Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
File: 049fd671-de95-4496-9712-c56affcb2b27.roa (raw, json)
Hash identifier: BOE0cK8e+WD4YKlBh1AYMDzFrIHEX3UmqoopQWgFwkw=
Subject key identifier: FE:BA:37:30:BE:54:94:F9:57:D1:62:CE:E7:1B:00:13:8A:C0:49:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09EC3DE73DE0E2C754712B8E4E202DFA2DBB0D0D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
Signing time: Mon 11 May 2026 01:51:08 +0000
ROA not before: Mon 11 May 2026 01:51:08 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ec:3d:e7:3d:e0:e2:c7:54:71:2b:8e:4e:20:2d:fa:2d:bb:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:51:08 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=b410b8946c7e777b886d6cac7e735c5ba7863fb7f174ac95bef7d70fdcb65c65, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:f5:7a:1c:86:17:60:ae:be:40:5c:5b:a4:
d0:32:b8:f2:05:80:62:54:4d:cb:50:07:ef:d6:ec:
5b:8e:2b:92:5b:2e:f7:c0:79:97:d1:8c:9d:2d:69:
60:56:8f:c2:80:c9:6a:1a:65:82:64:f7:de:f4:94:
c0:5b:be:e4:f0:da:b6:bb:31:f3:ef:f7:d4:c9:82:
94:60:f9:e9:37:4a:7d:07:af:a1:6d:7c:8c:6d:46:
cc:84:b3:14:82:61:d8:43:c6:36:33:87:42:d0:9a:
ca:a8:59:2b:70:f1:35:0a:07:0e:66:95:a8:fc:17:
e4:35:7b:e8:ea:ae:83:8a:8d:b1:20:f1:c4:d0:4d:
76:f8:92:b7:20:2c:e2:35:15:65:a2:ab:ca:8e:fa:
66:8c:d3:87:a2:e2:f9:ab:a2:5c:7d:ec:d4:20:6b:
88:21:45:22:84:3d:5f:b3:25:ad:4d:37:a3:46:4c:
d1:ef:d4:20:d6:e5:f0:bc:3b:b5:59:80:34:5c:61:
3f:b6:76:fb:a5:6a:58:75:16:f2:8a:77:fb:49:38:
6f:d2:bb:ff:e9:bd:33:03:5f:f3:81:f3:1a:b1:bc:
84:b8:e8:e2:55:03:52:fd:93:b7:9e:20:04:65:96:
8e:df:13:6b:9f:57:26:36:b1:41:bc:79:90:cf:28:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BA:37:30:BE:54:94:F9:57:D1:62:CE:E7:1B:00:13:8A:C0:49:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.24.0/21
Signature Algorithm: sha256WithRSAEncryption
46:ef:e5:89:9d:9e:41:2c:fb:da:54:02:86:6e:28:cc:28:c1:
7e:ed:76:46:d8:ae:06:f8:37:b8:ab:42:be:3c:92:4e:93:ae:
e9:2c:19:d2:7c:b7:86:9f:39:de:08:ef:6e:f2:b2:8d:8e:6c:
43:67:d8:4c:9f:13:07:e5:07:b4:68:1a:da:f6:a4:7a:df:ab:
a4:28:fe:9f:c7:39:11:7f:e3:bf:d4:83:ba:7f:ec:46:c5:0c:
d1:f4:ac:40:61:4c:69:82:89:3c:0e:db:59:67:2f:19:16:01:
3f:92:9d:44:42:b2:8a:ec:cd:2e:cb:8a:0a:13:c6:40:0c:d9:
f7:7c:71:fa:d1:37:36:dd:1c:74:fb:37:6d:69:c7:8f:98:e3:
60:4a:fd:cc:7a:95:2f:35:99:dc:50:64:94:61:aa:4b:f2:ce:
60:bb:c1:67:e9:01:2c:c0:ed:04:28:c3:a7:ac:46:8a:40:ec:
f6:2d:e1:ba:1a:d9:39:83:c0:78:f3:7a:4e:59:f5:1b:f0:c1:
f5:b0:ab:87:61:5e:ba:88:01:4a:d3:69:ea:1f:a5:fc:53:a5:
95:ac:2a:28:7c:f0:dd:34:b3:74:90:0b:39:cc:bd:e3:89:5a:
56:d1:a8:4b:2c:fb:49:15:be:e6:35:8a:31:90:34:dc:42:f3:
8a:42:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:32:26 2026 by rpki-client