Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/107ceae0-2534-44f9-abb8-8c7917e1e75d.roa
File: 107ceae0-2534-44f9-abb8-8c7917e1e75d.roa (raw, json)
Hash identifier: 33DJ9M/ymgIYt+MNuoHza0b9Da3EJwToQi+uUOQsjXQ=
Subject key identifier: F3:72:7E:E3:4D:9F:63:1C:17:97:F6:68:BC:7C:C0:30:F3:50:AE:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B7A7F7A4476E845964D3F40F3D591DEF63773C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/107ceae0-2534-44f9-abb8-8c7917e1e75d.roa
Signing time: Wed 09 Sep 2026 16:12:52 +0000
ROA not before: Wed 09 Sep 2026 16:12:52 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7a:7f:7a:44:76:e8:45:96:4d:3f:40:f3:d5:91:de:f6:37:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:52 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=33797402a82a91317b853dc921b72003534bd978a8088652be96f5f0e9fe3d21, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:46:1a:89:cc:7c:72:e5:d2:10:38:2e:e2:
53:b4:84:69:7b:21:c2:fb:2a:65:be:94:18:02:f5:
f6:4f:c1:64:8c:b5:14:0d:e1:df:93:77:2e:7f:20:
33:0d:f0:38:4c:ff:c1:00:38:76:e4:2f:2b:79:b6:
32:1e:9c:14:b7:2f:32:fe:bb:56:00:07:8c:fe:13:
5e:4e:4b:50:73:75:89:1d:f3:00:d3:29:33:c5:2a:
92:e4:80:df:19:d2:c3:54:83:c5:a6:44:56:96:63:
eb:b8:f0:a8:f5:50:99:1e:00:3c:9a:dd:46:1e:24:
de:ec:ac:18:a4:f9:d8:27:9c:b2:b5:53:22:54:03:
b1:08:bf:79:93:b5:39:f0:96:33:da:2a:41:64:6b:
62:6e:e5:e4:28:2f:be:42:a5:29:a1:af:94:1c:8e:
28:9b:81:22:64:d0:a7:93:1e:1c:6c:32:50:cd:c5:
a6:c2:87:56:0c:75:27:7a:00:06:0a:d4:35:98:25:
73:3a:fc:48:c0:27:55:e1:1b:99:4d:ff:12:68:7c:
54:01:fa:a5:ee:a7:19:91:e7:ec:2a:1d:68:b7:ea:
ea:1b:e0:40:a0:f0:09:82:71:a0:b7:22:12:b1:a3:
39:94:54:f3:75:8a:e7:cc:bc:36:ab:07:9f:eb:9f:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:7E:E3:4D:9F:63:1C:17:97:F6:68:BC:7C:C0:30:F3:50:AE:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/107ceae0-2534-44f9-abb8-8c7917e1e75d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8800::/40
Signature Algorithm: sha256WithRSAEncryption
7a:3f:0d:5a:72:0d:b7:f2:c4:9e:9f:c9:f5:c2:7a:b3:23:42:
df:66:5c:7a:0e:9d:1a:3b:70:bb:6f:4d:6d:f1:60:f6:9e:c5:
52:b1:67:de:51:6e:f7:f4:23:aa:1a:58:47:9b:d6:2b:05:e4:
6b:13:d7:2f:9f:86:a3:b8:b6:f7:0a:13:39:cc:43:22:ca:95:
2a:ec:c2:84:5e:f1:a1:14:b1:20:f8:77:fd:f7:cb:9e:48:a1:
bb:a7:f4:bd:fc:b8:c8:0c:93:86:c4:c5:9d:c3:03:8d:ad:80:
76:2d:b1:6a:59:10:a0:7b:db:1a:b6:57:43:86:4a:ba:77:0c:
42:a1:35:e6:29:ad:c5:09:8a:d6:35:c7:05:04:91:78:da:34:
e2:ef:51:da:53:f7:af:1f:13:da:ac:1e:4a:51:7b:7b:81:95:
2c:74:3e:f5:14:7d:6c:08:cf:a0:c2:6d:73:b4:94:d8:f1:9b:
f7:a4:be:55:23:45:f5:98:a7:3a:bf:66:f1:02:93:df:52:ed:
5c:19:7f:af:7a:58:b3:d0:09:f4:46:ed:82:20:ff:77:63:b6:
da:b3:6f:83:29:93:8f:78:b7:2b:d6:48:f6:63:0b:09:07:8d:
f5:4e:47:e0:7c:ae:6f:a4:e0:48:0f:d7:71:08:9f:44:39:50:
fa:b5:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:35 2026 by rpki-client