Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
File: aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa (raw, json)
Hash identifier: J6Gq4xP7NZwMyuKjbKSphJATjgJEdir8tnuFj7UCFN8=
Subject key identifier: CF:9E:26:26:92:B6:6B:2D:1A:E0:EF:47:79:84:47:94:70:4A:1A:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C6D7D96990A012B0CE50BE40509B82B11977F8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
Signing time: Thu 30 Jul 2026 01:40:33 +0000
ROA not before: Thu 30 Jul 2026 01:40:33 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6d:7d:96:99:0a:01:2b:0c:e5:0b:e4:05:09:b8:2b:11:97:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:33 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=ea9211f527e628afc60aba70c83446088f55f1eec3983277379352068c4cffdf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:09:8d:2e:b5:a0:19:b8:71:ed:d1:71:e5:
2b:ea:9f:53:98:f8:96:29:18:ee:99:cf:7b:2a:e2:
74:4a:3f:f9:e0:30:ef:4c:ed:ed:a1:15:b5:7b:71:
2c:99:0c:36:d4:1c:8e:8d:91:cb:4f:91:e3:a0:d1:
a5:4f:08:bd:df:3d:43:06:a9:8e:e3:67:1b:cc:07:
af:3c:bc:ef:77:72:3c:d3:d4:91:59:12:ab:56:a3:
01:3e:11:ae:b3:ed:7e:c0:9b:37:f5:ea:9a:94:f3:
54:1c:45:58:9d:65:68:ee:e9:e9:63:30:ec:99:b5:
c9:b2:e7:bc:07:62:02:72:6a:19:3d:ea:a3:06:e6:
26:e0:ce:82:80:3f:5e:e7:41:45:1f:11:74:b1:b8:
1a:36:38:3b:2b:73:96:0e:b9:bc:ec:8c:81:17:29:
ff:56:7d:58:25:42:f9:6a:71:60:6e:6a:53:a9:d2:
08:fc:4b:d8:44:34:7b:00:d0:69:5b:4d:b4:2c:f6:
ef:52:af:c1:a6:0a:8c:8d:e2:37:98:5f:d6:ec:10:
80:e4:88:d4:08:56:79:19:6d:4a:4f:01:ae:3d:bd:
35:4e:22:20:51:79:5f:00:5a:10:ef:d7:4b:a7:15:
c7:bb:d5:f9:b0:6f:74:bf:e5:0c:26:43:97:07:d3:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9E:26:26:92:B6:6B:2D:1A:E0:EF:47:79:84:47:94:70:4A:1A:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa79bb18-b74d-4cc3-ba05-20af0f9435b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.144.0/20
Signature Algorithm: sha256WithRSAEncryption
95:68:06:c9:14:ad:8d:06:8e:0d:8c:5b:0b:32:0d:d1:b1:b8:
c6:76:58:a2:72:2e:38:1c:a6:0b:c3:26:f8:31:09:60:54:dd:
51:f7:07:b6:58:e5:70:49:75:9a:28:bb:12:9f:e7:e1:2d:ab:
a4:99:e3:6f:72:37:c2:de:b7:9e:7c:0b:4b:5d:fc:cf:96:c2:
eb:e9:aa:99:c6:5e:34:c0:7d:25:ca:05:0b:d2:8f:47:d5:dd:
c8:27:f5:c6:ae:94:35:85:de:f7:5c:37:e4:62:e6:50:71:ff:
63:b6:ec:f4:a3:6f:71:a6:27:49:78:b6:94:80:36:88:9e:f7:
2e:53:ed:e0:43:1a:7e:78:9d:5f:8d:51:2c:51:05:bb:83:87:
2d:75:3d:63:ab:62:8a:67:b6:3f:64:32:f1:49:78:4a:ac:41:
e8:6f:a2:19:fc:4c:4a:a5:ba:27:65:15:2c:29:a0:5c:7a:ec:
9d:00:50:17:74:b9:f4:a7:f1:fc:fe:1a:13:07:eb:c6:bf:34:
0e:a4:9a:66:a1:c4:b9:4f:f3:99:43:0e:18:cb:8e:5d:ed:27:
9f:4f:6a:8d:e5:b8:88:34:52:ea:6a:f7:86:60:77:7e:d6:28:
80:40:29:04:17:50:10:2f:aa:8b:c0:ae:2b:b2:da:6d:80:9f:
d8:c2:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:16:18 2026 by rpki-client