Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/144286ab-f239-401f-a4ef-706749b0d570.roa
File: 144286ab-f239-401f-a4ef-706749b0d570.roa (raw, json)
Hash identifier: 3UaaZ+mNohc4zVFUoLlxK4nUmZrybm6NH2coPBwUVQc=
Subject key identifier: 23:12:76:1A:A6:69:5E:25:6F:9D:A8:68:DD:53:38:D6:C2:2C:BD:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DDA49A2DB978D689AA80DC52FBE90A301516D75
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/144286ab-f239-401f-a4ef-706749b0d570.roa
Signing time: Fri 07 Aug 2026 04:40:24 +0000
ROA not before: Fri 07 Aug 2026 04:40:24 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:da:49:a2:db:97:8d:68:9a:a8:0d:c5:2f:be:90:a3:01:51:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:24 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5fb3fc5adec4e4683ccb63cc253b274dbf9afc2b546e241796b940e1109edf83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:f2:cc:b0:63:04:93:e0:43:78:62:48:8e:
c0:0a:c0:57:71:08:fa:ff:87:53:d3:2a:d0:a1:8f:
dc:10:5e:87:75:e1:fb:c1:06:45:b6:8f:05:5b:27:
98:26:df:ed:06:a2:8e:fe:da:03:78:d2:ed:5c:9e:
62:63:83:64:7a:6c:cc:e4:40:d8:61:87:2f:c6:e2:
a3:be:15:59:08:82:1d:52:e9:c7:62:c9:77:64:b8:
ec:6d:19:ed:94:22:8b:fd:76:1a:89:a7:8d:a8:7e:
70:83:4d:37:3e:6b:e7:2c:93:5f:ac:aa:49:19:74:
e0:3f:9c:d2:c6:ae:07:45:a0:a7:bb:a9:bf:4b:4f:
de:c6:44:dd:ae:db:7b:a4:ec:73:12:16:43:d1:f6:
a9:75:73:82:8c:d0:b2:a9:55:44:05:97:5a:f2:af:
f8:8a:93:fe:27:8c:8b:2c:51:b8:4a:a6:bf:84:4d:
bd:2d:7c:78:21:0c:20:a2:0d:71:f3:ef:b2:57:3f:
a5:ec:a5:0e:20:0a:67:2e:ad:a6:b9:1d:e4:06:91:
7b:ab:a3:10:0f:60:6d:b7:e3:f2:47:d1:17:fb:b2:
e7:41:b1:59:b8:fe:76:db:71:a2:89:17:91:49:75:
ff:1d:35:6d:16:03:a7:c7:8f:5e:94:4c:a6:9b:b2:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:76:1A:A6:69:5E:25:6F:9D:A8:68:DD:53:38:D6:C2:2C:BD:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/144286ab-f239-401f-a4ef-706749b0d570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cc:cb:46:66:ad:ca:35:55:d1:77:28:f2:75:0b:cc:d2:20:
5a:21:ca:a5:8a:11:9f:96:3e:93:a2:8f:af:ee:4d:08:52:b5:
2a:97:41:f9:3d:16:5e:9c:c7:a3:ab:45:c4:28:fc:35:3a:f5:
53:85:88:23:bc:c5:82:c5:4f:4e:5a:84:0e:e5:60:ff:00:7e:
2a:1c:b9:e4:68:57:3f:c7:38:4f:28:a9:b3:74:1f:6c:9c:a3:
d3:4e:25:14:b2:9e:d4:88:ca:a0:b3:01:e1:e7:c4:ff:5e:27:
c8:74:50:97:37:bc:94:c2:20:b5:6d:91:36:b0:fd:54:14:8e:
5c:ad:7a:92:62:61:a0:f2:9c:07:6b:a1:46:6e:d0:3a:64:1c:
6e:f8:80:0b:b2:87:25:67:cf:d2:8a:6e:ca:ac:18:3d:f9:04:
c0:f0:d8:a8:e2:18:af:e9:a6:1e:45:d5:df:cd:d4:3b:ad:df:
34:a3:33:68:73:73:3d:34:54:60:60:0b:fc:db:1f:39:17:d7:
e4:c6:4a:c6:d4:74:cd:e2:ef:d4:91:23:44:4d:69:f7:6a:d4:
a0:57:f7:ba:02:bb:79:87:f9:c5:27:cc:8f:15:bc:a8:e0:bf:
d4:7e:24:3b:6c:d5:4a:45:56:50:1b:50:76:f0:b5:eb:d7:88:
0e:66:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:51 2026 by rpki-client