Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: +hhcKTr0pcJlk8plQy/8gElsshqFfSHSiXWwMd4FIoE=
Subject key identifier: FD:1F:96:7D:00:34:02:92:F2:BF:6A:4D:AA:77:A4:DA:B5:CF:84:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DCED9F3CFBA853AD0DFE241CADC15C1490AABAA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Fri 07 Aug 2026 05:40:25 +0000
ROA not before: Fri 07 Aug 2026 05:40:25 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ce:d9:f3:cf:ba:85:3a:d0:df:e2:41:ca:dc:15:c1:49:0a:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:25 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=74245bcdc05d192a4190b4dcadae52ddb87cfca64f46fb02433d8ed121f10747, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:a8:dc:b2:6c:c7:51:05:34:68:75:c7:fd:
0c:cd:87:f6:f3:b2:b9:2e:fd:53:96:42:0b:ff:e1:
83:b2:92:52:c7:27:16:85:4f:06:ce:2e:b8:4e:1e:
d4:5f:18:3e:6a:fc:e1:98:38:cd:03:d3:68:8e:f8:
8c:64:2c:3e:8f:37:4d:bd:2d:34:83:f4:0f:f7:25:
fc:49:21:1b:8f:5a:16:d8:36:2a:a1:48:90:b9:3a:
c1:d0:75:97:b3:df:58:9e:06:dc:32:e6:56:14:f1:
13:10:b6:89:77:6f:b4:72:b3:e4:ee:f4:d4:b4:36:
83:43:b6:ad:80:6a:5b:f7:74:8f:d3:0b:2b:48:26:
1a:a7:f6:f2:e7:08:ee:e5:db:dc:60:7f:10:e3:2d:
93:ac:92:fc:04:60:c7:89:02:75:f9:c9:5c:8f:75:
54:28:3d:f1:7a:34:b1:1c:e2:92:28:9f:f0:64:aa:
c6:f9:41:cb:89:3a:03:33:c9:00:9c:46:bd:e5:29:
2b:30:ac:67:a1:bc:32:62:ce:34:cc:77:5b:ac:48:
25:d7:41:e4:b5:fd:63:bc:67:77:f2:0b:25:6d:87:
53:28:5f:56:8b:20:1a:34:08:2e:73:83:1a:dc:00:
eb:02:3a:df:a1:af:9b:b8:48:4e:c7:4f:dc:bf:97:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:96:7D:00:34:02:92:F2:BF:6A:4D:AA:77:A4:DA:B5:CF:84:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a3:42:0a:70:0e:6a:c0:31:94:63:74:d6:d6:4f:37:a3:b3:bd:
e6:e0:f7:79:42:2a:03:03:70:a9:5b:83:b0:20:b7:3d:f7:f1:
69:11:d1:dc:d3:7c:ba:8d:56:9c:89:fa:1c:e5:fd:e1:a8:44:
d7:08:80:eb:4e:61:cd:f2:80:14:ab:ce:0f:1b:86:30:30:bc:
00:2c:86:01:fd:bf:83:a2:43:3a:70:6c:c5:be:83:8f:b1:a2:
ff:65:c5:49:7a:c9:e5:dd:7e:fd:76:72:4d:d8:91:11:96:d4:
90:fd:5d:77:bf:63:47:5b:ae:f4:2e:79:67:fd:08:ce:d8:02:
31:12:12:24:d0:1e:aa:29:01:6a:02:81:22:34:2b:2d:60:1e:
c7:76:67:9f:b1:0c:82:6b:f2:b5:8e:49:95:4c:d1:b4:f9:48:
b0:2d:56:35:24:68:f0:bb:9f:43:1d:c5:07:1b:34:b7:88:ea:
3b:60:dd:57:51:9f:06:b7:61:9b:f8:6a:c6:b7:9d:eb:a0:8c:
fa:34:43:51:49:8a:62:1b:28:0b:1e:24:5b:9f:6d:16:80:68:
7e:09:71:02:1b:75:ac:81:c2:8e:97:25:f5:8c:e7:65:e0:01:
5e:c1:f3:6c:47:a8:d4:54:06:ec:44:5e:fd:84:7c:16:99:99:
ae:d5:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:50 2026 by rpki-client