Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
File: 0b022346-638e-4570-8b19-5cf9b4c378c8.roa (raw, json)
Hash identifier: 2A15B8SywT4V6QiT7bAUYSL/8oEZzbf3G84lYFXTr8I=
Subject key identifier: 74:D2:CD:8C:33:C9:7C:01:16:36:BD:1B:04:F8:33:60:61:3B:40:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 319DE6C4AAE4F33E76979BB5F2D6268906D765C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
Signing time: Fri 07 Aug 2026 05:20:23 +0000
ROA not before: Fri 07 Aug 2026 05:20:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9d:e6:c4:aa:e4:f3:3e:76:97:9b:b5:f2:d6:26:89:06:d7:65:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=39c8264eb45c0df09927cc7b25b06f57c7207ed3af337096f0e1c2540087186a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:c1:88:60:db:7b:3d:fb:1e:97:0e:c5:75:
cc:85:03:ea:a6:02:1c:7b:0f:d6:c6:48:6e:b1:fc:
27:b0:96:25:7a:6a:10:cb:c3:27:db:35:89:b3:c7:
67:ce:e8:ea:f9:c9:b4:64:2c:18:93:b3:e2:85:ee:
61:29:db:e2:25:31:00:22:de:42:70:46:ec:7f:1d:
0e:0a:eb:ac:05:94:43:51:0e:4c:01:2f:51:60:d3:
6a:60:d2:67:90:97:ca:cd:bb:70:14:0c:b3:41:24:
ed:09:63:c5:82:71:4a:c4:06:01:e9:6a:75:cc:4d:
f9:22:7a:32:7a:81:3d:b5:4e:3f:99:87:ce:cb:75:
96:90:d1:5c:20:01:ed:58:05:c4:07:b7:f2:e4:73:
b3:a1:32:60:ed:bd:66:99:a3:f1:5d:09:b2:fc:24:
bf:93:d5:48:d2:80:ce:08:ca:f1:20:79:34:56:bb:
9e:58:51:09:66:c0:d4:06:fb:29:42:9e:48:e8:6e:
86:90:74:14:c8:68:4e:fd:75:5c:52:7c:f1:8a:04:
82:4a:e0:3a:47:e4:a1:eb:72:1b:b4:14:11:ad:63:
84:9d:ea:2c:bb:c3:c6:7d:84:d1:f0:39:d2:1c:25:
f4:74:a4:0c:21:c2:11:15:04:af:61:a4:fd:d2:33:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:CD:8C:33:C9:7C:01:16:36:BD:1B:04:F8:33:60:61:3B:40:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:e8:7d:16:44:46:40:0c:10:e0:38:35:2e:11:eb:a2:20:ce:
b1:1d:e6:67:07:2d:19:52:16:94:2c:fc:45:30:0d:e5:f4:f3:
f3:2f:95:b7:26:72:fa:24:dc:65:2b:bf:32:68:b3:41:45:c3:
20:56:f0:01:3c:fb:92:3c:ee:4d:c8:22:18:b6:23:f3:ff:2a:
2e:41:c8:dc:77:8d:8f:20:f5:be:59:98:7d:d7:c0:2c:dc:f0:
60:28:3e:78:cc:1f:f4:1f:3a:62:2f:79:af:07:4a:bb:29:81:
ff:18:a7:2a:f9:82:e6:22:59:eb:5b:fc:ff:cb:e6:94:b7:13:
9c:bb:8b:22:b7:2f:52:dd:bb:15:dc:1e:b6:08:9a:af:5c:f6:
ff:f9:17:75:ac:b3:7d:f6:f9:e3:5e:02:26:95:de:e7:87:9f:
a8:39:22:b4:a1:08:e1:d0:6b:c0:11:ba:77:c5:7a:fb:09:99:
72:98:f3:d8:fd:1c:d2:18:17:49:b6:4f:99:7c:d4:73:da:86:
3d:a0:ba:45:04:ed:63:5f:42:59:f6:77:b1:c9:59:82:84:9c:
77:79:e8:1f:22:98:59:28:5a:39:ae:33:7a:8e:7c:bc:70:a6:
f6:95:02:ae:bc:af:b9:4a:e0:33:29:65:af:4d:3d:2f:d1:8d:
6e:84:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:54 2026 by rpki-client