Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa
File: eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa (raw, json)
Hash identifier: oMHcqGzL5R/ayetQ2OI7yly3J68aCZPMCO8lDQMAT6c=
Subject key identifier: 2C:62:28:43:D9:4C:94:E0:E7:10:3F:83:3A:A5:82:BB:38:A8:8F:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A7377B1C7AD1877498736340465783EAB49C659
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa
Signing time: Sun 18 Oct 2026 01:30:21 +0000
ROA not before: Sun 18 Oct 2026 01:30:21 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:73:77:b1:c7:ad:18:77:49:87:36:34:04:65:78:3e:ab:49:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:21 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=1901f8691fdcdfb6f18a1b93bb2ea010a82ecad94c8f7d782cbef158c243fc82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:29:74:cd:f3:d7:27:0d:2f:0b:ba:4d:b9:
2e:5c:76:65:52:4e:b6:11:3e:2a:f5:d0:61:6d:ec:
19:63:a6:d9:4b:02:97:11:64:bd:da:4d:93:2f:55:
c6:15:e1:75:0f:5c:59:1f:76:72:be:01:95:33:3b:
56:cd:5b:fe:04:7c:c7:e4:0d:c7:37:10:2b:5e:87:
1e:bb:31:8e:67:e8:c1:6c:fd:95:e5:ac:6e:94:76:
1d:98:fd:6f:30:89:44:48:97:d9:c0:90:3b:38:1e:
16:a1:af:51:1b:ea:53:28:83:04:f2:44:c9:f1:cf:
00:23:b1:52:e3:0e:29:1c:a5:90:18:ca:e0:0e:33:
8d:e8:26:f8:76:05:cc:fd:20:01:eb:54:5f:08:28:
34:d4:f9:bb:7b:a1:38:05:80:01:bb:90:15:53:6e:
1e:85:79:dd:4d:6a:d4:43:98:ec:70:ac:a3:e2:56:
32:95:42:a6:d3:a2:f8:60:13:10:64:c8:6e:1f:5c:
f6:69:26:d0:c6:43:a7:17:af:a5:c3:cf:e7:eb:c1:
7a:e5:b5:2c:b6:b3:7b:94:e7:63:a3:08:d9:56:4b:
00:e7:d4:b6:dc:0c:7f:39:99:ba:49:fb:3e:31:7a:
6c:2b:e5:60:ae:4d:ff:c1:4f:f2:a6:85:cb:3c:cc:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:28:43:D9:4C:94:E0:E7:10:3F:83:3A:A5:82:BB:38:A8:8F:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eab8ba62-5934-4c9b-9bd9-10fdd2494662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/19
Signature Algorithm: sha256WithRSAEncryption
20:8b:91:8c:10:da:29:15:4b:15:70:89:9f:43:15:44:64:cb:
a7:41:d9:28:16:19:d9:56:18:6d:4f:e5:ef:ba:a9:4a:97:d3:
e3:23:68:e5:0c:ee:ce:cb:3e:1c:5a:80:86:08:71:b7:80:55:
71:81:08:f6:8f:c5:24:97:cf:86:b7:04:ca:9b:eb:d7:bd:2a:
bf:40:9a:02:b1:27:6b:fc:8f:f1:3d:42:9b:16:ed:88:59:c3:
aa:d0:ab:c3:e3:07:cd:9c:dc:73:f6:de:ae:44:a8:78:ab:88:
d6:15:7a:8b:71:09:e6:58:b2:3e:f0:5f:7b:7d:bf:cd:d9:d8:
e0:52:6f:2c:3f:5f:9f:b3:f9:0e:3b:db:ef:0a:fb:39:a7:32:
53:6b:6e:76:a6:84:07:a8:1a:03:b1:8a:f4:de:63:04:09:e6:
e3:68:b2:22:04:6c:a3:7f:e1:81:33:09:ec:b3:0b:29:05:92:
54:e4:07:fa:04:7f:0e:58:99:92:c3:4a:a1:4c:cf:1f:8c:4d:
1c:c7:d4:e4:5b:03:71:d0:80:f9:1f:a7:f7:4b:ae:eb:ec:c5:
7f:8d:21:3d:32:06:fa:28:c9:f3:1b:35:57:c7:3a:a6:61:cf:
8c:81:e6:72:bf:7a:c9:32:a2:bf:80:ee:25:5f:d3:3d:5f:75:
9c:89:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:58 2026 by rpki-client