Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
File: b2048b1c-363b-4b59-9d56-dc72187194a3.roa (raw, json)
Hash identifier: OJy5A3Klh/e1xhozylh7hgK54hOlHN8LyJRAF/iaEno=
Subject key identifier: CE:68:E1:FF:2E:45:30:F6:19:8F:E6:90:C1:37:A4:B3:ED:3A:73:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0709A4F38A0BAC556B9615472964807C5E1ECD7B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
Signing time: Thu 30 Jul 2026 01:40:59 +0000
ROA not before: Thu 30 Jul 2026 01:40:59 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:09:a4:f3:8a:0b:ac:55:6b:96:15:47:29:64:80:7c:5e:1e:cd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:59 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=21c196a0d44079b4198bfd7cb1b210d4bdc08e02dd08f755fa4cb03c439b310c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:45:52:a0:95:33:f8:8a:07:91:f5:b8:2d:
1c:c3:93:0e:d6:08:97:53:25:bf:46:48:d0:1c:0f:
6b:87:6d:a1:be:73:e5:1d:58:ee:c4:cc:79:5e:6b:
10:32:a8:37:dd:0c:f9:34:ab:a4:6c:3a:fd:d7:8a:
2e:6e:05:e4:e1:d6:a0:81:8e:de:41:5e:ec:36:5a:
53:d8:6e:a1:b7:67:06:a9:ff:b1:73:70:17:f2:9e:
e8:5f:a4:80:c2:1f:3c:88:eb:e4:d8:ad:ba:34:51:
41:71:98:da:97:bf:cf:aa:96:9f:a9:c8:48:17:f2:
fc:8e:c6:de:ad:d4:fd:3d:48:91:c4:dd:2b:2e:43:
9e:d2:50:e7:b1:c0:a9:52:e4:cf:94:1f:7c:cb:93:
d0:4b:3a:69:c0:3e:04:04:29:b7:96:5d:9e:37:3a:
f9:54:34:b9:2b:68:5d:87:91:d9:45:7d:26:1e:5f:
6a:e2:05:00:9c:17:d7:3d:5b:df:46:d8:23:39:9c:
ec:01:2f:90:fe:b4:ba:75:28:64:8a:f9:cb:93:ea:
d9:90:53:84:45:fa:f7:ab:d4:bc:cd:18:69:22:f2:
fb:7b:45:10:eb:63:e2:b7:6e:09:c1:a2:2d:5b:9e:
78:a5:9d:d1:aa:6f:b3:24:35:ad:9d:99:37:f5:0c:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:E1:FF:2E:45:30:F6:19:8F:E6:90:C1:37:A4:B3:ED:3A:73:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:dd:86:9b:3a:69:86:bd:52:0b:6e:25:4e:f1:13:a3:12:cc:
53:4b:bf:fd:8b:e7:dc:2e:1b:3d:d4:ae:61:58:af:34:4b:85:
45:78:19:6c:22:3d:83:d4:3e:73:82:3d:59:de:d1:5d:88:c5:
84:20:a3:74:b9:b6:d2:6d:5b:db:b3:e1:80:26:64:05:aa:cc:
d6:b5:81:52:d6:de:63:2b:bc:9b:e5:e4:75:e4:5c:07:87:a8:
bc:00:a1:f7:95:2f:43:6d:ad:1d:b0:c5:5b:e5:47:7e:e4:08:
4c:9c:20:09:e1:61:3e:cd:01:fa:2f:f6:2d:20:3f:be:22:b9:
56:f7:8d:a5:9c:6a:f9:a4:66:07:b2:f0:90:53:55:d4:6a:98:
f6:25:fa:e4:a8:62:40:77:8b:c7:86:49:3d:56:08:96:dd:28:
dd:52:af:da:de:57:bb:47:c8:88:ad:80:a0:08:f6:0b:bd:46:
a0:36:25:1d:f6:6e:c8:17:8b:cd:4a:58:a5:6e:d0:3c:64:24:
ab:76:47:b8:97:8f:14:e6:81:a0:5e:2c:ff:3a:62:d2:28:c1:
dd:fc:73:5a:02:37:e9:86:a3:0f:54:31:cd:fe:d4:64:46:5b:
34:13:20:51:49:7f:c0:5f:b7:fb:ce:a2:05:c7:62:9d:5d:60:
1c:06:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:18:26 2026 by rpki-client