Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e52e9dad-cbf3-4ac0-a52e-da2bf03e90b3.roa
File: e52e9dad-cbf3-4ac0-a52e-da2bf03e90b3.roa (raw, json)
Hash identifier: XJSZHI8zBtu6wsp9xroYFPmq7DnlQ11nJMhKMeE/Els=
Subject key identifier: AD:85:CF:13:B4:F0:5C:76:BF:AD:20:B7:EA:EF:F7:52:B1:8E:83:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3003A129EFB27C6738A8DC908F98FEBF510026EC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e52e9dad-cbf3-4ac0-a52e-da2bf03e90b3.roa
Signing time: Thu 30 Jul 2026 01:40:09 +0000
ROA not before: Thu 30 Jul 2026 01:40:09 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:03:a1:29:ef:b2:7c:67:38:a8:dc:90:8f:98:fe:bf:51:00:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:09 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=8484de9b30a2ddc3f11cf50845dc6189d31bebab53bbd40193a9ea0a998ef9c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:b3:be:82:e8:d0:5c:58:f3:00:d4:2d:66:
01:04:ac:4a:18:15:f1:c4:1b:f9:dd:ff:26:14:48:
11:65:61:da:28:e7:16:04:e3:3a:a1:54:21:dd:b4:
91:95:6b:eb:a6:5e:ff:78:8a:25:f1:0d:54:71:42:
ce:dc:fe:e8:cf:6c:a8:1c:31:f3:72:e8:57:f0:a5:
a4:12:a9:16:5f:9f:d7:4e:54:bc:84:ab:2f:44:21:
80:2e:ca:4f:8e:51:35:3c:ce:d5:5f:7b:07:b6:c6:
ea:d6:01:c2:be:ff:57:0b:c0:d0:ea:07:8e:53:96:
ac:f5:a0:e3:cc:4e:e7:f3:6b:19:f3:7d:8d:fa:8a:
2c:b8:bd:74:5b:17:c5:ad:61:89:4e:3e:ce:e3:23:
da:e1:09:c1:eb:c5:99:5a:80:a1:76:e8:cb:01:e2:
ac:83:f2:40:af:37:94:39:66:66:af:78:ce:20:de:
48:40:ef:b0:55:19:64:cb:8d:5f:aa:df:c5:38:70:
0b:fe:14:38:4a:b5:46:a2:3a:f4:58:ac:d7:18:95:
d5:0e:e1:77:a9:54:07:22:25:ad:f6:cc:b4:e5:39:
eb:d8:c5:e4:1d:b6:44:88:d9:44:37:66:c9:41:59:
23:5c:8e:37:dd:3c:a9:92:31:c9:3a:16:84:84:fe:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:CF:13:B4:F0:5C:76:BF:AD:20:B7:EA:EF:F7:52:B1:8E:83:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e52e9dad-cbf3-4ac0-a52e-da2bf03e90b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:5a:0d:cb:be:f1:2e:b7:c6:e2:64:88:08:78:be:64:43:df:
76:53:d7:3f:51:51:f2:93:9d:4d:6c:35:c5:34:a2:6d:3f:6e:
30:f0:db:f4:4b:3e:bb:e9:66:0d:9a:04:77:25:16:eb:f6:a9:
87:32:3d:dd:52:a7:90:ca:d1:d0:32:54:3b:0e:45:88:0f:1d:
c4:33:ad:34:f0:61:51:01:6e:f8:b7:50:60:12:c1:4d:aa:8a:
a3:96:ca:fc:9b:a1:05:17:75:76:63:c0:71:81:01:2f:af:8c:
a9:c5:9d:d8:91:31:32:33:40:62:c9:04:9c:a7:62:ab:4e:b0:
63:dc:1f:2f:ad:71:14:0b:98:87:5f:8d:02:ec:8b:36:cc:2b:
55:28:14:54:f2:8a:6e:fe:df:a7:d9:1e:43:cc:ce:e0:f4:57:
4f:38:74:72:ed:2c:86:7c:a5:f2:83:02:65:09:d2:d3:31:1c:
8c:8e:c0:51:1a:de:45:1c:64:c9:40:68:25:13:83:d8:f4:49:
a6:d6:0e:33:80:8a:27:97:e9:5d:e8:18:87:93:5a:cb:83:ac:
a6:ca:46:5f:db:d7:52:36:9c:ba:cb:ef:6e:42:4b:2d:4e:2b:
74:19:66:20:02:84:0e:0a:95:2b:b1:bd:c6:98:a6:4d:2c:16:
56:58:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:11:32 2026 by rpki-client