Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
File: ec7e5637-f312-4c51-b644-29324b74734e.roa (raw, json)
Hash identifier: ZS0Jy10d3U5mMm4uEzLyCZnqDzHg+WTWjl862xKdAO0=
Subject key identifier: 1C:61:45:0F:B7:65:91:7A:D7:CD:86:FE:16:B3:96:96:7E:7D:8F:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6871CB7D75B2ED96595E4A5A7AADE96ACF233EC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
Signing time: Sun 18 Oct 2026 01:30:35 +0000
ROA not before: Sun 18 Oct 2026 01:30:35 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:71:cb:7d:75:b2:ed:96:59:5e:4a:5a:7a:ad:e9:6a:cf:23:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:35 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=eff9796a709070046bc408139944a7bda66ffed44a0d7f187f6b5f73065ccb1c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:3b:c8:b3:f6:be:90:bd:bc:d4:76:5d:8b:
62:8b:e4:54:a8:37:04:ba:42:44:eb:f6:82:5a:79:
a4:92:e4:b3:70:f7:e1:8f:1e:b2:fc:a3:9c:0f:2a:
49:8d:05:5b:66:31:61:f1:6c:cb:8e:57:c4:79:6a:
f0:a8:03:dc:9c:5d:2a:b1:79:95:ac:e7:91:ca:86:
78:b9:5e:16:a1:73:d6:4c:3e:1e:bb:df:a1:e5:2c:
bd:a1:cc:32:5d:b7:3c:73:f7:3b:67:46:ae:6e:da:
c4:3b:15:df:5e:d6:4b:c1:63:3b:3c:9f:e7:02:f7:
ab:69:fb:8b:e0:6c:ed:73:49:5b:de:89:18:32:da:
76:b8:63:3d:ab:aa:13:42:68:2a:f8:f8:83:b1:c5:
b8:91:43:aa:a2:66:b5:1b:37:45:9d:c0:9d:6a:3f:
66:8e:b9:8d:9b:ef:72:0d:02:37:ce:48:a9:44:ce:
4f:57:17:f5:5e:71:7a:7e:85:6a:bf:3e:05:c7:34:
08:bd:21:ae:dc:fd:42:e9:39:57:87:d6:c6:00:29:
82:a7:81:35:f5:54:d2:d6:78:0d:99:ca:7a:04:bf:
85:1d:46:6d:7c:f5:5b:c4:11:d7:43:72:1e:65:16:
64:a2:43:56:50:50:69:81:8b:4e:62:7d:6c:73:22:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:61:45:0F:B7:65:91:7A:D7:CD:86:FE:16:B3:96:96:7E:7D:8F:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec7e5637-f312-4c51-b644-29324b74734e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
93:0c:fb:d0:8e:60:b1:b1:ee:fa:41:5c:cd:70:7e:d9:52:9d:
87:0e:34:c4:b8:63:35:69:f4:f3:3f:ec:f6:87:51:b2:9e:44:
b1:17:b3:2f:5b:42:72:16:27:ea:11:3b:88:18:6b:16:95:b0:
16:63:02:e7:26:77:cd:c7:7d:f5:c1:5b:d1:5c:b7:1a:f2:99:
04:31:d4:f6:d9:ae:6a:a5:2d:39:49:fa:0d:ed:24:95:db:4f:
c1:32:9c:f1:0f:47:06:e3:e9:92:92:39:c6:3e:84:f8:21:5f:
aa:b9:ef:9c:b9:47:69:22:9c:48:0b:6d:e3:53:83:30:a6:fd:
87:cc:12:a0:2a:62:d3:f7:e3:63:4a:5d:40:13:93:83:cc:0e:
1e:71:6f:6e:44:86:48:e9:53:c9:08:ae:9b:db:d3:9f:56:4a:
d1:36:47:a4:1d:90:05:2b:f9:2c:ac:20:22:e1:7b:66:5f:20:
d3:b9:75:57:5f:32:e5:51:ba:13:65:69:39:c1:fe:45:9f:a3:
de:90:a9:8a:bd:cf:fb:99:14:c2:52:c4:31:5c:d8:bd:d8:de:
59:06:3f:f6:4f:87:02:52:32:54:2b:0b:e6:11:d9:b6:19:a8:
69:c7:a7:72:7c:53:bb:30:7d:63:de:eb:60:ba:fa:93:67:e7:
e1:9f:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:02:57 2026 by rpki-client