Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
File: ca3047ed-6074-479d-9d85-26334085e41c.roa (raw, json)
Hash identifier: 4mtRc/J79nLrL1CBda6RxMV6unijkKPjl2pPh7hSGG4=
Subject key identifier: 98:84:84:3A:45:E6:C3:03:67:D2:A6:CD:D3:BD:28:1E:98:1E:93:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50C25084591D28DFED974CE926196899534BD12B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
Signing time: Wed 21 Oct 2026 01:40:08 +0000
ROA not before: Wed 21 Oct 2026 01:40:08 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c2:50:84:59:1d:28:df:ed:97:4c:e9:26:19:68:99:53:4b:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 01:40:08 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=a416d44ae0d7b87a1311d204779f133979597fbb3b2a72b823e05e5beb35f9be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:f3:d8:fa:16:e5:57:cd:55:a4:6d:c2:bb:
b1:ad:de:c4:40:22:1b:69:fa:5d:c6:cb:1b:b6:28:
f2:50:88:26:22:db:08:6b:64:91:de:f1:68:4e:78:
73:8e:63:38:c4:87:49:71:4c:42:22:5c:3b:23:00:
fc:1e:f2:6b:34:c7:2a:4e:dd:c3:9a:a9:88:6e:77:
9e:09:8b:d5:a7:8a:b9:6f:6f:fe:17:7b:a1:fb:ac:
18:47:e5:f8:0f:46:a4:51:5d:11:8f:c9:7d:e1:da:
77:82:f0:93:22:17:37:22:cd:e4:4c:58:84:c2:24:
c8:e7:b5:79:b1:ae:28:d8:94:7f:b9:14:02:1f:85:
08:67:ec:62:f8:18:ad:5e:95:6a:ac:75:5b:0a:8d:
1c:d7:a8:55:ec:4c:ad:c4:38:78:51:9e:ac:8f:a9:
bc:8b:7b:72:a1:52:56:87:df:f9:53:30:21:88:02:
1d:fc:02:69:85:24:60:34:11:bd:09:20:74:79:e6:
eb:db:ec:9e:51:aa:52:d9:0c:af:47:18:8e:d6:99:
e6:01:4d:b3:92:88:88:da:83:dc:3c:c1:b6:bf:4c:
8b:aa:b4:72:6b:ed:49:dd:48:0e:15:e3:58:56:39:
1a:1c:4c:64:b3:85:a9:a3:31:24:4e:e2:be:ac:a6:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:84:3A:45:E6:C3:03:67:D2:A6:CD:D3:BD:28:1E:98:1E:93:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:13:65:44:52:dd:c5:b3:a7:2c:53:c5:dc:bc:3e:92:97:d2:
b8:af:a7:5c:3e:4b:a5:76:7d:e4:88:92:e8:35:40:0c:d5:4d:
87:e5:f5:0f:60:c0:14:a1:8a:d9:a6:e2:1b:3b:b0:d3:e5:ea:
59:de:10:c1:54:1f:ca:05:08:2c:66:54:95:19:0c:1d:1d:92:
13:be:14:2a:ac:dd:ae:41:7d:e4:f0:e1:26:7e:87:60:a3:26:
2d:5e:7b:fc:4a:94:ad:c5:2d:39:b5:a7:8f:74:12:a7:02:20:
e8:59:2c:43:2a:ad:b1:07:3d:b7:f6:d1:f5:d1:df:40:4d:ff:
e2:72:d3:76:3f:95:70:7d:5f:d7:df:cf:4c:5f:1e:2d:96:a6:
9f:ef:7b:b7:3c:7f:f2:cd:44:5e:da:1b:d5:bb:41:9f:82:6f:
6c:df:a5:c0:00:1e:73:21:68:11:32:e5:9f:d6:a8:46:93:56:
7e:1a:cb:92:a9:be:f7:b2:9b:88:2f:d0:75:ad:53:a4:11:7a:
f7:9d:a8:29:73:8d:54:4c:36:a7:24:7f:73:03:0a:2c:3c:35:
a0:8c:7a:92:d8:17:66:cc:a6:2e:e1:16:40:08:46:54:48:ed:
28:f6:94:df:c5:c5:7a:da:ca:f7:26:db:10:89:86:39:b1:00:
4e:72:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:27:10 2026 by rpki-client