Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
File: 0e68fbde-eead-4e29-b902-4eed053693ac.roa (raw, json)
Hash identifier: foBM5f5i0TgS4THEVOquH9GPC9wVz6RCklaYcEzRB/Q=
Subject key identifier: 08:AB:D3:EC:6A:39:34:EB:4A:29:35:CD:67:D8:C4:62:09:D7:5F:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6785CB8F5EEE0E24F5C3578A22FE2CF52D144BC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
Signing time: Fri 07 Aug 2026 04:40:11 +0000
ROA not before: Fri 07 Aug 2026 04:40:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:85:cb:8f:5e:ee:0e:24:f5:c3:57:8a:22:fe:2c:f5:2d:14:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=94124501c9e1214707fb557057476e0b34a5cbd075ce4932460405fafb89923a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:0a:00:0b:1e:be:87:6a:fa:f1:de:d7:3e:
0a:8a:3b:26:6c:5d:ec:95:89:8f:6c:df:93:eb:0d:
98:47:19:fc:cf:fc:e9:25:c3:0f:cb:21:05:ab:43:
12:a0:6e:9b:11:f4:43:74:aa:4c:3e:29:15:df:bd:
40:fe:73:60:40:74:d7:e7:ec:49:4f:2d:9a:37:e8:
13:4d:6e:13:98:a6:3b:be:79:d9:6c:5d:99:19:3f:
a5:fc:ce:d5:62:38:0b:92:54:28:0c:bb:a9:01:a7:
04:f0:35:bc:87:7e:ac:00:d1:61:d0:50:7d:1b:98:
25:2d:1f:6f:d9:49:e2:40:df:4e:9a:6d:00:98:c8:
ae:49:96:7f:8d:1c:06:f4:c0:67:66:ca:cb:40:c3:
eb:c8:72:ed:d7:0c:a6:43:5a:08:78:02:53:b4:bf:
85:1b:e9:a0:ae:ff:b3:46:17:96:68:58:55:a7:2c:
36:ed:f7:9b:1d:f5:37:ed:1c:ed:c0:5e:63:af:2f:
a1:f5:68:6a:9d:bc:71:09:51:ad:20:18:40:ee:74:
02:5b:2c:e0:b3:5e:3c:69:ca:45:0d:3e:da:52:4b:
a5:42:c7:fa:79:51:05:d2:f4:b2:0c:05:62:8f:a0:
2b:43:46:0b:40:cc:8a:c6:12:e6:42:6f:11:69:59:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:D3:EC:6A:39:34:EB:4A:29:35:CD:67:D8:C4:62:09:D7:5F:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e68fbde-eead-4e29-b902-4eed053693ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/36
Signature Algorithm: sha256WithRSAEncryption
14:43:82:7a:b9:26:03:4f:d8:89:80:49:c4:41:d4:1d:7d:47:
07:35:2f:1b:cf:5f:90:f1:46:fa:d5:36:42:da:16:7b:85:d0:
cb:e8:ed:2a:8b:48:05:df:a3:9e:fb:9d:7d:39:a8:98:7b:bf:
d5:2f:07:6f:d0:17:79:ff:eb:23:3a:00:45:8e:79:df:be:ce:
b7:c6:a6:b0:fb:b8:15:95:9a:b1:c5:18:ac:ad:03:d0:5f:92:
f2:34:aa:69:5a:d1:a4:34:f7:23:a5:b2:9e:6e:ac:00:3d:56:
a5:07:60:0b:df:f6:19:03:62:fc:3d:47:69:52:f6:d9:70:1a:
0a:f7:d6:d4:9a:fc:8f:28:a4:f8:b7:a0:27:91:77:11:94:1f:
67:47:19:e3:9f:ec:04:72:7d:0e:a6:e1:e0:ae:70:ae:be:3c:
46:ab:2d:62:de:e3:4a:92:aa:a4:5b:9d:5e:73:1a:cb:c6:53:
3f:25:5f:c5:3b:8e:c7:3c:4e:05:3f:49:52:4d:0a:46:d6:40:
41:2a:b9:48:c9:6b:45:af:4c:0b:27:5d:19:45:c0:e3:2b:2f:
bb:e0:98:78:47:5b:52:3a:b1:ca:a8:a7:b4:08:08:4f:24:31:
e3:e5:6c:04:0d:22:39:04:73:e3:ba:b2:db:2d:20:66:6a:70:
33:24:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:41 2026 by rpki-client