Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a62bd27-1249-4e47-b472-a40e20de3d28.roa
File: 0a62bd27-1249-4e47-b472-a40e20de3d28.roa (raw, json)
Hash identifier: hCqjFEmJKlwYSdpvBMwaKIfdGWsvdEKi84DnShIRFrs=
Subject key identifier: 3F:06:59:79:A9:46:8F:2C:A0:A5:16:6E:04:A8:03:0E:9D:10:B5:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50FFB201E040A66F3525620F91AD99326FC41B3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a62bd27-1249-4e47-b472-a40e20de3d28.roa
Signing time: Mon 10 Aug 2026 00:50:09 +0000
ROA not before: Mon 10 Aug 2026 00:50:09 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ff:b2:01:e0:40:a6:6f:35:25:62:0f:91:ad:99:32:6f:c4:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:09 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=c04b69d18b74d1deed651cce09837b0c88423e4efd04f1c04bd5346eb4673ba3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:6e:44:e2:eb:bd:73:9c:32:67:2a:5a:11:
32:ac:10:e0:d8:98:82:e1:45:b9:f1:72:58:c7:e8:
a3:dd:03:6e:39:fb:b5:0b:b2:06:33:fa:92:d0:45:
6e:33:91:59:eb:9a:97:de:5e:84:63:e5:77:d6:fd:
f8:1a:5a:4e:d8:f9:cd:4f:fe:60:03:16:9a:0c:d0:
81:40:ab:ff:6b:b8:a4:18:f8:83:69:9f:4b:24:af:
2d:07:9e:71:c2:f8:db:3d:b1:44:88:be:0a:07:cd:
ff:d3:c4:79:88:1f:54:3c:f0:58:4f:32:d9:19:1d:
99:fd:98:86:2e:35:25:9b:3f:61:83:0c:d0:79:eb:
b0:79:27:35:00:cd:d2:ed:3e:3b:10:94:47:d7:fe:
14:97:4b:1c:07:a3:dd:ad:1f:0e:d4:9a:a8:50:68:
a4:59:83:06:ae:e3:1d:50:20:32:73:dc:84:a2:c0:
c4:83:02:9a:ad:31:c1:8b:f9:b9:69:c3:3f:07:2a:
5f:bb:65:9d:dd:9d:59:ca:15:a8:43:94:1b:4a:c8:
f8:27:56:66:56:fe:83:56:99:03:f1:0a:fa:61:75:
51:f1:8e:f4:d7:29:5e:0d:0b:6f:a0:38:75:49:18:
05:76:06:cb:af:eb:17:ad:15:14:64:6d:0c:52:9c:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:59:79:A9:46:8F:2C:A0:A5:16:6E:04:A8:03:0E:9D:10:B5:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a62bd27-1249-4e47-b472-a40e20de3d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:2000::/40
Signature Algorithm: sha256WithRSAEncryption
02:e2:0f:e1:b4:8a:d9:03:99:08:dd:e8:d9:be:7f:a3:9c:3b:
e4:f1:72:60:aa:ad:a8:cd:fc:71:9c:b7:8f:b7:aa:57:f3:2c:
75:b2:af:2b:1b:01:79:2a:9c:e7:22:21:83:04:93:d8:3f:e6:
24:09:49:60:2f:f5:96:a6:ed:f0:11:1e:94:9f:54:17:eb:24:
7b:c7:51:73:c9:cc:ef:fd:aa:93:34:b7:98:de:6f:12:00:60:
1e:d5:9e:f3:31:0d:80:ef:7d:61:55:2c:13:a9:25:a1:64:c9:
94:40:98:68:d9:71:3b:b5:b5:83:f4:7e:98:5d:f6:91:9f:66:
ba:ee:87:93:18:82:da:e9:ac:57:7d:6e:3a:25:34:57:6e:51:
27:9f:8a:1c:b5:a7:7b:72:a6:20:8f:f0:81:5f:bf:30:65:71:
e1:68:62:20:46:88:94:bd:af:e4:30:63:38:bd:c4:20:56:b5:
ad:f3:48:ae:ef:9d:de:8d:d1:36:b5:eb:ab:f4:11:2d:8a:2a:
39:85:69:84:2d:be:38:96:6c:03:d5:66:03:18:e6:1a:2b:71:
44:af:07:ea:eb:ff:ab:5e:2b:65:3c:f3:0e:b6:db:bc:55:16:
5e:9f:ca:a2:f1:fd:d2:79:c3:6c:7e:9e:c8:16:f3:b1:9c:c8:
e8:8c:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:35 2026 by rpki-client