Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
File: 113e55fd-9531-4700-bcdc-5abe9a806b41.roa (raw, json)
Hash identifier: BLfgk4kSm6PozZDSj79CvEf0gWQqvg0y6kuhBAwyAVY=
Subject key identifier: 0C:7B:DD:77:1C:A1:5F:ED:37:68:6B:D7:1E:E0:76:E1:DF:AC:79:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21B21B9FDF47A069360A74461CB2699D303C92C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
Signing time: Tue 04 Aug 2026 01:10:04 +0000
ROA not before: Tue 04 Aug 2026 01:10:04 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b2:1b:9f:df:47:a0:69:36:0a:74:46:1c:b2:69:9d:30:3c:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:04 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=4c8a6471f1d9a3af2a9c30d0b7013b947ece77b1362a9894a3995ffc1c27d595, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:dc:8f:4f:5f:b6:c3:2e:26:47:cf:94:be:
e7:65:52:a8:79:72:75:35:29:3d:de:15:00:21:bf:
aa:f7:75:84:5b:34:37:b7:d3:b3:05:0e:23:e8:05:
c8:eb:23:91:46:54:65:7a:e5:93:05:28:61:8b:14:
57:b9:41:97:8b:06:4a:31:0f:0c:71:84:34:b8:65:
8e:c0:06:7e:5f:37:8d:fa:70:cb:cf:6d:6e:22:b1:
e8:63:76:d0:27:2b:04:80:33:92:9a:cc:cc:c5:f9:
1f:f5:ca:46:9e:a8:52:e3:03:5b:c3:1e:87:a4:72:
bd:28:ba:38:9b:13:82:5f:82:1f:69:79:eb:db:a8:
b4:ad:18:2b:6b:52:0d:8f:b4:84:28:c5:25:05:b8:
5c:61:08:7e:cd:35:d8:98:d1:c9:7c:5a:12:10:1b:
a4:3c:9c:5a:e5:e2:1a:69:c0:0c:5d:82:2c:a4:df:
90:9d:3b:77:69:8c:91:3a:18:8d:f6:8b:e3:6e:fa:
86:e1:e6:c0:e7:50:ff:76:c3:92:e2:50:dd:e7:e2:
3b:ec:3c:a0:2d:9f:a1:db:82:6d:8b:9c:17:fe:f4:
70:0c:22:bb:04:8e:9e:3e:65:d0:94:89:7a:61:91:
50:74:da:26:18:4b:94:a3:d7:9b:bd:9f:ff:5e:8c:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:DD:77:1C:A1:5F:ED:37:68:6B:D7:1E:E0:76:E1:DF:AC:79:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/40
Signature Algorithm: sha256WithRSAEncryption
0b:24:f4:ad:40:f7:61:f1:26:b7:5d:f3:e3:bd:48:69:fb:81:
7f:a7:ce:75:09:7b:16:ac:75:9d:8e:c8:e9:93:cc:67:3e:09:
d6:d6:7b:be:11:6e:ed:6f:ab:10:7d:7a:5f:61:a4:85:94:42:
d0:9f:05:43:25:64:28:df:18:c8:16:12:8c:f4:18:d6:a6:8c:
29:1c:4e:25:f7:82:c1:97:97:a7:9a:46:77:84:0f:6e:b3:a1:
01:38:12:66:ae:b3:32:cc:99:77:55:fa:cc:35:b2:15:f7:44:
ed:5c:21:4b:bb:59:6d:2a:62:42:07:da:f5:a6:90:ae:25:4e:
8f:d8:ee:5e:e5:03:71:39:a5:69:c1:0d:90:ac:a9:13:f5:03:
ce:50:f4:2d:58:fd:c3:41:03:b1:38:e0:7e:64:1d:37:00:9f:
5e:9b:ba:7c:0f:f0:ce:b7:b9:6a:9d:dd:60:f0:08:57:af:af:
5a:02:f3:63:35:6e:ab:46:e7:d0:d8:e6:9a:76:6a:9d:98:15:
be:57:a9:05:51:81:63:36:73:70:21:b1:eb:ba:ec:70:f8:03:
4c:39:e9:51:a7:e2:77:ba:14:1b:21:7b:4c:de:f9:f7:41:b9:
35:92:88:56:90:84:d4:80:08:b1:7a:25:95:9c:de:dc:4f:12:
24:3b:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:04 2026 by rpki-client