Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
File: 28181159-5695-4944-b901-f84b836b4d8f.roa (raw, json)
Hash identifier: /k+uzoBrinZtwS6hdxXNhlCU3zgnvsRE/i5dD3dxxLA=
Subject key identifier: D7:25:DD:FD:63:96:B3:A0:5F:FB:8C:78:8B:5D:75:10:28:F7:FF:D7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78488654FC477B148B073F3ED4561D05166C7CD0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
Signing time: Tue 04 Aug 2026 01:10:08 +0000
ROA not before: Tue 04 Aug 2026 01:10:08 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:48:86:54:fc:47:7b:14:8b:07:3f:3e:d4:56:1d:05:16:6c:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:08 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=cf841d6e9955a0d02d434ae3b9148b918c0b02a12f0dd24c91f935863680285c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:62:e6:5c:e7:38:49:5a:e8:dc:d0:d5:de:
48:d9:79:d1:2a:8a:4d:6c:03:05:36:0f:ea:fe:7b:
f5:dc:67:07:14:8a:73:b2:f9:a4:53:a0:2f:58:f8:
95:d1:21:40:5a:36:2f:4b:65:bd:cd:48:b7:c0:1e:
40:ef:48:03:81:f1:43:5b:9c:30:98:3e:b1:1b:b0:
82:9f:32:46:b6:a0:df:64:e9:73:09:37:f6:6b:e8:
da:d0:a0:d0:87:6b:97:2a:52:52:79:ba:48:e3:aa:
8c:59:e2:7b:7b:45:2b:c8:55:dd:2b:27:58:e4:1c:
9d:a9:51:f0:72:7d:b7:5f:f8:56:c1:58:4f:88:28:
aa:95:c4:22:53:3f:e7:f3:ab:34:df:7d:22:fb:bc:
b1:bb:29:64:f0:60:0d:02:d9:6b:8a:f9:e9:dd:fb:
48:5b:5a:7f:0a:5a:e0:86:81:39:c5:71:35:58:33:
2e:06:79:37:10:06:32:fb:fc:7f:18:8f:39:57:f4:
58:64:ae:6f:a6:a8:19:03:56:ce:4a:84:df:cb:d5:
ed:91:81:10:c4:1a:4f:10:bf:a1:b1:05:7f:64:4d:
85:64:68:2d:69:2a:3c:73:5d:89:bb:63:da:87:f9:
32:94:14:5f:fb:b2:4c:ef:ec:19:6c:33:8a:4c:af:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:DD:FD:63:96:B3:A0:5F:FB:8C:78:8B:5D:75:10:28:F7:FF:D7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/40
Signature Algorithm: sha256WithRSAEncryption
87:0b:f7:4f:f3:7b:52:86:89:71:2e:1b:28:d3:ba:3c:74:4b:
2f:5d:43:16:0f:36:8c:2b:35:30:a1:37:fb:27:6e:8c:3f:0a:
e0:6a:23:67:5b:2b:69:2e:c0:c7:ef:56:f1:53:50:d3:4e:68:
87:b7:e2:ba:7f:d1:56:fb:76:94:21:ee:7e:2a:98:21:e0:64:
ec:f2:65:68:79:1f:9c:2c:cc:5b:8b:c8:27:a8:9c:0a:4d:3e:
26:10:4e:ea:1c:64:db:78:f2:10:5a:93:5c:da:0b:df:aa:85:
89:f8:1a:82:27:db:22:39:87:78:50:02:0c:70:7b:3f:d9:41:
d4:3e:03:69:22:a3:51:9c:68:42:33:58:d1:fe:54:53:97:e1:
41:b7:68:43:4b:3c:82:a8:ad:fb:09:c4:a8:53:ed:05:5e:dd:
e3:e2:9a:77:dd:f9:4a:88:06:fd:77:3a:9f:83:94:1e:95:03:
8b:3c:25:a7:a4:7f:79:ac:53:51:15:b3:f7:b5:6e:b9:a7:6c:
e0:b9:b9:2f:28:d7:6d:7b:21:09:61:4c:91:ee:d8:22:dc:1f:
d3:3d:88:15:c8:cd:f1:60:c1:34:5e:48:68:da:5b:fe:30:09:
e7:2c:3c:22:33:7f:6d:5b:4d:bd:2f:f8:19:3b:0a:6e:9e:85:
7b:a1:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:55 2026 by rpki-client