Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e00516db-a674-4a02-8de9-e0ad569ecc6f.roa
File: e00516db-a674-4a02-8de9-e0ad569ecc6f.roa (raw, json)
Hash identifier: pfqCZmPm2FlvE0+xBn+q1NVUi2+YPXo2w3RKs5GYLHQ=
Subject key identifier: BE:9D:EA:A1:7B:7F:71:82:D7:CA:26:52:A0:5E:4F:78:C7:E9:D6:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 105ADE43188E6EEA21D2622699629A4A08871D3E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e00516db-a674-4a02-8de9-e0ad569ecc6f.roa
Signing time: Thu 30 Jul 2026 01:40:32 +0000
ROA not before: Thu 30 Jul 2026 01:40:32 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5a:de:43:18:8e:6e:ea:21:d2:62:26:99:62:9a:4a:08:87:1d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:32 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=74e4c0a7a563c5bdba79e5fffc39b7aab32bb412df60a64c44d1f5a4e7ea06fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:75:0a:bf:b6:05:ca:21:e4:1a:21:6f:1c:
df:eb:89:6c:19:62:d2:79:6e:9e:67:33:3a:ff:ee:
05:2f:7d:b9:45:4e:86:19:d0:a2:d6:2d:9a:6b:b9:
51:e5:83:ee:90:64:f4:32:ff:e6:61:b7:b6:bb:6b:
25:75:0f:2d:9a:c5:65:47:1e:d9:6e:1e:cd:c6:b3:
01:0e:58:bf:83:c5:7f:45:ff:6c:6f:b2:ca:6e:eb:
98:62:ac:ef:75:c4:f1:20:2a:e5:86:1c:8c:f0:64:
3a:3c:f4:06:ef:65:e4:a0:29:9f:7d:be:78:89:88:
f8:8a:06:34:e5:2d:0f:c2:87:2c:13:14:17:a9:cf:
6f:3a:7a:7c:b5:8b:f8:62:ac:0a:75:40:48:15:27:
7f:25:e4:4a:77:d5:84:e3:8f:0e:9a:02:01:80:db:
5d:10:10:55:1c:49:42:fb:49:86:67:3c:35:31:7f:
02:f3:c2:03:11:2b:e0:43:fa:44:34:b4:1f:8a:36:
52:da:ba:16:cb:3c:c2:5f:80:b8:0d:56:3d:d2:e4:
15:73:67:c1:2a:bc:41:95:c4:c2:14:bc:4c:5f:29:
95:3c:79:cd:ef:e9:27:a1:4c:ca:19:b5:62:01:5d:
13:a2:bb:00:37:d6:19:29:a7:a5:ba:4e:7a:8c:32:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:EA:A1:7B:7F:71:82:D7:CA:26:52:A0:5E:4F:78:C7:E9:D6:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e00516db-a674-4a02-8de9-e0ad569ecc6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:64:69:e5:ca:c1:00:d6:89:ea:df:58:fe:73:b3:f7:c3:2c:
9b:ee:a3:1b:ee:5e:d0:5f:1e:b8:62:a6:ff:e3:7e:d6:76:25:
e5:3b:c0:d8:c6:da:78:02:2f:31:27:b7:30:d9:d4:b5:11:f0:
15:f7:c5:23:b1:3e:91:e1:62:19:26:4b:99:56:8c:c7:4e:9d:
e9:a9:93:dd:19:e2:71:3b:3c:f7:5e:0c:ac:68:1c:ad:5d:2f:
ef:9e:e4:8a:00:32:cd:7d:3c:5f:e6:52:ab:f7:12:c7:56:3b:
c0:25:77:31:07:dc:3e:96:a5:27:b1:f4:6c:73:d0:3e:5d:04:
9e:a2:a4:09:a8:bd:6a:f3:5c:37:77:c7:19:fb:2e:cc:83:ed:
c7:02:ca:76:48:60:59:b4:b7:1d:4a:49:ad:4f:60:d3:82:dc:
59:fe:01:58:a1:19:3f:92:b9:3c:79:5f:c3:d8:b5:28:1c:03:
8e:81:a5:f5:7a:83:6a:e3:aa:3a:77:1e:53:7c:d3:72:b1:ad:
1f:1e:d1:1d:d0:9e:d2:41:01:32:31:22:52:94:b5:12:cd:5f:
5f:23:17:0a:af:6b:69:ea:49:96:ec:21:b4:b5:10:7d:46:36:
7d:2f:04:e7:3b:61:eb:aa:be:59:46:1c:17:a1:43:9b:f6:53:
34:c7:4d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:12:16 2026 by rpki-client