Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/066563bf-c5a6-4655-8a52-d38439ed7ebd.roa
File: 066563bf-c5a6-4655-8a52-d38439ed7ebd.roa (raw, json)
Hash identifier: 2KUnJjMlCcQk9ETl0Bx5UKj5ZRXDtUf80TObRcrIhJI=
Subject key identifier: 91:7C:12:A7:91:86:32:9E:C6:0A:53:69:D3:16:79:4A:FF:08:E0:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E2405FFF11AD436910D7A7A8943403381121B28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/066563bf-c5a6-4655-8a52-d38439ed7ebd.roa
Signing time: Wed 19 Aug 2026 01:00:55 +0000
ROA not before: Wed 19 Aug 2026 01:00:55 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:24:05:ff:f1:1a:d4:36:91:0d:7a:7a:89:43:40:33:81:12:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:55 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=de7993b74bb69ae5cdd6ecb3de6adf8ed9825d8de7f576da4880b31d3c85922d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:06:82:34:da:56:aa:7f:fb:36:a5:38:18:
26:78:c7:f2:f1:9c:ed:08:dc:da:61:be:41:7d:d8:
65:55:03:49:cb:1d:c7:75:67:35:0f:a5:be:af:f6:
4f:cb:76:36:b7:a3:5a:e3:bb:c1:57:e2:2e:74:a6:
b8:ae:b0:71:40:02:af:14:a0:5d:fb:93:82:a9:6c:
cb:40:bf:3e:f1:89:dc:6e:e2:86:52:30:12:0c:1e:
83:3b:4d:0f:27:a5:32:91:41:c4:86:c3:46:24:84:
6d:e2:c5:58:60:0f:90:b9:ca:93:31:d6:23:cc:c6:
ac:00:2c:fb:84:17:56:b0:49:bd:28:b4:fe:89:19:
7a:ee:02:8e:37:cf:10:02:df:40:d9:28:fa:6d:8d:
d9:8d:2b:9f:09:44:50:77:54:32:65:9b:3d:37:5a:
09:e9:fd:5a:4f:ba:ff:ff:8a:f2:dc:69:09:93:ba:
b1:94:a4:aa:f8:e0:e7:30:71:2f:83:30:e4:06:64:
2a:f5:b0:4d:8d:7f:a0:ce:35:4e:fb:4a:d6:ad:23:
2f:6b:11:48:54:78:3a:4d:7e:7f:a1:b9:f8:ea:51:
f3:02:68:ea:01:96:0d:b3:0e:2c:95:69:da:68:34:
c5:3e:61:d6:32:87:94:1a:a9:ee:fb:64:76:af:cf:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:12:A7:91:86:32:9E:C6:0A:53:69:D3:16:79:4A:FF:08:E0:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/066563bf-c5a6-4655-8a52-d38439ed7ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:50:2a:9e:a6:a9:23:0d:ea:7c:ed:c4:b1:3b:61:35:e3:ea:
01:1e:0b:cb:e9:4b:35:4c:9a:38:ca:d1:73:57:b2:b6:5b:c9:
14:b0:8a:59:98:e1:b2:93:4b:5f:d1:ba:c6:ed:74:4a:e6:31:
1e:8b:26:3f:80:8b:b3:a7:47:d1:bf:99:56:52:66:b7:ab:f8:
78:13:15:db:d0:5d:20:83:90:49:45:04:9f:d6:91:f5:8d:81:
07:b3:43:fd:b9:1b:a8:8e:2e:43:59:cc:24:ec:37:65:ed:a4:
5e:ac:94:ff:e6:40:96:cc:53:f2:ba:d0:5d:9b:51:f9:95:76:
9a:02:f9:28:80:0d:ae:06:31:da:a5:b2:57:ca:11:2d:25:13:
60:48:44:61:e6:46:cf:bc:8a:c0:d2:3e:0a:bd:42:a9:48:cd:
12:27:66:26:df:4a:0b:bd:03:25:79:e3:06:4c:a9:f2:7c:6f:
c0:1e:ab:24:8f:0f:61:db:2f:2f:3a:d7:4f:e0:e8:df:e1:6a:
33:b4:35:4f:b1:ea:e9:7b:cf:82:3b:48:96:27:42:44:7f:84:
9c:19:6f:b8:09:ed:7d:5a:58:80:a0:f9:17:32:66:13:3a:f5:
83:c4:f8:f5:b7:92:b1:49:a1:19:a8:6b:fa:02:94:94:8c:4c:
d0:73:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:29 2026 by rpki-client