Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa
File: b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa (raw, json)
Hash identifier: kyLHtZgEpXlCR0FGPiz+sYLIXSGwp7VJFHYEE5T2Ggc=
Subject key identifier: DD:99:CC:1D:75:2D:DD:D6:3F:4E:EA:A6:99:36:05:C1:A8:C4:C3:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D80FFFA061DA350012DCFD4C5021EB5FC57337E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa
Signing time: Sun 18 Oct 2026 01:20:24 +0000
ROA not before: Sun 18 Oct 2026 01:20:24 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:80:ff:fa:06:1d:a3:50:01:2d:cf:d4:c5:02:1e:b5:fc:57:33:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:24 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=6b7385e6f31dc79987d0746928e334a932445a590c5bb44f474220d171659f60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:e2:ce:77:c2:03:0a:ee:e1:c7:fc:0d:09:
ee:05:f3:a1:00:76:77:80:63:5d:5e:7b:39:eb:14:
6c:ee:42:7e:7c:e3:e4:90:92:74:7e:16:12:63:4e:
db:86:9b:df:5d:d2:f3:ed:29:3b:5e:8f:bd:83:c7:
af:f7:93:7b:4d:ca:9e:e5:3a:91:30:35:5b:65:74:
5f:17:94:32:bb:28:09:2b:8c:e2:67:d3:5a:70:dc:
a5:d9:56:bb:98:14:ba:07:fd:9c:33:dd:12:fc:a6:
2d:b7:22:05:79:e5:cb:d0:bb:24:72:75:20:65:6b:
81:ce:f0:53:a3:33:88:0a:aa:3f:0e:65:a3:59:1c:
51:95:55:18:41:c3:ae:c8:6f:24:88:ef:45:25:56:
60:a1:5b:d3:04:2c:b0:76:0f:39:11:ae:e6:47:27:
47:35:9a:3c:0a:6c:a2:20:3e:d0:79:85:87:ea:99:
9b:12:0d:a4:95:22:71:d9:12:31:83:f5:7f:4c:72:
cb:8e:da:4a:55:2c:7e:c6:18:4d:f2:23:c9:eb:af:
7f:a1:62:c0:e1:a0:8c:6e:83:07:86:05:46:71:5a:
28:a6:c3:ef:e5:42:13:64:61:a9:20:4e:0c:f4:d2:
e5:d1:b7:3a:fe:1e:8e:29:f4:95:71:c9:b7:61:eb:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:CC:1D:75:2D:DD:D6:3F:4E:EA:A6:99:36:05:C1:A8:C4:C3:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d55e9d-2730-4ec2-91d5-af98a5a51340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.44.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:44:5f:19:60:bb:f1:23:ca:0f:f5:69:06:95:73:fa:20:0f:
23:45:37:7f:52:c0:5b:5a:22:e4:a6:84:e8:c4:55:0c:f5:2f:
50:66:48:ba:1a:da:fb:98:55:99:e3:34:8b:1e:e3:5a:25:17:
38:cb:ec:53:3d:b2:84:42:16:4b:9d:9f:b9:d9:a7:70:ec:cc:
ec:09:f4:a1:53:62:a1:28:26:87:a7:69:9c:a1:e4:80:dc:40:
89:c1:25:e6:ab:48:52:d9:c9:2b:a4:80:5d:3f:53:b4:1a:59:
91:39:0e:32:d8:3b:23:0f:64:fe:f5:05:4d:f9:46:04:30:46:
0b:50:35:4b:84:9d:bb:2a:a9:4a:47:3e:ec:94:17:db:69:e8:
98:dd:04:d7:ff:9b:9d:81:71:42:62:af:2b:82:4f:62:8d:73:
5b:74:97:36:5d:09:64:9a:3c:4f:aa:04:1c:f0:57:4f:a1:90:
74:47:e2:76:f5:c0:44:24:dd:08:72:8a:f7:a4:27:80:0e:c6:
1e:98:8f:c6:5f:40:c9:12:bc:a4:03:35:ee:db:89:42:f9:b5:
15:de:ae:15:22:a5:97:b6:6e:60:1b:ac:73:85:e2:47:e8:a7:
77:37:72:ab:8e:fa:ed:ba:33:50:ad:d6:7a:5d:4f:ed:cc:f8:
4c:cb:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:37:51 2026 by rpki-client