Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
File: aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa (raw, json)
Hash identifier: hqjj9Ldgk/AookHPvPMweo7/S4qR/4zaXqGDv3epBXQ=
Subject key identifier: 29:97:2E:93:F9:A0:82:A3:93:90:CB:7C:FB:74:8A:44:6D:BE:BA:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B06C62280C45A34595125633A288AC31076D76F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
Signing time: Sun 18 Oct 2026 01:30:22 +0000
ROA not before: Sun 18 Oct 2026 01:30:22 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:06:c6:22:80:c4:5a:34:59:51:25:63:3a:28:8a:c3:10:76:d7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:22 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=6ccc8b5730b1f14ccb62a9e914e77a194c9a18c3a462bef9b2ac1ac10112c66b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:6a:52:11:75:a5:af:3f:ce:48:52:cc:62:
01:e1:2a:24:ed:fe:07:60:80:47:5f:19:73:d1:24:
58:35:b5:ce:50:c7:d0:c9:53:38:10:66:93:45:9e:
b6:31:c9:69:dc:94:5f:17:68:20:7d:4f:59:8d:3b:
78:f0:28:03:cd:46:46:0f:63:f0:79:53:d4:d6:68:
a8:b5:d8:82:42:1d:33:9f:4e:a9:a7:31:39:9f:c5:
a9:95:03:15:1c:a9:0d:69:db:ef:61:aa:a1:c2:83:
02:82:98:f8:0d:59:77:d6:bd:7b:84:ad:be:23:1b:
59:65:aa:d3:9d:ee:5a:5f:5e:e3:9d:45:ac:2c:63:
a5:40:ea:74:e8:8c:db:32:01:77:25:b2:a8:b6:d2:
ce:28:f6:ee:c6:67:45:92:8c:90:e5:56:f7:85:f7:
31:6c:51:26:64:fb:23:07:2c:46:43:e2:71:fe:5e:
82:59:b2:73:2e:52:ab:eb:a6:d6:ec:4d:05:ef:45:
c4:ee:2b:82:fa:1f:ca:fb:35:bf:c8:b8:c9:e7:d4:
2c:13:a2:f2:16:fe:c9:98:dd:52:05:17:49:b1:79:
8c:d6:aa:75:7c:74:c3:3f:8f:86:84:62:8a:aa:8a:
2d:55:99:d8:4b:08:e1:01:20:9b:32:8b:be:44:a3:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:97:2E:93:F9:A0:82:A3:93:90:CB:7C:FB:74:8A:44:6D:BE:BA:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.144.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:40:5e:62:0e:99:6b:c9:53:ff:6a:23:5c:5b:64:e5:a9:92:
c4:8b:3c:13:cd:81:2e:b1:f7:95:55:4a:41:b8:df:d1:05:f3:
48:78:65:88:76:c7:43:80:9f:9a:f4:e9:27:ed:56:2c:66:70:
53:7b:32:00:51:20:55:2a:a6:22:2d:fd:c3:ca:fb:eb:26:18:
e4:29:a9:9a:e4:ca:f7:0d:d7:8d:ba:35:17:cc:e3:87:e0:ac:
1b:6e:a8:9b:cf:ec:eb:e2:c9:4b:b3:30:36:1c:77:66:70:a8:
bd:4a:c5:5b:5f:b3:ef:cc:09:08:2d:78:5c:9b:c5:27:49:26:
a0:d7:00:62:d7:cb:58:ad:e9:d1:68:d4:d3:7a:bc:c4:92:2c:
77:bd:09:c7:f8:6d:d8:e9:73:26:54:09:19:5a:bc:fc:3e:29:
50:6f:91:c4:29:c0:8b:2b:4e:45:ba:d1:3e:73:ae:ff:9d:9a:
1b:42:cf:4c:33:de:89:8b:fd:48:e0:1a:95:3a:a5:33:d7:5f:
c8:9e:26:d2:e8:13:bd:69:1a:7e:c9:1f:41:1b:b8:a7:99:6c:
73:32:ca:87:7b:d7:87:63:b5:47:0f:94:32:d2:b9:7d:0e:a9:
a4:bf:0b:01:8a:59:d0:45:05:a7:9c:19:5f:eb:82:50:47:dd:
1f:03:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:42 2026 by rpki-client