Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
File: 2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa (raw, json)
Hash identifier: mWAzAKoTnX3QpzXtmCHgo3O3RGCUoeoAjwPAu2gm+Uc=
Subject key identifier: 35:ED:09:E4:B0:78:78:5C:18:71:84:B3:C0:77:01:85:98:87:AF:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 129956BD41E1A551663FF43F57D9E94AE3C1BFF6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
Signing time: Mon 03 Aug 2026 02:50:08 +0000
ROA not before: Mon 03 Aug 2026 02:50:08 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:99:56:bd:41:e1:a5:51:66:3f:f4:3f:57:d9:e9:4a:e3:c1:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:08 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=82905618680cdb136a054a8be53af3a3364bd6e7f45013c17eb38e5ef273b4ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:dc:ec:10:9a:30:6c:86:0f:a2:43:ac:a2:
57:b6:a4:25:1c:98:ed:f6:09:15:60:c9:33:6e:9a:
54:5a:04:0a:32:16:3e:db:cf:c8:b1:21:ed:dd:e1:
1e:9d:94:4f:d4:1e:3c:5c:8e:5e:bf:2a:5f:5d:3b:
d1:f7:7b:76:38:dc:39:b2:46:7c:33:8a:31:4c:42:
81:1f:e9:1a:3c:0d:d4:cf:8c:f4:6e:89:6a:5f:de:
3b:79:9e:b1:a0:cd:77:87:85:23:7b:80:cf:f4:9b:
6a:d4:3a:61:d6:d2:ae:67:4e:2c:96:64:48:eb:6d:
00:2f:3b:9f:a2:91:91:39:9b:50:eb:08:ff:32:58:
e5:82:a9:0f:7f:b9:90:22:53:e8:d0:e7:bf:f3:89:
35:75:62:64:88:5f:25:06:a0:fd:fa:4a:9b:10:1f:
1f:7c:8f:a6:8c:ae:a4:ea:95:bc:29:6c:00:bb:e8:
99:bd:15:92:ce:02:66:1a:72:6f:be:e7:0a:3f:88:
d2:0c:a2:6e:c7:1b:51:18:d8:17:1f:07:b6:d7:f4:
d6:e7:c3:ee:67:0e:fe:66:66:96:09:24:e7:91:82:
7e:31:c8:65:00:3b:c4:1e:14:19:22:77:24:3e:08:
08:b7:5e:d9:b7:0e:ea:fd:cd:32:9e:ef:73:b7:d2:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:09:E4:B0:78:78:5C:18:71:84:B3:C0:77:01:85:98:87:AF:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:b000::/48
Signature Algorithm: sha256WithRSAEncryption
1f:84:ee:c8:4f:e9:7a:e8:85:30:7a:09:b2:0f:64:8b:7c:86:
ab:6c:23:09:ae:50:ac:49:bc:75:67:52:96:e8:7e:80:90:6b:
eb:69:5b:69:2c:6f:37:39:c9:46:1d:fa:53:ca:2d:57:21:62:
b0:cf:18:3a:dc:3b:5e:1d:85:ac:6e:21:b3:2d:15:d1:99:19:
eb:28:e0:29:fb:0c:bb:40:e3:13:b8:df:91:27:4a:bc:63:d9:
5e:65:75:a1:db:ed:62:00:6f:21:e6:00:a9:87:97:da:ca:4b:
7e:fb:53:ce:84:f9:ad:0b:1a:97:44:f8:7b:7f:9a:d9:0a:f3:
7e:65:4b:33:27:4d:a1:81:a8:fd:89:eb:b8:09:61:b9:6b:96:
50:9d:6a:a1:4d:97:2f:ec:d3:d5:ea:03:04:5d:8f:e6:c5:94:
1c:e4:17:0c:09:3f:57:36:82:e6:c3:1c:18:0f:ff:e1:6f:43:
e6:16:83:5b:85:c8:71:aa:27:44:f8:c9:c3:0b:b3:42:ce:1c:
8b:91:25:45:32:9d:05:96:f2:c7:08:67:2d:ea:1b:ea:4b:0e:
5b:25:c0:a6:4d:79:fe:8f:ca:47:fc:20:06:2c:6d:e5:b6:0d:
4c:d2:b3:09:4a:fa:21:ad:36:0f:f0:6a:a2:78:7f:83:e1:b7:
75:31:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:29 2026 by rpki-client