Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
File: 4b12830e-a860-4a14-b52f-5284626c1a96.roa (raw, json)
Hash identifier: N3u9Z2TM0FGEpq3tc7NY5GMUOq0ZBaAX7zC74kVQxkY=
Subject key identifier: 48:8D:06:20:FB:B6:EF:54:5D:26:1A:F8:9B:09:3E:B4:B7:3C:27:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71B38E4E982DB9E08CEA5A455AB4C285EC257DFB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
Signing time: Mon 11 May 2026 01:51:09 +0000
ROA not before: Mon 11 May 2026 01:51:09 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b3:8e:4e:98:2d:b9:e0:8c:ea:5a:45:5a:b4:c2:85:ec:25:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:51:09 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=e6d6381c856efaff22b7c2cc7eb7eda843d3912b2e9aef6d26c17a404effb716, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:c1:9e:3b:fa:c9:49:32:e3:2f:48:ba:54:
15:2a:a4:d2:14:8c:d6:6f:05:37:b3:6a:e3:1c:e0:
b8:d5:cf:f7:8b:d3:42:41:fc:ac:2f:26:72:e0:b4:
6e:e6:e4:8b:a1:67:f7:6b:8f:84:d5:dd:f3:43:13:
05:7b:60:b6:d5:a7:21:c1:f1:34:61:bd:1a:1f:19:
38:4f:33:a0:78:2c:ff:1c:fb:34:31:2b:d8:40:60:
99:c7:a2:68:60:6a:a0:73:0d:08:b4:53:4c:8a:21:
7b:3b:11:1c:87:2c:7f:34:81:ad:35:2f:2a:b2:5a:
f6:72:1b:b2:15:a3:12:d1:05:cd:a6:73:9d:39:96:
53:fa:d9:85:73:4d:1a:13:0f:7e:4d:6c:ac:bc:9a:
b2:3f:7b:6d:a2:5e:d3:5d:3f:7a:75:fe:a3:a5:e7:
53:0e:e5:28:21:e4:ef:0c:47:80:70:7b:c3:57:f2:
60:6d:83:1b:85:02:59:55:bf:0f:c2:45:20:0f:81:
17:93:5f:c9:c3:51:18:d4:9f:0b:8f:86:00:c3:8b:
4b:04:e7:a9:10:cb:aa:3d:3f:c1:3c:97:28:94:bb:
e1:64:2b:1b:ea:03:74:a7:da:56:4c:58:76:d6:83:
c2:6b:bf:aa:f8:ad:9d:95:10:c4:df:53:97:21:f0:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:06:20:FB:B6:EF:54:5D:26:1A:F8:9B:09:3E:B4:B7:3C:27:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:72:2e:85:8a:e0:00:8e:c8:66:eb:fa:29:e7:7b:f5:7a:81:
ca:da:a8:bb:8b:19:da:92:77:bc:c9:e7:ac:0e:12:b6:e0:2e:
03:be:4f:18:83:14:07:05:8f:fa:46:a7:c4:f5:89:af:f8:52:
5d:aa:83:86:be:98:b9:7c:94:dc:61:07:0d:95:f7:0b:40:f3:
97:6a:2a:d9:ed:05:94:0a:b2:60:47:fd:a8:8b:dd:d2:21:0d:
57:d6:34:f9:df:e2:52:f9:64:66:47:69:19:27:eb:8b:9f:b8:
3c:ad:79:9d:c3:57:e8:38:c6:c3:53:15:5f:28:25:fb:f6:46:
33:09:20:c9:17:4f:c9:a0:50:69:61:85:3f:f1:a8:af:ff:a6:
ac:67:f7:d5:eb:be:ec:fb:36:aa:5e:de:32:b7:60:02:b2:af:
3f:eb:4e:3e:46:a2:91:67:c8:df:9e:cd:01:83:d9:e1:16:4e:
e6:b8:e4:65:c7:f8:72:93:6d:cc:d0:92:1b:13:ce:41:68:5b:
7b:e8:72:9a:79:8b:6e:d8:3a:58:58:a0:e5:f0:08:b1:19:83:
fd:a1:b4:1a:7a:eb:e3:3c:4c:44:e5:be:38:19:34:6b:aa:21:
67:4c:dd:7e:bc:49:80:15:b6:91:8a:ab:20:0e:da:34:30:8b:
f7:d2:53:35
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUcbOOTpgtueCM6lpFWrTChewlffswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MTEwMTUxMDlaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGU2ZDYzODFjODU2ZWZhZmYyMmI3YzJjYzdlYjdlZGE4NDNkMzkxMmIyZTlh
ZWY2ZDI2YzE3YTQwNGVmZmI3MTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnmwZ47+slJMuMvSLpUFSqk0hSM1m8FN7Nq4xzguNXP94vTQkH8rC8mcuC0
bubki6Fn92uPhNXd80MTBXtgttWnIcHxNGG9Gh8ZOE8zoHgs/xz7NDEr2EBgmcei
aGBqoHMNCLRTTIohezsRHIcsfzSBrTUvKrJa9nIbshWjEtEFzaZznTmWU/rZhXNN
GhMPfk1srLyasj97baJe010/enX+o6XnUw7lKCHk7wxHgHB7w1fyYG2DG4UCWVW/
D8JFIA+BF5NfycNRGNSfC4+GAMOLSwTnqRDLqj0/wTyXKJS74WQrG+oDdKfaVkxY
dtaDwmu/qvitnZUQxN9TlyHwKkMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRIjQYg
+7bvVF0mGvibCT60tzwnvTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGIxMjgzMGUtYTg2MC00YTE0LWI1MmYtNTI4NDYyNmMxYTk2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALAiMA0G
CSqGSIb3DQEBCwUAA4IBAQBCci6FiuAAjshm6/op53v1eoHK2qi7ixnakne8yees
DhK24C4Dvk8YgxQHBY/6RqfE9Ymv+FJdqoOGvpi5fJTcYQcNlfcLQPOXairZ7QWU
CrJgR/2oi93SIQ1X1jT53+JS+WRmR2kZJ+uLn7g8rXmdw1foOMbDUxVfKCX79kYz
CSDJF0/JoFBpYYU/8aiv/6asZ/fV677s+zaqXt4yt2ACsq8/604+RqKRZ8jfns0B
g9nhFk7muORlx/hyk23M0JIbE85BaFt76HKaeYtu2DpYWKDl8AixGYP9obQaeuvj
PExE5b44GTRrqiFnTN1+vEmAFbaRiqsgDto0MIv30lM1
-----END CERTIFICATE-----
Generated at Wed May 13 00:10:54 2026 by rpki-client