Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
File: 995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa (raw, json)
Hash identifier: 3yZ2xPNQ8TGgfYO5l0g7qrdGy4xnVwpdvpw2nHASd5M=
Subject key identifier: D1:D8:E4:1C:28:2E:00:19:34:BA:86:98:08:68:98:5E:42:BB:7E:9E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67A14E6CA833DCE5A924FA9C82F50F2B6A829263
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
Signing time: Sun 18 Oct 2026 01:20:09 +0000
ROA not before: Sun 18 Oct 2026 01:20:09 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a1:4e:6c:a8:33:dc:e5:a9:24:fa:9c:82:f5:0f:2b:6a:82:92:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:09 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=f8e711c02a51c06844a055b0ff3c84c59474cec10b83905f4300deec96175269, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:b9:48:a1:90:32:e5:0c:1f:1c:9f:4c:b6:
e5:23:73:47:5a:96:c6:9a:c7:db:7d:e0:0a:3c:46:
f4:bb:b6:aa:83:59:ab:94:08:29:14:10:19:4a:53:
e3:fe:d9:58:c7:84:5b:67:a5:ba:65:7e:ff:99:96:
50:42:44:2b:30:3a:d0:61:bb:bd:fd:90:81:dd:1a:
0c:75:b0:16:5f:fa:03:fd:62:c3:01:47:d8:ff:af:
1c:e1:96:bf:57:4a:b3:a6:3b:61:4c:77:8e:6c:12:
7b:58:48:c9:c8:b8:f0:73:fa:24:a9:a0:1f:09:01:
9a:01:66:08:9b:f6:6e:81:19:cd:46:54:22:4d:68:
65:af:e2:05:0e:10:f0:fd:d2:a2:05:c2:68:87:1f:
a2:53:2e:a7:05:ed:89:c3:67:89:ff:b0:e5:ec:b8:
dc:85:26:59:f6:f3:54:6f:6a:47:c0:08:db:78:1f:
b8:a2:5a:0b:c7:93:a7:de:97:4e:87:be:de:88:61:
35:8f:6c:f6:ab:a7:7e:50:07:8e:dc:39:30:c0:90:
99:be:f2:79:75:fe:6e:01:a9:74:52:bc:dc:d3:09:
55:4d:5a:45:21:36:91:b8:d1:5e:a4:2b:20:84:05:
8b:ca:20:7b:ba:89:d9:f0:52:fe:9f:f4:2b:b4:7d:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D8:E4:1C:28:2E:00:19:34:BA:86:98:08:68:98:5E:42:BB:7E:9E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:b4:98:60:06:dc:a7:b5:84:33:20:76:87:13:06:e1:c5:22:
76:37:fe:b8:28:a7:48:0c:c3:73:32:87:8b:f4:45:4a:56:c0:
5a:18:90:e6:18:d9:26:af:39:b7:97:7c:29:f2:e1:6c:38:36:
25:af:09:b5:52:fd:fc:30:63:a2:6f:6d:7f:52:ae:2e:5c:38:
00:b8:58:75:f3:3f:04:43:7b:0d:1b:df:03:04:dc:1e:9e:9c:
2d:11:f8:bf:74:98:38:9d:ec:05:a6:cb:f3:05:6c:d7:d1:6d:
d8:8f:ba:b9:1b:42:b8:67:d0:4f:af:5d:c4:e5:20:bf:16:6a:
a9:dd:43:9d:5f:da:9e:e6:e9:6f:9a:42:4b:e1:e5:45:60:c1:
fc:ab:ff:de:87:e9:42:5a:58:8c:68:06:d3:eb:89:bb:e4:fd:
5f:b2:4e:66:04:ee:d9:a1:a4:53:0f:94:2e:49:cf:9c:3f:a3:
26:04:28:30:9e:46:fb:ba:f0:67:f9:59:6d:42:d2:43:b7:2f:
1d:33:f5:f0:ff:ff:cf:61:bf:31:42:2d:ef:72:89:b9:2a:91:
e0:c3:cc:05:71:a1:7d:76:4e:cb:b3:c2:3e:66:a0:f9:6e:16:
f4:33:6a:2e:1b:31:9f:ff:c8:b9:a2:4b:40:9d:cc:6b:48:56:
76:11:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:44:57 2026 by rpki-client