Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09a66d07-54a4-4c26-8a49-e43710070e4d.roa
File: 09a66d07-54a4-4c26-8a49-e43710070e4d.roa (raw, json)
Hash identifier: rOEXNIcts9oGlXPK9XNcijT3/5bEe8nf/2N0jWumS1A=
Subject key identifier: DD:01:EB:59:2C:95:BD:3C:1B:A1:5C:E0:20:07:6A:65:FF:68:5B:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19BB9E14D8650D1ED0489B8A8A48FB82CB282EB1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09a66d07-54a4-4c26-8a49-e43710070e4d.roa
Signing time: Fri 07 Aug 2026 05:20:45 +0000
ROA not before: Fri 07 Aug 2026 05:20:45 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:bb:9e:14:d8:65:0d:1e:d0:48:9b:8a:8a:48:fb:82:cb:28:2e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:45 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=88a9d99bcf41ee8accbea53dd9960b9f3ccaf389fac843456902d1d689461d7e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:8e:ed:60:dd:1c:08:2f:f5:02:11:76:0f:
95:f8:63:04:a2:2e:eb:c6:4b:71:17:4a:69:9e:32:
33:6e:37:6d:9a:69:5e:ef:85:d5:e2:17:54:61:08:
7b:48:93:fe:f5:ee:1a:ae:ae:f5:1e:55:29:b2:13:
46:84:ea:35:86:1e:d4:bf:56:a6:fe:09:24:5f:75:
b0:e2:38:bc:eb:08:8a:fd:1e:02:3e:fd:fd:48:b4:
d9:3f:33:bf:06:01:f6:9c:16:56:68:94:b8:66:25:
d6:c0:27:50:9a:db:8b:60:a0:cc:d0:a7:32:55:ba:
68:76:c0:85:ba:6e:d6:c5:66:19:a8:f1:7c:cb:42:
3b:3f:73:06:02:99:85:d4:42:71:f5:21:34:ee:df:
36:ea:bb:89:c7:74:4e:ff:b4:49:41:61:0d:7a:b8:
e9:8c:3a:e3:83:32:4e:09:4f:88:e2:36:f2:52:90:
de:8d:c8:96:5d:fd:c4:ae:9e:7e:40:8c:d0:61:ad:
d5:7c:b3:7f:f2:a3:e9:db:5b:d9:a3:da:4c:fa:73:
b9:ca:87:c5:f1:74:c2:64:f0:15:b0:bf:e1:2a:51:
01:90:24:fa:34:65:3b:7d:ef:1f:7c:c0:1d:1e:ec:
a2:f3:10:ab:5a:13:82:b8:19:b1:0d:34:05:8a:a8:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:EB:59:2C:95:BD:3C:1B:A1:5C:E0:20:07:6A:65:FF:68:5B:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09a66d07-54a4-4c26-8a49-e43710070e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1080::/48
Signature Algorithm: sha256WithRSAEncryption
48:59:41:f1:3e:46:14:53:7f:1d:21:29:bc:e3:cc:ee:a2:f9:
7f:e8:1c:d7:6a:e8:20:f6:49:e3:52:34:6b:30:e4:7d:23:66:
8f:d2:ee:d9:36:51:65:53:6d:d9:44:1a:a7:14:e6:89:4c:a2:
62:25:97:36:2d:ba:c2:4f:60:81:47:5a:be:c4:82:b9:30:46:
25:04:3e:8e:72:d6:c3:3c:30:ef:8a:3f:b4:0e:19:64:1f:61:
e9:a5:1e:af:3f:7f:97:4d:ac:3a:f7:b4:ee:44:ee:ec:85:85:
bb:a1:e3:78:ef:5e:bf:9f:2a:df:0f:ea:71:5c:aa:99:9d:90:
67:07:b0:77:9f:8b:b8:1e:71:c1:7e:c3:4f:c6:07:75:b5:42:
cf:ca:aa:61:9e:f8:2b:53:bb:9b:ed:85:63:7d:c4:36:b8:ef:
1b:93:43:58:ac:e6:69:e3:b2:d6:9b:d8:ad:4e:2a:cf:28:e9:
e4:02:1d:38:73:cb:52:96:0a:c9:df:9a:ad:0b:28:2d:31:e5:
b8:8c:1b:8c:33:05:11:f9:14:39:d9:99:3b:08:89:49:a7:1d:
7f:8c:f5:c1:cb:71:c0:26:c1:60:7c:97:b7:4c:71:fc:82:27:
ce:e3:c5:fa:c2:ba:31:b6:54:e5:48:c1:60:00:6a:d9:16:64:
03:7d:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:06 2026 by rpki-client