Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
File: 1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa (raw, json)
Hash identifier: WFgHgc4Y6DUgDTe03Kcgnmt9LrQHHBpZTQm9oufRhAs=
Subject key identifier: 6A:52:ED:22:54:98:81:38:2B:5D:5B:7D:AC:E0:7F:22:32:16:37:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ACC6D712D295420E4D1154B62CBCEA355A9875F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
Signing time: Mon 11 May 2026 01:51:02 +0000
ROA not before: Mon 11 May 2026 01:51:02 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cc:6d:71:2d:29:54:20:e4:d1:15:4b:62:cb:ce:a3:55:a9:87:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:51:02 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=824675f3ea69958fcb9767183c0eb5cdc137ce7bb49ed0b9100dc79c3914fdb2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:38:30:3e:91:54:7f:50:93:25:c6:5f:0a:
0c:8a:d1:54:06:88:a3:49:49:ed:55:56:e6:2e:2f:
02:c5:85:c2:d7:20:36:ca:08:ff:e3:4f:18:d4:ae:
39:12:a4:b1:c5:59:8d:a1:a4:1c:c0:b9:df:b0:3e:
19:df:c4:5c:1b:e8:27:d4:a8:b2:fa:62:47:c0:b7:
55:0e:a3:ae:8b:9f:ee:f4:f6:1f:90:cb:f8:c0:8a:
12:3c:09:cd:99:09:65:9e:54:f4:5a:2c:20:8b:b1:
c7:ec:48:8a:96:80:a2:ba:63:3e:09:e4:9a:fb:79:
97:6f:8d:ab:ff:1f:9e:24:58:44:ef:cd:29:98:3b:
db:c3:51:dd:f0:b5:56:85:7a:96:0a:ac:71:9d:a1:
65:b3:99:b8:ee:1b:95:18:aa:02:80:c3:fd:25:53:
96:17:b1:b9:58:c3:38:a7:60:05:a0:3a:07:2b:aa:
4c:f0:00:a1:0d:65:3f:10:09:1f:4c:9b:b1:44:de:
61:43:90:e9:27:e5:1f:31:34:e2:70:fa:93:c6:1b:
82:ff:71:bb:22:4c:4c:25:cf:7b:3f:8d:6b:79:f5:
a4:af:f7:8a:36:7d:9a:5f:b6:a1:2c:ef:b2:f2:2a:
72:ab:2d:6d:3b:ea:ad:72:74:b4:07:56:e8:74:bd:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:ED:22:54:98:81:38:2B:5D:5B:7D:AC:E0:7F:22:32:16:37:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b7:b7:ac:cb:a5:33:9d:44:1e:86:7b:f4:47:f9:51:3f:eb:1c:
af:39:06:ef:6d:ec:01:d4:0d:7f:f2:b7:af:27:25:fa:6f:d7:
5a:1e:c2:bc:93:44:e8:28:74:cc:3c:e7:6f:f0:c6:da:f8:d0:
fe:53:78:3a:d3:1f:e0:fb:d5:20:dd:96:5a:e4:f7:3b:62:06:
ed:c9:85:c7:fc:bd:04:67:83:cc:d5:f2:68:da:6a:d9:02:ce:
f8:0c:c1:68:bb:67:53:cf:fe:7e:3b:75:05:19:11:c0:0c:71:
03:b5:78:a5:c2:de:0e:00:fe:4b:f6:b1:8f:ed:31:1f:06:42:
cd:06:24:51:4e:e8:a1:c6:ff:82:43:1c:c1:7f:ac:ac:41:ae:
6b:73:dc:98:ba:59:9c:bf:34:ad:c8:64:48:67:7d:e6:97:5e:
9a:1d:d7:10:2e:02:c0:6e:de:4a:62:61:10:55:f7:27:30:4f:
d3:0f:c1:51:62:2d:50:20:63:4c:2c:9d:39:5c:3c:6c:72:79:
79:cb:b7:11:e6:ff:61:b1:fb:1b:73:f8:70:42:e0:0e:d5:71:
8a:5b:c3:79:b9:9f:4c:5c:36:53:4b:74:02:b7:19:88:92:ef:
d3:66:9c:00:90:a1:23:ed:40:5a:7e:1b:3b:b4:ae:8d:03:7e:
8e:c0:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:14:33 2026 by rpki-client