Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
File: 049fd671-de95-4496-9712-c56affcb2b27.roa (raw, json)
Hash identifier: gBM69ejpstXkCliz1l5hYEuFVt6IKcJ6pPm4IR9IF/E=
Subject key identifier: 57:48:EC:34:7F:83:D4:89:9F:6B:42:C6:4B:3E:7E:07:2E:22:42:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 215C0722F9420624C382A22B6E6F9BA43B7468C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
Signing time: Thu 30 Jul 2026 01:40:50 +0000
ROA not before: Thu 30 Jul 2026 01:40:50 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5c:07:22:f9:42:06:24:c3:82:a2:2b:6e:6f:9b:a4:3b:74:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:50 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=241f93e14503b67b43fb6916de5db5fd38d58628627853d8475b4443a7954a2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:80:9b:33:75:88:4e:34:28:95:2a:7c:37:
4e:86:32:f6:70:f3:77:3f:b7:69:2b:b9:4d:2a:32:
e3:78:e2:32:c1:eb:8c:bb:b8:c7:79:9a:e8:0d:4e:
5c:d3:71:c9:1f:26:f1:62:f8:f3:6f:85:06:c2:91:
24:b1:8d:38:d9:20:51:26:92:fc:6c:de:e6:c7:e7:
c1:78:85:27:04:b3:2f:15:79:31:91:36:e7:e4:14:
08:3b:ee:53:bb:53:92:3c:25:69:e2:9a:f7:e0:58:
89:33:8a:46:4a:ce:7e:58:62:55:29:c5:03:eb:63:
cf:8c:9b:47:9f:18:2e:af:47:e5:50:51:83:e8:f3:
dc:c8:3c:32:a0:30:10:a0:c6:a5:46:6b:15:28:27:
5f:38:aa:1c:00:ff:8d:ec:41:5c:f4:c0:1c:05:db:
63:35:02:ce:97:ea:9b:aa:da:a5:da:db:06:c5:5d:
51:b5:a7:4d:4a:c0:33:8b:7b:2e:f2:0c:bd:41:2b:
0c:a2:5f:db:3c:28:e7:b1:8f:91:f2:ce:60:99:02:
64:67:a3:d1:17:8f:f7:a5:4d:c0:16:76:9d:63:22:
c8:4f:04:e5:c4:a7:8e:42:af:d3:4e:34:6c:4c:73:
2b:ad:4c:3f:60:a9:25:c9:da:2e:6b:e7:68:a7:8e:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:48:EC:34:7F:83:D4:89:9F:6B:42:C6:4B:3E:7E:07:2E:22:42:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.24.0/21
Signature Algorithm: sha256WithRSAEncryption
86:d5:53:40:d8:4e:26:ea:ed:9c:3a:37:ed:7f:8c:35:59:1c:
2d:e7:17:94:77:57:8e:48:36:41:7f:7d:43:da:22:cc:e7:1b:
00:cb:d1:62:26:ce:c2:8a:62:fa:f5:84:a8:56:57:ec:3e:2d:
89:33:d3:e6:72:88:8f:17:f0:23:4e:25:36:b8:74:fb:0d:06:
35:7f:b2:fc:9d:f1:4b:d4:eb:22:7e:21:9f:17:59:09:28:ce:
38:bb:ca:5c:a8:0f:ea:78:21:5f:59:b3:b7:9e:da:15:42:43:
b9:8e:67:40:50:71:f5:6f:1f:6f:f4:ab:09:13:7c:48:90:d9:
68:82:95:86:ee:97:a3:0d:6b:fe:ff:51:7f:35:32:7f:1e:75:
a0:7b:56:09:8b:9c:25:55:60:df:a7:bf:59:fa:65:25:e0:f1:
95:9f:f6:da:71:a9:03:4d:d9:03:ca:f9:25:54:21:d0:d9:69:
8b:10:3d:8b:d0:93:d7:12:22:85:d7:ee:eb:f8:45:17:cf:b8:
e1:86:1a:2b:6c:a4:8f:26:fc:21:f8:fb:80:3b:89:65:2d:17:
5f:c0:c3:39:46:6a:6b:97:6b:fe:fc:c0:12:74:c4:7a:fd:28:
86:ec:e9:e1:d5:70:3c:31:58:34:be:13:04:90:6e:14:69:67:
46:08:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:18:17 2026 by rpki-client