Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa
File: eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa (raw, json)
Hash identifier: 0qFOXYjO9USCV8V2hVY7y6QFhCLsdnAXWFtKcDwB+Rw=
Subject key identifier: 0C:5F:DD:9D:DD:AE:A3:C6:71:90:CF:80:F2:8D:1F:81:DE:D2:B5:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 027F0DD49D94A5C199F95FD3758A6287BCE579FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa
Signing time: Thu 30 Jul 2026 01:40:31 +0000
ROA not before: Thu 30 Jul 2026 01:40:31 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7f:0d:d4:9d:94:a5:c1:99:f9:5f:d3:75:8a:62:87:bc:e5:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:31 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=52c7bab5a132a71f4e2b983e286c150f874fd7268e3a324133b92d77b4d3ff72, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:fc:90:fb:b6:13:84:cb:7d:53:15:92:69:
92:be:85:26:31:2d:ea:83:bf:c4:c1:bd:14:c6:66:
fe:3b:79:9b:3b:96:72:bc:e2:64:6d:79:7d:45:1a:
f1:e3:f2:2b:f2:3d:57:d4:e3:d4:06:d2:69:9a:cb:
3d:fc:95:5e:8c:2c:94:52:cf:13:f8:15:28:74:15:
42:9a:13:9e:ce:23:d9:b7:d1:8f:06:ee:d2:8f:e7:
e3:b5:39:e1:41:96:0a:56:77:bc:ca:5b:24:c6:99:
2a:8a:84:52:77:60:75:25:35:40:f4:50:6a:e0:bc:
44:82:64:99:4a:c7:e8:c3:4c:ce:a3:3b:0d:8e:5c:
04:06:5d:a4:96:94:31:91:bc:dd:f2:0e:1a:35:31:
e4:3e:fe:53:0b:75:45:66:31:7b:a5:df:22:49:14:
14:3f:3c:44:86:29:46:0f:65:e4:f9:24:94:6a:fd:
6d:33:b5:3a:88:54:ff:32:e8:40:10:e7:f2:41:e0:
d8:6a:c8:eb:2d:bf:8b:ac:28:0e:35:f4:00:ca:48:
3e:59:78:9f:b7:dd:16:a8:a4:62:1a:b3:e2:35:e2:
5e:55:f7:cb:e0:e5:ed:65:5f:bc:9f:e5:84:63:cc:
0e:9a:8e:0b:1c:df:94:f7:80:8c:f4:7a:d9:55:5c:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:DD:9D:DD:AE:A3:C6:71:90:CF:80:F2:8D:1F:81:DE:D2:B5:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:6e:4a:e9:f8:de:a8:98:44:98:9d:64:29:0c:39:51:e1:60:
04:1f:f4:ef:bc:91:a4:4c:cc:c3:55:57:e7:fc:87:22:00:17:
b8:30:6f:a9:8d:80:42:95:7e:90:56:64:8c:73:46:79:25:af:
7f:bd:03:d9:49:dc:ee:da:13:43:69:9f:26:97:41:6a:5a:50:
01:ee:0b:83:5d:67:32:e2:61:85:6b:2d:20:93:4f:c0:6f:ee:
73:19:5f:25:a2:cd:18:48:41:6b:df:21:04:b2:ab:e9:b6:52:
8e:23:06:90:2a:74:6f:03:c9:0e:7f:47:ee:b0:5b:95:ac:34:
f6:d4:1b:07:b6:70:b0:76:76:af:20:8a:11:fc:5e:af:32:7f:
d4:ba:d5:c7:4d:cd:8f:87:4d:80:b2:2a:10:72:bc:86:d2:80:
48:7c:9f:3c:1d:d3:5b:ce:97:85:7c:90:a8:6c:e8:76:76:f0:
a6:fd:e9:ff:6e:dd:50:4e:13:9b:aa:41:1b:68:ab:fe:b1:50:
83:98:63:25:61:93:91:11:b1:cc:8a:09:e1:93:fb:a6:4a:08:
d1:c4:23:24:f7:a5:49:e0:1e:a4:65:9c:ba:40:75:2f:6d:f5:
1b:06:66:bc:66:bc:7d:56:78:92:58:34:dd:3c:0c:ff:10:a5:
ac:d6:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:18:29 2026 by rpki-client