Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
File: 0b197d7f-771e-4490-ae9e-d500d4007e6d.roa (raw, json)
Hash identifier: Z29n/PdoaOo/66+ONgxjAqGqhvNrHavBO1xGD5NwY/U=
Subject key identifier: 26:0F:EB:20:93:C1:45:D3:4E:99:17:17:A6:AC:3A:BA:11:4F:70:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 210FD566533F95BEF7ED90107CECBB032D295277
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
Signing time: Mon 03 Aug 2026 02:00:04 +0000
ROA not before: Mon 03 Aug 2026 02:00:04 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0f:d5:66:53:3f:95:be:f7:ed:90:10:7c:ec:bb:03:2d:29:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:04 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=4d6bff0e5534196e78433b310e6ddd419890d9cd4f8e95384472c7e0f5adb77e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:a9:7d:cd:58:3d:2f:3b:12:7f:22:d7:d6:
aa:dd:00:14:ae:06:9d:b9:e4:d2:07:73:eb:c4:eb:
2b:8e:6c:df:85:ce:3a:de:1e:5d:c6:19:84:d3:4a:
e6:0a:51:36:e5:0b:55:79:ea:0d:91:c7:da:6a:c4:
b9:12:c4:6f:ca:07:45:c9:ce:13:85:94:f1:6e:fc:
f2:33:8a:94:7d:0c:82:48:17:08:08:b5:57:b1:63:
ea:09:a7:f7:c9:8a:dd:88:32:8a:30:5e:0d:87:09:
dc:bb:a0:ec:0a:17:0a:20:0a:67:79:7e:ae:d3:0e:
b9:bd:97:de:23:87:cf:1b:2d:b8:3a:c7:92:18:b1:
00:d7:6a:c2:08:0a:3d:57:ae:9f:86:1e:9a:b8:f0:
fa:ef:2c:3b:ff:95:22:34:a4:74:72:fb:35:26:c6:
00:0c:ef:c6:a5:cc:38:63:76:29:f2:8e:79:8d:77:
ac:aa:eb:e1:e4:07:19:31:94:4b:f9:c6:58:85:4b:
af:0d:c4:43:62:09:fc:34:7f:4d:5d:12:83:fb:c1:
ac:7c:10:c2:31:fe:94:ff:db:62:7c:94:d2:db:f7:
d8:00:78:44:fe:1f:d4:9b:fb:84:03:f9:11:89:3b:
ca:7e:8d:1d:91:fc:77:46:2e:d8:b6:97:f4:6a:4c:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:EB:20:93:C1:45:D3:4E:99:17:17:A6:AC:3A:BA:11:4F:70:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:1000::/48
Signature Algorithm: sha256WithRSAEncryption
57:ba:58:c2:6c:af:dc:3c:e1:3b:8e:9f:ea:85:de:7c:8c:b6:
b1:91:08:9b:6b:ac:67:f5:e6:0d:99:f4:cf:0f:8a:9c:42:52:
56:33:81:8a:c0:4f:8a:60:ca:5d:9b:fc:c0:07:d4:70:de:d4:
6c:a8:53:6b:f5:a9:df:ad:25:7f:da:4d:3f:1b:5f:4b:c7:66:
47:a0:1c:9c:6b:75:a2:31:5b:e4:c5:a3:5a:f5:76:04:18:d3:
64:e5:06:ea:5d:d4:58:0e:8e:f8:12:61:cb:ab:94:39:e2:4a:
b1:67:a6:fb:d0:7f:56:db:93:7d:c2:c1:4d:62:6f:a6:58:e0:
a5:95:f3:88:81:b4:c9:2e:ad:08:2b:64:7b:45:c7:97:d7:1d:
73:61:30:95:6e:7c:98:0b:f8:0a:a1:ce:e3:f1:f3:8b:36:8e:
8e:4b:a5:b6:88:d5:fd:a6:f4:bc:1e:59:87:6d:f7:36:4b:48:
e0:7c:93:2a:ca:42:47:a8:d4:21:43:59:40:3e:52:1b:2c:e2:
f7:ab:f7:36:02:77:8e:3c:c7:95:9b:40:03:8d:7a:dc:c4:54:
40:6e:b8:15:ad:b4:e2:8b:b5:f5:16:b4:c0:0f:cd:94:8e:53:
99:7f:90:b3:87:f1:0f:9a:a1:71:db:76:6a:0f:0a:99:60:b7:
b2:71:97:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:41 2026 by rpki-client