Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
File: 04593af5-4653-4d6a-8bb5-65270db84a4f.roa (raw, json)
Hash identifier: xxi8rjndVT6FjRFpTmr/N7dHn7jCzM/W6mOgRU9Ydhw=
Subject key identifier: 9D:A1:AE:98:87:50:D7:0A:A9:88:7E:5F:71:79:4C:8A:87:1C:50:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22A20DE63024F51A107AFA7A287C879940C530BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
Signing time: Fri 07 Aug 2026 05:30:12 +0000
ROA not before: Fri 07 Aug 2026 05:30:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02d::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a2:0d:e6:30:24:f5:1a:10:7a:fa:7a:28:7c:87:99:40:c5:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=cda732a5ac0e88454676141371dacd1ef843c7034a4684a03cbd347ca9445adf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:81:de:20:75:e0:88:0d:e8:70:4d:72:e0:f4:
0b:25:4c:2d:46:d9:22:f4:e0:26:6a:64:fe:1f:3d:
19:33:61:c4:db:7d:72:f2:90:e5:60:4f:fd:fc:2e:
15:41:70:80:27:3c:0d:12:fb:6c:b9:7e:0c:3f:d8:
07:cd:39:e5:ec:90:c6:90:64:c5:87:27:d3:eb:15:
d8:42:f9:df:04:45:c3:31:f3:f9:14:42:cf:01:95:
24:e2:3f:2e:b5:e1:ba:5d:98:bc:a1:be:c9:3b:56:
0a:25:d2:cc:30:52:cd:9c:fb:ed:0d:92:48:8f:d8:
05:11:14:52:b4:69:fd:8a:02:24:94:4a:83:bf:e9:
9f:e8:b1:68:bd:bc:9d:c4:bc:ba:ef:c6:e3:d0:a7:
0c:7f:ae:06:f8:4a:45:6c:17:50:78:8c:76:27:80:
07:48:e3:b6:75:bc:1a:30:a3:07:07:ac:cb:76:52:
f5:02:66:fd:ba:87:30:f6:65:80:5c:b7:ff:9b:4b:
07:0e:b2:9a:89:82:23:26:8b:e1:68:bd:80:a0:5a:
fe:41:78:9f:92:1b:4c:1c:61:89:11:a6:fb:32:4b:
a2:ae:b1:3f:39:48:36:1c:85:fa:ea:76:fa:6a:28:
c6:35:8b:b5:0f:82:e3:ad:ce:dc:19:60:a5:20:30:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:AE:98:87:50:D7:0A:A9:88:7E:5F:71:79:4C:8A:87:1C:50:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02d::/36
Signature Algorithm: sha256WithRSAEncryption
66:bf:4d:06:90:dd:62:09:44:04:93:28:77:d6:15:e9:ed:71:
55:56:ea:b3:4a:5f:0f:f5:7e:ba:3d:e2:b3:88:b5:58:57:2c:
a3:4b:57:25:c1:9a:d0:15:47:97:31:c1:4f:07:56:29:bb:87:
37:35:ef:38:e4:fd:ec:1a:21:16:ad:ef:bd:a6:1c:88:c6:0c:
5a:ab:4e:17:d2:68:6b:80:0e:34:48:42:2e:92:ac:87:9b:f6:
b8:dd:bb:8c:ab:cd:91:dc:34:c8:f4:0f:1e:4c:c4:b2:31:0f:
72:01:df:7e:d5:0b:9a:93:0a:ff:cb:15:29:81:3d:0c:c1:9e:
2f:2a:e0:14:33:8c:7c:bc:44:bc:e5:56:bc:78:ef:4f:0a:3e:
e9:a1:3e:72:be:f5:3c:36:48:c2:cd:2e:cc:d6:42:53:2e:c9:
24:c3:c1:e5:9b:1d:7f:63:0d:fd:af:bd:b3:37:ec:5b:aa:60:
19:03:8d:c5:ec:10:c1:b8:ac:f4:53:0a:c9:14:73:7d:b6:0e:
97:9e:3c:5a:f1:a6:da:99:4c:db:90:4d:75:a7:25:09:48:56:
30:39:b4:ba:c3:b2:31:0f:c9:78:7d:ee:3f:81:87:d1:a8:37:
47:24:32:19:41:89:12:22:86:41:b3:3a:4b:a8:11:53:a8:68:
6f:4f:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:48 2026 by rpki-client