Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa
File: b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa (raw, json)
Hash identifier: 3gid/gMMtUA30MzoK6P3oWIqB4UVM4PMpfjp4QlhjOk=
Subject key identifier: FA:2B:80:FE:5C:A9:1B:7A:04:08:D4:09:94:76:DC:F0:24:32:0B:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1922E56C40A4059F48972E3C00BB708CE068F97E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa
Signing time: Thu 30 Jul 2026 01:30:15 +0000
ROA not before: Thu 30 Jul 2026 01:30:15 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:22:e5:6c:40:a4:05:9f:48:97:2e:3c:00:bb:70:8c:e0:68:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:30:15 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=639d9ae9368b4d6d3ec174c9273095e629115fbd7440237b4430d5c35bf90332, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:40:52:83:42:3b:1b:d1:c2:55:e0:cc:ca:
ab:42:88:fa:84:8b:31:66:34:11:ae:be:90:43:cd:
8f:ca:07:da:fa:72:77:f4:94:22:f3:d9:89:dc:5f:
e1:56:27:28:1a:4f:24:dd:0f:67:73:be:f9:2e:6b:
f6:98:44:6e:68:4c:65:66:8d:47:4b:0a:8f:5b:99:
a5:8c:92:49:81:69:da:64:65:67:b3:22:9b:6b:00:
cc:aa:60:d5:ea:ad:d5:87:81:8a:41:0a:53:e5:29:
1e:2b:a7:50:15:c2:ec:36:77:b2:6d:71:8f:67:b0:
38:5e:68:a8:a5:65:20:5c:fd:ab:33:79:b6:36:d0:
7c:3b:da:05:a3:72:c8:e1:5f:1e:63:ce:e7:90:20:
c5:1e:de:b5:31:0d:55:46:1d:8c:ff:bb:09:01:3a:
d8:10:51:c2:b5:05:33:e1:63:4f:d9:db:df:a7:d0:
0d:0a:eb:f5:64:c2:20:40:de:d1:e5:fb:5b:c7:1f:
f2:0e:5e:f4:cd:7b:19:ea:db:f5:ad:23:b4:30:93:
31:20:32:24:6c:42:47:9c:d5:4a:30:04:34:40:d2:
87:ae:b8:59:7a:64:16:fa:01:7d:aa:84:db:23:c0:
2a:b9:d7:fd:70:62:29:22:cc:01:23:25:92:2b:a4:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2B:80:FE:5C:A9:1B:7A:04:08:D4:09:94:76:DC:F0:24:32:0B:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:48:79:88:9d:4d:d6:08:49:3f:87:42:48:c4:59:f3:c5:b9:
4f:42:6a:89:aa:e5:e0:3b:01:a6:fa:13:02:7a:f9:26:0b:f7:
f8:28:b8:df:71:47:cf:d8:17:2c:48:f1:e0:df:c1:26:35:8c:
e0:d7:d2:83:86:18:f0:e3:09:91:73:8e:b5:17:c5:b4:aa:4e:
88:6a:91:0a:7f:87:67:8e:3d:d2:8c:7a:82:be:a3:6a:6a:36:
af:5d:64:c0:93:a5:ac:29:2e:41:6e:a1:5c:fa:27:49:c6:f1:
81:77:80:f1:1e:49:24:8d:b4:10:30:a5:e4:ab:35:c1:08:e9:
8e:fc:de:15:68:6b:74:e3:0d:ec:49:68:86:59:52:40:94:03:
0a:ab:78:bd:12:8a:1e:89:14:ae:d7:1a:4c:88:1e:b0:79:38:
fe:fe:50:83:ef:14:be:4e:76:66:b8:ea:1b:fc:c7:ba:03:73:
87:24:69:ae:76:17:79:62:d7:e5:3e:8c:c5:32:ea:dd:97:7b:
47:6b:3a:52:41:d0:64:5a:36:93:cd:0f:4f:b4:a4:b0:b9:d6:
95:70:04:c4:0b:ac:08:5b:46:b5:f8:67:c4:3c:2a:2f:8f:8e:
9a:17:fa:2f:ae:1a:67:c1:56:ab:79:e2:75:7e:9f:dd:32:98:
06:e4:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:32 2026 by rpki-client