Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a260fe3c-a901-4f5a-b50a-79b9a1e1f8d9.roa
File: a260fe3c-a901-4f5a-b50a-79b9a1e1f8d9.roa (raw, json)
Hash identifier: tGgDQ3B9PdcP76QjC8zzDEWTTTmJuOhoAxP/Vxpc8ac=
Subject key identifier: 50:A6:46:AE:C9:41:1D:96:6E:6C:8A:B2:BC:76:0D:17:13:04:0E:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68015D727D918261D9B9D450FCC3D51CCBD9B363
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a260fe3c-a901-4f5a-b50a-79b9a1e1f8d9.roa
Signing time: Sun 18 Oct 2026 01:20:20 +0000
ROA not before: Sun 18 Oct 2026 01:20:20 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:01:5d:72:7d:91:82:61:d9:b9:d4:50:fc:c3:d5:1c:cb:d9:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:20 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=8f5349bff787dc5596a4f6bf43b66dd582e1a2fe4db3033d21f3b0dd0bf31bc8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:c7:36:eb:ef:f4:3a:3f:9b:3e:49:c4:1e:
bc:d9:9b:3e:ea:63:5e:05:9b:a9:24:68:35:40:93:
ce:ba:4c:a7:08:6b:0d:b8:91:f4:49:12:2a:e4:08:
7e:4e:2f:3f:27:6d:b0:6a:66:85:af:c4:45:8a:0a:
d8:f3:a2:73:76:af:6a:9f:9f:1f:8e:df:73:e6:e2:
d8:b9:c0:aa:f3:89:0f:57:b9:34:a7:ac:8e:4d:77:
49:d7:bb:87:9f:ec:1b:2a:be:4d:0b:7f:0e:b9:49:
4a:05:06:ae:18:94:a0:a7:8b:a1:44:58:cc:71:80:
c9:34:3d:9e:fb:65:9d:e7:99:61:c2:74:8b:1e:b9:
80:64:bb:87:aa:3a:c6:92:0d:d3:79:be:91:38:90:
ec:01:8c:3f:2f:64:95:74:8c:c6:dd:ea:ab:21:03:
49:34:67:5b:fc:09:60:be:f9:55:b4:d8:4a:f2:de:
91:f9:77:49:54:49:52:fd:2b:79:8a:f1:35:69:d9:
8d:87:40:1d:7d:b3:36:9a:f7:74:e0:71:bb:5a:aa:
d5:f0:76:74:88:cf:14:06:50:25:7c:5e:ef:57:9b:
9b:5d:88:c1:74:52:22:ab:ca:f0:6f:b0:3e:ea:46:
f6:f5:51:5c:aa:20:3b:da:05:e5:0a:d8:3e:dc:ba:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A6:46:AE:C9:41:1D:96:6E:6C:8A:B2:BC:76:0D:17:13:04:0E:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a260fe3c-a901-4f5a-b50a-79b9a1e1f8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:f6:0b:a0:9b:af:31:01:11:72:60:1b:bc:36:4e:51:15:06:
90:91:63:16:bd:ca:01:ad:60:53:6e:b3:1e:6f:f1:46:8b:91:
48:7c:29:c1:46:95:21:65:64:3f:4f:62:82:4a:24:46:9e:45:
01:d2:51:57:07:45:e9:a0:2b:2a:4c:6b:ca:eb:1e:86:aa:21:
ef:cb:35:e4:7e:e2:90:7e:87:99:53:fb:e9:4b:c5:7b:40:0d:
ef:12:c4:b9:05:1f:9e:63:0b:48:24:91:5d:25:c8:d2:22:39:
a5:f4:3c:ba:85:1d:95:d7:11:0a:74:85:11:32:d5:68:4d:9b:
3f:ff:21:19:11:98:16:83:27:19:52:de:19:c9:2d:b1:7e:21:
5f:e8:4d:97:ad:ef:1b:e1:55:10:fc:1d:db:fc:cb:68:e6:82:
25:37:3f:0d:b6:95:6d:0b:fa:64:b3:b7:79:5e:a4:99:32:9f:
f2:43:cf:1c:e5:ba:44:fe:af:51:cd:9e:42:fc:0b:0e:b5:1a:
62:c6:cb:59:66:f1:5a:61:65:14:7d:9e:d2:68:eb:44:1a:ef:
ee:ce:51:10:32:e6:38:02:e1:40:fd:48:b3:ef:15:93:02:0a:
b8:99:13:7f:e3:a4:75:2a:a0:87:6b:49:79:db:25:13:47:ff:
21:9a:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:08 2026 by rpki-client