Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a464ff-7b9d-43f0-869d-7e7c66a7a5e4.roa
File: 04a464ff-7b9d-43f0-869d-7e7c66a7a5e4.roa (raw, json)
Hash identifier: fkax7rJPPcALZ/OuJq7kThHKs+uGCD4ZpJUkt7GS2gc=
Subject key identifier: C6:15:DF:87:A1:0C:FB:2C:5E:5F:77:88:E0:B0:E6:EF:07:32:B7:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A84D3B7F2F058C1B2F98874DB9A57B71E0450AB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a464ff-7b9d-43f0-869d-7e7c66a7a5e4.roa
Signing time: Fri 07 Aug 2026 05:10:10 +0000
ROA not before: Fri 07 Aug 2026 05:10:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:84:d3:b7:f2:f0:58:c1:b2:f9:88:74:db:9a:57:b7:1e:04:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a729a04fd007cd902ecfc98a961dded033bb1adc1bad309e3f8d6d75cad22f45, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:fb:5d:b8:3f:68:2d:62:36:fc:56:2b:29:
00:02:3f:20:e5:92:6e:8e:7c:dd:d6:52:3f:5c:0b:
20:d6:2c:22:ad:3e:08:02:eb:3b:94:68:da:27:08:
31:6b:76:b2:22:a3:bd:1c:86:69:fc:e2:6c:06:87:
ab:0a:a0:9b:99:0f:1b:41:e9:2b:b7:a7:c5:61:0e:
67:f2:aa:c0:58:bc:bd:31:fb:c3:07:96:f6:29:dc:
92:13:ba:b1:df:f9:c7:ef:63:b5:f9:bc:7f:92:06:
d2:56:e1:5b:59:0c:18:b1:3c:df:5a:f9:10:2c:4a:
c5:b4:f1:c8:9e:44:b7:30:b5:a1:c5:21:b6:24:b0:
e0:b6:39:f0:b4:bf:30:91:c9:bd:4b:95:fb:73:e3:
57:cb:04:d8:bd:b5:df:f2:6d:41:8d:84:32:8b:c0:
a6:7d:80:95:58:3b:d3:c4:46:83:d0:53:98:15:a2:
7d:7a:9d:76:2c:28:a3:b5:bb:b9:50:09:52:46:72:
fe:23:38:95:64:0b:45:fc:35:a5:06:8e:d1:7e:7b:
4a:ad:ef:1d:ed:aa:7a:e8:ce:be:b6:41:64:0d:56:
aa:cf:3a:ab:ad:b3:1e:34:24:53:71:a5:0c:18:60:
80:38:74:4e:23:50:40:5d:47:64:6d:58:04:5f:31:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:DF:87:A1:0C:FB:2C:5E:5F:77:88:E0:B0:E6:EF:07:32:B7:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a464ff-7b9d-43f0-869d-7e7c66a7a5e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8800::/38
Signature Algorithm: sha256WithRSAEncryption
aa:9d:da:ef:75:93:94:c3:5a:e5:ef:86:b0:94:a1:8e:59:55:
ad:ae:b4:6d:54:c5:77:8a:47:a3:d3:78:99:82:61:77:de:31:
bd:70:a9:c1:5a:6e:17:1a:25:35:e9:4d:df:b7:b5:43:fb:6a:
30:cc:91:89:1e:05:c4:1b:24:18:20:8d:16:9b:0a:1b:01:4c:
97:b0:55:9c:0f:8c:66:8a:8c:ed:16:ab:63:e7:75:66:23:09:
b4:12:34:11:1e:73:12:3d:77:ae:9e:d7:60:fb:fe:6e:25:87:
c6:6f:2a:e8:81:8a:59:96:b3:e9:33:50:ea:de:fb:5f:23:9c:
fe:93:c9:1d:26:f9:03:5b:1e:41:9c:eb:86:32:0a:75:f0:19:
7f:d0:16:9f:e7:9a:69:7a:78:f6:0b:d1:6c:c6:3a:dc:35:c1:
cb:10:64:5b:19:f5:f0:ca:0b:38:14:49:56:a8:9d:59:5b:d3:
07:0a:ed:60:a4:07:b8:5c:e7:de:9d:e5:b7:da:4a:25:a5:7a:
9e:90:dc:f0:5c:4e:f4:5f:3b:55:7e:6e:ef:86:ce:88:4f:df:
f1:be:23:ab:68:aa:0e:41:16:0f:b0:94:cb:89:db:c9:d3:d3:
3a:36:aa:25:1d:21:22:aa:f0:41:ae:34:8f:5d:0d:7a:47:85:
bf:f3:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:56 2026 by rpki-client