Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
File: 1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa (raw, json)
Hash identifier: +jlIZEmVIrjKu7/DeVj9vFTMqFPdydJUDJYzKivVzDI=
Subject key identifier: 72:CC:A5:3A:31:11:15:D7:86:65:BA:D4:D7:D9:08:6C:16:25:24:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F286307BC4AA5DB4EC8489859E1C61DFD08048E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
Signing time: Wed 19 Aug 2026 01:10:20 +0000
ROA not before: Wed 19 Aug 2026 01:10:20 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:28:63:07:bc:4a:a5:db:4e:c8:48:98:59:e1:c6:1d:fd:08:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:20 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=ba6b59b0dc14bce5a4c9041268da10ca0b5d411752565647f442ac92393b09db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:c0:5b:0c:c8:20:15:14:01:0d:97:62:d0:
5e:78:68:37:83:f0:9e:52:90:f3:6e:6f:e8:01:39:
30:77:75:7c:63:27:f7:2c:1f:4c:08:d3:4e:a7:ba:
31:aa:36:89:6a:86:04:41:a3:fe:27:9a:d5:20:2f:
1c:ec:2a:6e:a9:49:31:b7:c3:9c:18:ba:68:16:2e:
37:6e:3f:19:e2:fd:13:07:fe:5f:8a:b2:27:02:8d:
bc:80:25:5b:19:25:39:ca:c9:4c:d4:ab:be:11:d2:
98:9a:82:71:a0:93:ef:71:8e:a8:ad:6c:fe:43:42:
eb:67:6b:fb:a8:97:57:6a:b6:d4:f9:9c:fb:01:00:
ab:34:12:32:d0:f8:81:fb:9f:d9:34:0f:86:87:96:
d4:0a:d3:4c:aa:a0:76:87:42:b5:b3:3c:a8:fd:83:
ec:05:b9:96:0d:fc:5a:d2:11:e5:42:da:9b:de:bd:
49:d8:17:5e:cc:02:a0:17:cc:d1:c8:1c:c3:3c:da:
d0:cd:24:e0:c5:be:71:90:be:5b:2e:dc:05:3d:58:
f3:99:ec:2a:84:4b:05:f2:95:c2:ab:84:c6:76:d6:
66:97:9c:04:4b:10:20:4b:c6:6f:96:ec:77:1d:73:
9c:2c:7a:8a:4e:19:ce:ca:52:15:56:94:5c:81:8c:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CC:A5:3A:31:11:15:D7:86:65:BA:D4:D7:D9:08:6C:16:25:24:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b6:73:eb:74:1d:0a:ef:4d:87:d1:a1:82:54:43:bf:e8:fd:
b0:83:1a:13:c7:85:bc:31:65:9d:28:7a:a9:8e:89:07:10:ef:
6f:58:95:eb:9d:9f:63:e7:21:36:49:fb:ca:66:75:39:b3:94:
de:e2:cb:b1:c3:34:cc:43:bb:a7:a1:5f:b6:98:76:22:ed:8f:
7d:d1:d3:d5:d1:11:63:36:b9:fe:d3:61:ac:71:31:ad:89:e5:
37:98:76:8a:2f:ca:e4:6c:c9:c0:bb:51:14:2c:4f:f3:72:7a:
c2:48:03:ca:16:ad:78:4f:4e:14:6a:93:10:3a:41:e3:2e:94:
94:a9:61:6e:04:08:50:b3:18:4d:93:c8:25:87:91:f9:80:06:
27:de:b2:eb:16:67:0c:4d:32:c3:1d:ab:96:f2:6d:71:1c:9c:
b6:84:20:63:12:5b:cf:53:d5:e1:0d:cd:a7:91:5f:aa:8f:d1:
95:a6:83:c5:29:ea:f9:61:8c:e7:3d:61:fc:4c:fe:88:e4:20:
12:73:f6:af:aa:7d:8c:92:94:2a:bc:bc:98:14:ca:65:0e:97:
2b:32:ea:e4:44:35:81:87:1d:92:d4:e1:95:91:86:c0:ac:70:
e9:31:00:38:cd:94:9c:56:ec:66:ff:ba:69:45:fb:ab:e7:da:
ce:0a:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:49 2026 by rpki-client