Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
File: 4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa (raw, json)
Hash identifier: fsEuItOPQdjwP8fcCTGnLfkJskLL32ZKvFBlCTfKKrg=
Subject key identifier: 7E:72:BB:19:0C:C1:4B:D4:6E:23:15:88:AD:79:B1:49:F0:48:61:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56AF90DC8CA838806746A8B513E16E5F8C102757
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
Signing time: Mon 11 May 2026 01:40:12 +0000
ROA not before: Mon 11 May 2026 01:40:12 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:af:90:dc:8c:a8:38:80:67:46:a8:b5:13:e1:6e:5f:8c:10:27:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 11 01:40:12 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=1783ad475476507f57cb36d67ad8f495029fc7fbac4dfe8dfee609cd1473fe98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:15:09:97:01:7b:74:40:c2:a3:6a:cb:fa:
56:45:f6:6d:68:fd:f4:01:14:f0:ae:66:04:a3:20:
cd:1b:15:82:8e:0e:8c:43:dd:eb:f4:c1:10:e1:e5:
b0:77:33:2d:58:a4:73:9a:ab:43:a2:a3:a7:36:f5:
f1:33:41:13:64:f5:51:00:6c:96:65:27:6d:0a:78:
eb:54:1b:23:e1:08:59:ef:d1:d7:5e:67:91:23:58:
1a:d2:cf:7d:09:b9:70:c9:61:06:39:59:21:67:35:
f0:ad:47:50:13:23:d9:96:02:e9:86:f1:4f:07:4f:
35:57:74:5d:a0:aa:ef:9c:a5:bf:7f:1d:9c:29:51:
36:c0:fa:cc:b3:b2:bb:28:a6:79:68:01:47:86:f5:
1b:6e:1e:ef:72:ab:2d:6f:3d:a8:5f:09:ba:b4:04:
47:c6:b2:0a:9e:bf:6b:5f:9d:ce:ca:68:db:ed:3f:
c9:4c:b0:b5:a9:4b:e7:cf:91:c6:4f:5f:2d:dc:cd:
ba:01:84:73:60:60:ca:72:ba:db:fb:36:29:a4:29:
98:05:d4:89:63:0d:9e:50:dd:d9:ad:de:e3:7c:50:
1a:cf:6c:c1:25:2e:ad:ff:12:d2:cb:68:4d:ea:43:
2a:e4:dc:96:89:b3:89:e7:e5:17:8e:0e:d6:ac:bd:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:BB:19:0C:C1:4B:D4:6E:23:15:88:AD:79:B1:49:F0:48:61:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
95:ff:8e:3d:77:73:08:c4:0a:57:1a:d4:a2:b6:8e:43:c5:55:
ad:d7:a6:cd:97:f3:f2:05:08:2a:1e:74:69:58:dd:26:00:89:
0a:01:1f:a7:fa:ab:0f:33:53:2c:48:02:18:68:15:1f:79:d1:
fc:4b:4e:0b:02:61:4a:ef:72:a3:50:bb:69:bb:31:35:ac:41:
6b:52:6e:4f:1c:44:27:66:4b:c4:b3:72:f7:2c:93:86:ba:1f:
ae:80:f3:e5:5e:d3:6c:2f:8a:35:60:1c:75:07:ee:5f:81:e4:
4d:32:d0:14:09:80:4c:09:af:f1:85:c7:c1:2f:a6:23:18:2e:
83:3a:89:71:b6:7e:05:8d:a1:c8:07:2d:42:6e:16:39:10:bc:
d7:a9:bb:ff:f4:27:17:db:cc:01:cd:7b:72:d6:2a:63:d5:8f:
fe:60:d4:1c:6e:7d:3c:85:d1:2f:7c:15:b7:7e:e8:ee:d1:18:
70:2f:98:27:c2:a2:16:2b:4e:11:43:b8:fa:08:bd:1f:7d:70:
47:5c:04:eb:d7:2b:c0:c0:b5:14:07:7c:d9:6a:14:a5:ce:bc:
ef:6f:1e:79:88:ac:ec:28:bc:f9:83:39:b8:a8:0a:59:c3:64:
e7:50:8b:89:61:3a:d3:e2:81:18:a1:9e:cb:0f:d4:a1:3c:dd:
6d:e3:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:35:51 2026 by rpki-client