Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
File: 1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa (raw, json)
Hash identifier: NaL24eiKQO+q/g3xHgSpmnbL5BLYK3xfKP8Fb1Lf1y4=
Subject key identifier: C1:33:2D:EA:BD:61:9C:17:C5:5E:27:84:37:44:87:01:48:AC:D8:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A03DACE0F2B03D1F7158D63CCDF62A29DE6F97A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
Signing time: Mon 03 Aug 2026 02:50:07 +0000
ROA not before: Mon 03 Aug 2026 02:50:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:03:da:ce:0f:2b:03:d1:f7:15:8d:63:cc:df:62:a2:9d:e6:f9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=5ffdffa08a5e19be3cc34685813b4ce8c1f0310a4559466656562749fc638b88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:7e:14:58:ff:67:72:81:24:17:36:36:2f:
27:ea:40:f9:44:27:f8:e8:52:bc:88:6a:79:2e:8d:
79:ac:dd:60:77:22:11:79:83:4f:e8:8a:2f:8e:27:
8d:59:b3:83:76:5b:2e:dc:38:ea:cb:cd:0f:7f:10:
9b:5a:79:70:4f:d9:e0:bb:bc:e6:d4:82:a6:92:4e:
c7:4f:3b:cc:aa:97:fd:de:02:d6:c5:42:b7:9a:46:
8e:4c:fe:56:4e:f3:91:6f:83:31:a0:39:54:47:f8:
08:23:60:78:3e:03:60:e2:fb:b4:59:e8:6c:72:f4:
82:c5:02:8d:5f:4f:f2:42:99:cd:20:f7:5c:8e:44:
ff:b7:20:42:26:38:98:f2:82:2c:9d:3b:0c:46:3d:
f1:02:1a:01:33:78:df:6f:53:b8:bb:4b:a1:f8:11:
21:e4:8c:03:04:c4:19:a4:39:e4:e9:ae:67:ae:3b:
76:c5:d2:24:bf:15:20:26:9e:21:60:08:a9:62:35:
55:12:8e:f4:fa:3b:8b:a6:87:ac:38:f9:51:00:d7:
41:5c:01:ed:7d:94:74:39:d5:87:02:3c:7c:33:65:
9a:7f:02:c5:a6:b1:8d:a9:67:a4:2e:09:a6:75:13:
f8:fd:ae:c4:11:d4:b1:43:1d:0c:b6:22:b4:0d:bf:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:2D:EA:BD:61:9C:17:C5:5E:27:84:37:44:87:01:48:AC:D8:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:82:9f:c6:fc:d8:fd:cc:6b:d0:30:d3:cd:1e:7f:11:95:aa:
61:5a:ab:33:f6:84:37:e4:5f:1e:d7:5d:0c:00:b6:41:c7:83:
46:c4:0f:d3:2b:d1:95:43:ea:cd:85:0c:ca:41:1f:90:36:59:
c0:f2:ec:17:28:94:37:ac:4f:8a:6b:63:66:87:f5:76:c2:ae:
c5:e1:75:d3:38:a4:4d:77:33:b3:8a:26:0f:dc:b9:02:fa:c5:
85:7b:b6:cc:d5:b2:d5:b7:a4:7f:e3:81:32:88:86:81:df:67:
25:d9:91:14:ad:45:0d:b4:b6:67:22:7c:ee:b2:d0:4a:3a:46:
ac:2f:fb:50:cc:e7:31:d4:31:bc:23:b1:38:b0:86:f1:84:71:
bb:30:30:fb:13:0a:58:23:b1:38:19:c2:65:e5:d0:93:cc:9c:
03:0f:0c:a4:1d:fd:40:0d:64:98:aa:15:23:e9:e7:65:58:67:
57:c1:06:d6:cf:a6:b7:ac:3d:96:03:ea:84:6c:a3:7d:a0:6d:
4d:80:47:39:ed:78:3c:41:ad:0d:3e:fc:63:ee:d2:2a:ef:2f:
b2:79:dc:ae:4c:b6:b3:1a:59:c0:2d:66:d3:71:1a:06:08:73:
42:e8:ac:d1:c0:b9:41:03:8c:ff:05:88:52:68:bf:c7:62:47:
cc:4e:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:07 2026 by rpki-client