Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: n7kNKgYX095prXYBWpPbvQk+L/jHLvmk0e+zT8E3+7Y=
Subject key identifier: EF:AB:AC:78:22:DE:18:8C:51:EA:17:83:9A:81:A3:69:A6:77:1C:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35788F5BD5DB649478AB7FEFC50D4F7C7DD216B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Fri 07 Aug 2026 04:30:40 +0000
ROA not before: Fri 07 Aug 2026 04:30:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:78:8f:5b:d5:db:64:94:78:ab:7f:ef:c5:0d:4f:7c:7d:d2:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ca7c7717526ca54fac0eef830df9c5ca61b331240f72103d328a2791e174f9a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:d7:0e:66:71:0e:18:48:41:37:93:ca:cb:
87:8d:83:fc:41:bb:03:f4:26:18:fb:2b:1e:fb:9c:
6c:18:96:47:cf:df:b2:43:c3:c6:92:7f:96:19:0f:
de:75:34:fe:56:96:1d:ec:8d:ac:d3:a8:f0:f0:bb:
4a:4c:fd:7c:eb:4b:8e:0b:28:15:3e:e8:d7:51:a1:
76:be:8f:01:e0:96:9d:23:37:9d:4f:7d:8d:ee:36:
04:64:7c:99:01:04:8a:c0:aa:e8:5f:fb:ca:68:99:
68:d8:72:dc:13:63:0c:b6:69:73:3b:fd:55:ea:ce:
3a:2f:8f:2c:ef:c1:20:da:c4:01:0b:c2:07:b5:84:
5a:98:b0:59:66:2e:c4:b5:ab:af:31:d2:22:e1:88:
78:92:98:df:3c:d8:af:15:4a:54:65:94:77:5b:63:
95:10:2c:ad:cd:f8:4c:93:0b:ab:a3:d6:86:85:da:
4b:07:73:7a:b4:e9:02:f9:80:88:b7:cf:70:91:70:
5d:c2:ef:7f:16:b3:4f:b2:aa:9d:55:cf:70:9f:1c:
e8:c2:46:20:b5:9b:ad:74:a0:64:c7:66:6c:53:a5:
49:54:c9:9b:b3:00:9b:1f:e7:0c:d7:7b:c1:d1:f2:
54:5f:4a:01:b1:94:4e:7e:ff:85:4a:2e:c2:60:70:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:AC:78:22:DE:18:8C:51:EA:17:83:9A:81:A3:69:A6:77:1C:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:5a:92:dc:5b:e9:ba:90:92:15:28:4d:4c:37:af:93:42:0c:
0b:bf:99:57:52:92:62:ce:42:83:ad:d3:fe:b5:1f:c9:21:1a:
96:29:c4:70:75:ef:f8:d0:eb:75:65:0e:71:1d:be:e6:cf:d6:
16:5b:59:fb:cf:f2:c5:23:6e:65:45:58:a2:f2:6d:97:25:24:
2e:68:6c:9b:27:7c:d3:92:48:ba:ae:46:68:7c:62:f4:20:95:
4b:d9:fd:31:2a:1c:df:ad:e0:40:cc:c6:01:c3:4b:8c:f9:0a:
a0:fd:9e:dd:9e:48:ba:50:75:5b:79:95:20:60:0d:ec:32:f6:
20:e2:05:5d:4e:16:96:9e:55:05:21:01:43:83:89:6f:dc:92:
03:7e:d5:af:b4:91:05:56:db:77:47:cc:44:e4:23:33:a7:27:
ad:4a:c5:c1:e3:4a:41:f7:7c:24:2d:b1:79:5c:1c:18:63:71:
c0:3d:63:9a:b1:11:c4:6e:d4:3e:ce:ca:18:df:68:0d:2b:64:
e5:b7:1e:2c:fc:17:77:c2:4d:14:c3:67:b2:12:32:1a:03:35:
89:71:09:1b:1e:5c:02:f0:a9:52:41:04:d8:9b:0f:e2:98:28:
3d:9d:f1:50:8c:f5:a8:17:17:e2:93:8c:bf:08:b2:3e:f0:c5:
b7:03:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:07 2026 by rpki-client