Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
File: c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa (raw, json)
Hash identifier: h2NHP520xgG4rZKgyM1Q3Dyhso3fl5Glx+bJxr9mio4=
Subject key identifier: E5:5B:D7:69:5D:06:90:BB:37:50:4E:62:5C:A5:1E:4C:83:88:68:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44D5C6C1DBC40630B2A73816AC4C142D427AAAB5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
Signing time: Thu 30 Jul 2026 01:40:47 +0000
ROA not before: Thu 30 Jul 2026 01:40:47 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d5:c6:c1:db:c4:06:30:b2:a7:38:16:ac:4c:14:2d:42:7a:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:47 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5de0984768061872b88503639779cc597dc0cf4ae69a83c3aff604194989a64f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:d6:2e:38:f3:70:6c:ea:d0:0c:8f:f8:d0:
54:b8:9e:d8:b3:d1:83:d8:1c:ba:68:ee:77:c3:7e:
06:f6:0d:6a:0e:75:96:cb:0b:c0:89:15:d0:26:5c:
1b:82:80:50:34:40:63:e9:d1:c5:1d:9b:69:f2:c2:
a0:dd:1f:bf:04:ae:f3:11:c0:1d:53:f0:bc:8a:83:
87:c5:99:c1:43:3b:fe:d0:b1:e3:7a:d0:e5:99:52:
9d:ef:8b:e3:27:73:bc:42:6f:f0:b3:0c:ca:6b:0a:
ce:31:b9:5a:b7:b8:6f:62:6c:66:81:cc:ac:e8:59:
60:a3:97:a0:d5:d4:ec:ed:bc:f7:5e:2a:54:fa:fb:
04:c7:bc:6c:de:d4:07:8e:d1:f0:3c:a9:73:01:3a:
e4:c3:e4:ea:bc:bf:5e:ac:33:5d:23:e3:c9:ba:9e:
c8:a8:20:12:39:28:b2:ec:a2:e5:08:1b:77:a0:7a:
6e:83:42:48:3d:5a:06:cf:fd:a1:97:67:65:29:5c:
66:ca:67:58:66:b1:3a:fb:4d:21:f6:63:0a:03:83:
c6:39:c8:57:f5:d3:30:1d:95:1e:48:3b:50:f0:1f:
ff:de:18:99:7f:fe:9c:c4:c9:37:51:83:a5:6f:38:
70:6f:d5:e2:6b:a8:3e:89:0b:f4:fa:fd:82:10:c7:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:D7:69:5D:06:90:BB:37:50:4E:62:5C:A5:1E:4C:83:88:68:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:0c:a3:10:53:5f:7e:ad:11:c8:2c:f6:ef:a2:91:7a:48:ab:
0b:9e:86:b0:d2:d3:5a:2c:97:10:b9:fb:97:1f:1d:c3:6c:bd:
e4:fd:e3:2e:59:0e:f8:95:ec:73:68:ae:ac:41:56:4b:82:4d:
ba:67:53:56:68:de:24:c9:dc:2b:6d:b7:bb:37:44:49:08:7f:
ae:bc:d2:c8:3d:94:9b:c6:4d:da:ac:39:42:4b:09:b5:c6:99:
a1:61:ba:50:13:81:9c:15:a0:46:fd:8d:57:31:df:46:64:77:
54:51:5b:c4:91:70:7f:17:9a:dd:52:02:d8:10:40:a4:a5:bd:
95:a1:87:48:29:b2:b4:2e:94:56:36:97:48:d1:99:13:1e:a4:
ee:8b:3b:8e:5d:13:df:4f:eb:d0:18:9f:a6:5c:21:7f:02:2e:
35:f0:b5:48:1e:e1:c1:d1:90:4d:16:77:71:7c:81:a4:ec:a2:
70:27:f6:29:80:34:3d:81:4b:da:f4:a4:bc:94:d6:d4:8e:44:
5a:15:bc:d7:43:82:91:56:bf:5c:6d:6d:e8:c0:19:0a:94:f9:
47:17:0a:ad:a3:8d:8a:62:a6:00:43:27:ad:fb:9f:63:80:dc:
46:06:94:fb:7f:51:dc:ea:ad:e9:33:15:db:7a:a5:1f:83:9d:
11:7d:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:39 2026 by rpki-client