Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
File: 0141b806-c012-49b3-a8da-73590b0cd2b5.roa (raw, json)
Hash identifier: SW4uqLE87jPgvYsa9DWmLRb933OB70YkA389QpgGCIM=
Subject key identifier: AE:09:2F:FC:BF:45:8B:AB:54:D2:67:6C:C1:2C:5C:03:69:A0:BE:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E56221FCFE0968CBEB26A9936C8E885EB3C4C6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
Signing time: Fri 07 Aug 2026 05:10:23 +0000
ROA not before: Fri 07 Aug 2026 05:10:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:56:22:1f:cf:e0:96:8c:be:b2:6a:99:36:c8:e8:85:eb:3c:4c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4d646cae104df47dfcb9874f7a913d240b5a36f609c2c978b057b81f8d819c1b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:ce:62:af:47:99:53:1f:9c:50:25:ba:3d:
6f:98:d7:6a:0a:03:3a:dc:c2:20:44:4d:cc:70:4c:
9b:05:05:2e:c4:7b:a7:30:fd:d3:59:ac:88:10:81:
fc:7c:3e:0a:3b:c9:53:f3:c0:3b:ec:4e:3b:87:14:
f8:11:93:5a:6a:2f:07:43:42:0a:e2:d2:d5:c1:5e:
58:d7:d2:3e:d0:67:a9:ff:70:af:a1:a8:fc:23:c4:
4b:95:c5:3c:13:d0:54:99:2d:0b:b2:a6:12:f3:ea:
96:49:2f:e9:24:60:5f:e4:0c:6d:dc:54:f2:09:60:
39:6b:3e:8d:da:8a:a2:4e:e6:5f:b7:87:73:6c:69:
86:ac:5c:f5:22:55:6c:fd:f1:41:19:ce:77:a6:e5:
ae:04:c1:77:1e:7d:54:c7:df:cb:ae:18:f9:b0:81:
2c:3d:62:b3:cd:20:01:1f:88:d2:0e:a3:20:31:4a:
f6:a5:90:38:41:7b:1a:df:70:f8:1d:43:ac:9c:9a:
66:80:6b:6a:cd:6a:74:e2:18:16:8b:df:a3:8a:24:
8a:8f:71:07:25:37:9d:15:0a:b6:ea:9f:df:59:3b:
26:62:fd:b1:55:05:81:00:05:11:af:07:d2:fd:70:
f6:3f:ac:59:31:0f:99:e8:8a:99:15:90:ac:e4:d8:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:2F:FC:BF:45:8B:AB:54:D2:67:6C:C1:2C:5C:03:69:A0:BE:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:37:64:99:0c:be:2b:15:cf:14:ac:e3:96:a7:03:95:1d:ae:
99:7a:2f:a2:0f:bf:22:2c:6b:8e:79:17:96:fe:4b:da:6c:01:
fe:15:41:03:f7:29:c6:3c:8f:3a:ff:40:e2:7e:f4:31:ba:3d:
97:e8:df:ef:86:fc:96:ba:8a:91:9f:59:66:ef:93:23:78:4c:
4d:fe:c2:f3:d8:5c:11:ff:95:4b:9c:0e:8a:fd:46:ce:48:f0:
b4:db:18:b3:a4:fb:90:72:3b:ba:12:8a:2c:20:bc:26:5d:54:
42:61:8f:96:d4:9f:09:f1:9e:12:c4:2f:e9:b0:bf:f4:61:3c:
8e:2a:73:3a:f9:38:5e:94:b1:a6:bf:5f:92:16:62:59:22:75:
3e:17:6d:f0:4b:cb:f3:9b:9d:e6:6f:77:53:6b:44:e7:93:d2:
76:63:4a:e9:d2:f0:8d:a6:33:9e:3a:4d:82:71:74:e6:76:3a:
e4:c3:b5:d9:54:50:49:0a:37:92:ab:a7:38:dd:84:4b:5f:a4:
bf:8f:ba:76:58:93:f0:51:28:2c:e1:d6:5e:2a:48:eb:5f:c3:
51:d6:20:08:04:c7:e9:41:33:4b:ac:b1:d5:67:31:3d:dd:8e:
a2:be:34:d9:fc:67:33:0c:f1:35:58:ac:7e:4c:97:5f:16:33:
3a:8f:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:09 2026 by rpki-client