Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
File: 2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa (raw, json)
Hash identifier: pKjRHU3oNSqZU2Myv/P2qRKal31OSwvDYQOqce7ZRDE=
Subject key identifier: A8:D4:17:9E:C2:2E:5D:63:74:F2:42:B6:85:ED:DE:9E:50:9B:B2:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2BBBF71989427E93905C40976BE65DE11B217F28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
Signing time: Fri 07 Aug 2026 04:51:03 +0000
ROA not before: Fri 07 Aug 2026 04:51:03 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bb:f7:19:89:42:7e:93:90:5c:40:97:6b:e6:5d:e1:1b:21:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:03 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4f177e7003d9b945e753cdb00ee7ca4892259ede3c6c7122fabd74a6ab0e9222, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:9c:42:5d:ac:03:fd:ac:ba:3d:78:42:97:
ec:f3:d5:00:7c:17:92:fe:fc:c8:4c:2f:37:0e:92:
79:ba:3d:55:9c:36:07:a3:c4:ae:8e:7e:f7:17:81:
9c:f7:ce:da:65:d5:01:a7:21:ff:a6:16:16:af:a9:
34:8f:64:bb:de:31:7d:de:a4:55:ed:90:0d:91:17:
22:dd:d9:12:ff:ab:fa:e5:62:3d:08:fd:ae:19:e1:
08:e7:5a:48:62:07:e4:22:d7:1e:bb:e6:eb:81:d1:
af:42:fc:ee:f3:d2:b3:36:0a:11:de:8f:a4:b6:3f:
2c:a4:0b:4f:81:cc:4d:40:79:69:ab:7a:f1:a8:df:
66:a7:57:d8:13:b5:97:cb:f6:e1:25:47:6a:ba:d8:
1d:7d:b6:ed:b3:81:9f:58:a1:cb:23:fd:86:2d:ec:
e3:66:ab:fd:c1:ac:c1:a1:03:c7:0b:48:db:0a:33:
b3:1a:f0:eb:f3:9b:8e:f4:dc:d6:26:49:9f:b6:10:
c6:88:23:b6:0f:89:1d:d4:e5:c3:61:e3:5f:58:80:
cd:b7:c1:14:1e:ef:1a:07:24:54:4d:92:ac:89:57:
24:11:28:92:e8:aa:04:1e:ab:ec:7a:d0:58:4e:57:
a9:55:95:8a:7f:2e:fb:bb:61:0f:26:33:cb:f6:d4:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:17:9E:C2:2E:5D:63:74:F2:42:B6:85:ED:DE:9E:50:9B:B2:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:6000::/40
Signature Algorithm: sha256WithRSAEncryption
22:05:29:03:30:7e:09:31:cb:15:96:39:2c:50:0e:fd:31:e8:
72:94:39:c0:e7:1a:de:7f:cb:b6:5c:2c:44:71:06:38:a6:b6:
18:5f:70:af:f3:2a:3c:b4:25:87:81:ae:9d:cd:74:a0:e6:46:
bf:47:1e:11:72:03:ec:06:37:a7:dc:03:c1:c1:fc:a3:e2:40:
d3:d3:92:3c:77:b3:54:8d:00:e4:6d:f2:7c:15:1c:20:39:c4:
64:6b:04:d6:6e:da:6a:a7:8c:2c:cc:88:f7:92:04:06:e2:c5:
3b:a6:c6:a9:64:09:69:4f:b1:d3:59:ef:65:44:b5:df:4f:3f:
e4:cd:a5:44:e3:cb:ee:fd:71:ce:40:3f:bd:30:35:95:d4:53:
17:92:1e:ee:1d:91:79:cc:b3:b7:92:b1:ec:32:76:15:4b:ae:
a5:92:bb:ee:03:88:8f:69:5f:34:1b:7e:5a:3d:5b:5e:4d:58:
19:0d:38:eb:81:b1:f3:4f:d3:cd:21:d5:a4:a7:71:cd:ce:e8:
ac:0b:ea:e7:03:32:b7:09:d8:3d:72:1f:47:db:70:29:fa:8c:
72:96:99:2f:cf:47:54:0e:1c:8d:a5:10:24:9c:c7:2f:88:33:
31:df:8a:f8:4b:37:9b:a7:2d:fa:b4:1d:48:e7:49:92:8e:34:
54:51:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:10 2026 by rpki-client