Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
File: 995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa (raw, json)
Hash identifier: 9K3Xqr/Lz4H9T2dCj5wZQacUp1FMnMpg18RDk+zk5As=
Subject key identifier: 3C:48:60:16:21:BE:46:54:99:35:54:85:10:95:F1:28:8F:7B:C6:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C39BEDCAD8A4039353389683A43420885AEB483
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
Signing time: Thu 30 Jul 2026 01:40:48 +0000
ROA not before: Thu 30 Jul 2026 01:40:48 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:39:be:dc:ad:8a:40:39:35:33:89:68:3a:43:42:08:85:ae:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:48 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=cfcefc3282b68722f88158d8cb480063260ff9737d2da2c801019e94d4e0c094, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:38:9b:85:2a:09:00:c7:69:a4:37:69:1c:
af:4a:54:f8:74:d0:1c:7b:b7:b9:31:15:b5:3f:12:
f6:ca:09:42:6a:db:be:d1:e5:49:d8:b8:f2:2c:97:
62:49:03:f5:1b:7b:9a:ae:45:03:4c:85:da:9d:d7:
b3:1c:c6:e2:c2:5f:19:43:b3:7b:05:8e:ec:19:40:
14:de:a8:b1:7d:b4:aa:20:c0:76:d8:f4:56:98:24:
a8:d0:90:42:d9:47:0b:02:23:9c:bb:90:84:8d:0e:
33:c1:2c:15:f2:af:51:05:13:79:51:14:ad:3e:9f:
c0:7d:45:f7:c5:3a:72:b4:c7:63:8d:bf:84:2c:d6:
ac:89:b1:fd:0e:e3:6d:1d:21:24:69:48:bb:ab:88:
94:24:02:ee:1c:97:c8:74:7e:9b:b0:3a:55:f9:e2:
03:ce:68:c0:9d:53:40:02:4e:6c:71:6b:9f:7b:9e:
97:a2:b8:3d:0d:6b:b5:74:bf:91:55:c4:3d:2e:c8:
c9:35:e4:42:5e:a0:4e:4e:f8:34:93:86:b9:02:b2:
55:ff:be:fb:7b:d2:15:c2:d4:e1:e2:35:51:ae:01:
35:89:1b:45:94:9e:54:c0:e3:7a:99:ea:21:dc:c1:
bc:a4:b0:90:d4:5f:cc:a3:25:3e:7b:21:01:d2:ad:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:60:16:21:BE:46:54:99:35:54:85:10:95:F1:28:8F:7B:C6:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
54:34:4f:a5:80:92:d4:be:d0:5f:a0:4f:81:1b:4f:5c:c6:9d:
54:21:ac:aa:29:cb:95:ca:3e:b3:e9:9e:0b:bb:92:64:7f:a1:
8d:8f:45:33:d0:9b:fd:14:98:b5:47:41:b1:2d:fd:20:5c:a8:
6e:b7:1c:08:e1:26:53:10:19:a6:91:f4:0c:5d:db:e3:e7:bb:
ba:cd:c3:c8:1f:81:0d:7f:6e:f5:e2:d4:35:c2:1c:49:d0:30:
c1:af:9b:e6:dc:4e:d6:81:eb:72:21:fd:e7:e9:ba:fd:9f:61:
22:62:c6:62:ba:17:d3:e5:6b:c8:03:ff:24:35:57:fd:76:88:
c4:43:ff:41:ae:0d:de:c2:11:47:28:b4:8d:0c:60:34:33:1e:
78:e7:24:49:61:8f:20:b2:08:be:79:58:d9:2b:90:37:8a:82:
95:ef:f8:d6:32:e5:c4:0a:62:f0:46:75:9f:75:87:4d:ae:b4:
20:fe:e3:f3:29:c6:e0:3b:aa:0e:64:ff:b5:6f:db:1f:79:b3:
bd:e0:01:a9:36:10:54:ef:22:7d:da:43:c1:df:44:ff:f2:5b:
9f:6a:e3:71:0d:14:3d:8b:a9:00:7e:75:39:89:0a:68:3c:41:
a4:cd:1c:c0:99:e5:bd:bf:75:a0:e6:16:f3:e9:f0:ee:cf:60:
c1:ad:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:12:15 2026 by rpki-client