Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
File: 995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa (raw, json)
Hash identifier: 0E/it8Y8iP7KeW/YRs3OVALwhekRkf3ocQ8LjgSD6bA=
Subject key identifier: 46:12:DA:CB:04:3D:E8:F2:EB:D5:75:64:99:88:2A:88:08:06:EC:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F3801BD6AC7AA28F474BCA005B06C1CEF8DAEBA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
Signing time: Fri 20 Feb 2026 01:50:06 +0000
ROA not before: Fri 20 Feb 2026 01:50:06 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:38:01:bd:6a:c7:aa:28:f4:74:bc:a0:05:b0:6c:1c:ef:8d:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 20 01:50:06 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=a346de8224db0a5c4712c3c37925da46fa2a8bcecb5dbf5148a7d9a4aa82e9e2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:bb:01:70:83:38:e0:84:86:38:96:8d:c7:
76:39:96:59:2e:8a:d3:4a:86:9e:64:fe:2d:7f:fe:
d4:83:58:d7:c9:f2:28:82:23:9e:43:05:15:dc:c1:
2e:c7:66:86:e3:3e:05:8c:c8:eb:7d:56:f7:ef:34:
5b:7f:7f:8b:3e:3b:75:be:41:1a:cd:80:41:b4:f7:
3b:39:20:c2:04:df:09:4d:7c:44:3e:60:ef:f8:fd:
76:3c:fb:45:b9:7c:a4:1f:cb:5a:32:b4:0d:cb:27:
9f:c7:c1:7c:8d:c1:b5:e5:e1:95:a9:2d:16:c6:8d:
e5:33:64:11:6d:64:4a:a4:df:a3:1f:73:62:e7:e2:
0f:24:f1:f1:db:5d:8c:95:05:67:0a:e2:b8:8b:b1:
28:7c:51:85:15:98:77:93:86:4b:8a:0e:bd:10:56:
84:6a:d6:eb:83:ea:01:6f:17:b7:60:40:85:19:65:
0c:ec:71:71:b3:9d:e9:42:bf:a8:9c:67:bd:5b:5c:
3c:55:4d:65:7d:2d:cd:c3:2f:62:e6:35:af:a2:df:
86:e3:4f:ba:7b:53:ae:f5:cf:24:9e:c9:b4:90:3f:
07:90:fc:0f:2f:d4:ad:bd:bc:2b:3b:b8:85:e9:a1:
9f:55:3c:a8:57:fd:78:ea:e7:59:49:6e:fa:5b:32:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:DA:CB:04:3D:E8:F2:EB:D5:75:64:99:88:2A:88:08:06:EC:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:78:81:f4:03:c2:cc:a9:09:e0:ee:a5:e0:1b:08:55:4a:55:
f6:6d:91:07:fb:dc:95:9f:37:31:75:b3:78:84:2d:30:8a:03:
e8:52:b9:da:02:ee:f2:9d:c8:4a:ed:ee:b6:bf:05:72:fd:6c:
e7:6e:89:f5:6a:73:b0:33:ab:a6:25:b5:6d:4d:a1:65:2e:a2:
f5:c6:a5:03:ef:df:0c:d5:29:23:ab:3c:3c:a1:09:10:85:0e:
45:af:f0:26:03:8c:81:d3:ee:c8:cb:25:81:a4:17:4b:62:29:
a9:26:89:05:27:a9:16:34:ba:b7:51:61:6a:0c:40:71:d4:31:
db:73:16:d5:fd:58:14:75:cc:07:68:53:b4:6a:9c:33:82:c4:
98:18:7f:95:23:15:12:8b:d3:2d:77:2e:ac:ae:5e:55:7c:af:
c9:24:f2:75:17:18:f9:a5:9f:a9:8b:82:f6:02:f7:07:73:19:
88:1f:e9:76:c9:9f:db:b2:2f:12:f8:e7:e7:fc:b5:d5:6b:c3:
25:b5:c3:9c:2e:56:e5:ea:66:ad:87:18:ff:b4:19:05:7f:6f:
02:2f:3f:24:84:1d:25:14:fd:3b:bb:6c:0c:8e:95:10:db:46:
52:01:45:48:09:4c:f1:00:65:65:34:a7:4e:42:dc:7e:44:7e:
83:b4:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:44 2026 by rpki-client