Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/220ed56e-a45d-4873-82fb-e87af8afefc6.roa
File: 220ed56e-a45d-4873-82fb-e87af8afefc6.roa (raw, json)
Hash identifier: gW4HA4sa7i5sZ6FSjh5VLqecVfmknOrms0AvxeT64j4=
Subject key identifier: D8:2E:53:2B:F3:B5:01:BF:BE:EC:09:BD:9B:31:CC:EB:36:78:09:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F12D5940222088E308ECCEB96B6D52019386F4A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/220ed56e-a45d-4873-82fb-e87af8afefc6.roa
Signing time: Mon 10 Aug 2026 00:50:14 +0000
ROA not before: Mon 10 Aug 2026 00:50:14 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:12:d5:94:02:22:08:8e:30:8e:cc:eb:96:b6:d5:20:19:38:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:14 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=6f00bdf6ad231a26cb166eabdd84e62b6f2b015395c427bc074aa106ee9e2a36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:c1:3c:cf:35:0c:34:d9:2c:8e:f2:7e:d3:
2b:50:87:7d:f8:2e:e9:5d:93:9f:7b:66:80:a3:88:
d9:45:e6:91:34:af:04:49:f7:e7:71:55:6f:12:07:
bc:2a:18:94:aa:7c:5b:fd:dd:9e:c7:da:43:e1:ca:
5e:09:f8:d5:8f:fb:3b:f2:58:ba:6c:37:dd:af:94:
dc:2a:fc:db:99:c1:dd:41:a7:08:b8:77:88:77:98:
a5:07:07:09:f4:6f:8c:d5:2f:6f:c0:93:64:d2:0e:
7a:46:dc:e8:e5:52:d4:a0:32:7f:ca:19:4b:91:b7:
70:78:ff:4c:02:51:cb:c7:85:98:56:a1:1d:08:b0:
a1:75:3f:8a:65:14:68:b0:0a:07:00:43:6e:76:82:
92:b5:2a:5d:b4:8f:5c:5c:97:d3:51:93:17:b7:00:
c1:e2:e9:22:7c:8b:9d:7b:34:5d:b5:07:b4:b5:52:
8e:92:d2:54:e2:99:a3:a2:11:c6:2b:b2:fd:1b:44:
01:5a:fa:f7:d2:25:97:9c:6c:25:25:cd:70:49:81:
58:d6:da:75:27:f7:c9:43:30:ea:1d:b4:dd:60:70:
30:4a:a4:1a:83:48:b1:11:8a:34:66:e1:d7:0a:8b:
20:82:88:1e:ea:43:78:33:6c:ec:00:55:63:9d:13:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:53:2B:F3:B5:01:BF:BE:EC:09:BD:9B:31:CC:EB:36:78:09:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/220ed56e-a45d-4873-82fb-e87af8afefc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
05:c5:3c:6a:46:e2:da:7d:f4:7a:18:86:48:50:ac:d0:4d:06:
67:8c:96:bc:81:af:01:93:03:94:87:7b:56:9d:6c:d3:27:7b:
42:b5:a6:0a:ad:9e:69:30:67:42:6f:98:c4:fa:d3:4b:71:b5:
fd:17:85:33:c5:e1:5d:6d:6e:a8:98:7b:45:fd:31:6c:c3:e6:
18:21:ca:71:d3:a7:12:3f:d0:9e:f7:8b:97:e5:93:19:a6:17:
e1:22:f5:a2:41:91:de:dd:40:14:b5:6e:4c:6b:0c:fa:0c:0f:
7d:5a:b3:06:f9:c6:fc:44:19:b8:ec:77:8d:06:77:12:6a:b7:
04:2d:5f:09:fe:df:6e:84:c9:03:79:ec:4f:84:f4:04:8a:ab:
e8:3c:b8:dd:47:b8:ff:ec:91:21:5c:bc:85:ba:bf:d1:c8:45:
96:ee:45:33:07:e0:80:bd:e5:e2:cf:0c:1d:67:80:37:02:83:
3f:29:a0:4e:07:d4:e2:65:78:21:1f:2e:1c:45:6d:cb:fd:1f:
29:0a:4e:56:0d:eb:83:b3:55:eb:9d:a2:bc:ac:0f:4c:68:c4:
52:82:d0:a6:01:f5:68:46:e3:06:a6:45:3d:65:9b:0f:a9:07:
22:17:8b:e9:9e:00:0b:ed:d7:91:a4:56:b6:1b:1a:f4:60:7c:
48:bf:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:59 2026 by rpki-client