:ef:78:35:9a:05:fe:08:55:81:30:b1:8d:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:06 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=19c5d96a4b76e3d493a314dc79ff7dc23f469bfce07bdcce6e454d4772a4b645, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b0:35:be:db:cc:0f:f1:c9:18:5f:f0:51:e2:
f3:a5:d2:39:92:8b:53:42:ec:b4:ea:9e:f7:10:f4:
8e:d8:9b:41:44:88:3f:f0:0d:1f:8b:16:6d:39:ac:
12:37:21:7a:c9:08:8e:3b:bd:20:cf:73:dd:33:b6:
0c:ad:5d:14:dd:76:22:1d:5b:cc:a7:d6:17:23:c1:
0f:4b:48:03:63:66:a6:10:16:d3:f5:85:e2:65:e6:
a1:e2:dc:73:3b:84:b7:a4:ad:1c:ae:a3:a1:92:f9:
1c:8c:78:7f:63:20:37:78:a5:c5:7d:6b:b1:d6:99:
e2:35:6f:96:6a:1f:55:75:ad:2f:0b:65:8e:65:b8:
23:f7:47:f9:34:a4:91:8e:9f:04:a7:72:f8:24:90:
54:58:3d:d2:42:58:aa:40:c2:76:bc:49:11:f6:7b:
bd:ac:e6:5c:04:be:1f:03:0f:35:f8:b3:2c:c2:c2:
95:2e:2f:16:c6:39:d3:93:32:62:cf:49:48:d3:f6:
c6:dd:4f:ac:7a:a0:5e:34:6c:1b:05:5f:05:84:67:
cc:98:a5:30:9a:32:b8:5d:9e:cf:a2:db:44:a7:0a:
64:39:9b:14:9c:b8:83:db:a8:7a:2a:ab:1d:61:a9:
7e:96:cf:69:aa:d6:45:9a:6d:c5:af:31:e2:6f:0d:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:A9:5C:6C:1E:C6:25:55:A5:CD:99:EE:D8:3D:68:08:CA:07:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ee6a43b-b4e4-489a-9cd2-21a72f1cf6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:93:1a:37:e2:b0:94:ba:4c:94:88:a9:a5:04:c5:5e:c7:ff:
19:8f:57:75:b7:53:9a:3d:99:be:6a:40:a2:c2:c3:43:fe:5e:
33:72:d1:b5:11:16:5e:14:e4:f9:a7:a6:cb:af:98:15:cb:50:
84:aa:19:dc:23:4d:04:9f:55:1d:58:90:60:85:ef:cc:c8:f6:
a2:64:a3:5b:2f:3c:22:d4:e7:14:cb:4c:5e:6e:66:22:0f:f5:
1d:ee:ef:e0:7e:94:1b:ae:df:21:fc:6d:99:09:b9:7e:c5:ba:
90:85:79:14:23:93:bd:ef:3d:bf:92:94:b9:c1:2b:73:97:ef:
6a:7e:05:2e:b1:62:73:b7:d6:81:82:62:ba:05:0f:6b:c8:b3:
fa:75:94:6c:9b:8c:4c:03:87:cb:de:62:8b:c7:da:d7:f5:96:
c8:70:8d:4e:7d:7f:ed:75:f9:d7:52:97:50:9d:76:00:6a:cb:
0e:d9:e2:de:61:69:81:6f:2f:99:ae:3d:a6:bc:01:de:60:54:
c9:c3:cc:a6:35:9b:b4:34:d5:ef:fe:cc:bf:e9:4f:62:2c:ea:
d8:40:f9:26:70:29:9a:bd:d2:99:13:90:ee:87:86:c5:f3:12:
85:9d:ee:bc:d3:8f:94:9e:12:cd:38:0f:d1:f1:45:38:97:12:
cc:d3:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:12:33 2026 by rpki-client