Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dc7b564-c3e1-49ef-a78c-f36f4139b43f.roa
File: 2dc7b564-c3e1-49ef-a78c-f36f4139b43f.roa (raw, json)
Hash identifier: c3RKnUbMYY4N7EKGJAcxmjn3qFS5oeP/vFHRersn5HI=
Subject key identifier: 76:52:3C:17:06:A2:DD:AF:EF:56:ED:CE:F1:26:A4:F4:43:26:50:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48E95BB86E3E9C1B112B4345C2F46CB30BF69A3E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dc7b564-c3e1-49ef-a78c-f36f4139b43f.roa
Signing time: Fri 07 Aug 2026 04:50:20 +0000
ROA not before: Fri 07 Aug 2026 04:50:20 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e9:5b:b8:6e:3e:9c:1b:11:2b:43:45:c2:f4:6c:b3:0b:f6:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:20 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d9393ac23a0e0d936ea249c3999bf9613304b7cabd5e43eee63a70eedfbcc51c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:ae:b3:0f:89:8b:e1:ba:a4:fe:c2:38:f7:
60:8b:c2:63:a2:b7:42:39:25:56:2f:eb:2b:f2:7e:
fe:dc:f9:78:1a:fd:fd:5b:cf:10:16:52:16:84:db:
47:c8:fc:08:56:b1:4d:8f:c9:9e:92:de:ce:ff:a2:
d3:83:4f:c3:3a:6d:0e:c3:0f:f6:ef:0b:1b:7c:aa:
56:e7:b7:56:58:4f:f9:d6:e0:c2:51:d6:3e:7c:6c:
f5:2d:2a:4d:8c:4d:1a:6f:ab:82:de:bd:84:c2:39:
21:22:19:e9:9d:aa:fe:31:81:ee:09:eb:99:75:8a:
00:4a:44:1b:df:b9:6d:c0:29:d4:e5:c0:5e:00:8d:
49:31:8a:98:1d:91:fc:20:39:8a:e5:bb:64:1c:bd:
4f:c0:f9:a2:12:98:80:d7:86:d0:44:0a:8d:75:98:
a4:c5:0c:cd:ff:49:c2:cd:7a:f8:84:4c:63:80:f0:
1d:df:d5:51:17:b5:06:ea:7f:84:70:cf:2d:7d:76:
8e:c7:07:1b:d8:3d:57:24:3f:20:19:30:22:5c:6b:
a0:ac:ec:bc:84:d5:0b:6f:dc:73:36:1f:9e:bf:20:
a8:d4:2c:5d:cf:7a:72:11:7e:dd:55:bb:04:68:30:
8e:4a:9b:dc:35:7c:cf:73:bd:99:ad:83:de:d5:89:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:3C:17:06:A2:DD:AF:EF:56:ED:CE:F1:26:A4:F4:43:26:50:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dc7b564-c3e1-49ef-a78c-f36f4139b43f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:a000::/40
Signature Algorithm: sha256WithRSAEncryption
42:2a:2d:50:b2:d5:cd:8b:1e:d0:a3:29:92:28:26:38:91:30:
90:09:58:41:5e:32:e8:69:38:79:35:1b:71:a5:af:b4:86:55:
63:39:41:13:71:6f:83:2e:61:be:4a:3b:23:c3:df:b3:5a:ab:
5f:e1:3d:2f:16:82:17:55:b1:78:09:18:57:24:e4:cf:51:d6:
27:b0:e3:98:47:b3:45:84:d9:6f:04:48:f5:70:62:ba:3b:01:
ce:fe:92:31:32:2f:23:2f:47:9f:c8:9f:e7:37:d0:73:90:c8:
5a:dc:f7:92:d0:3a:5d:3c:5b:d5:e0:fb:fb:86:53:0e:fe:64:
b6:21:d3:3b:c2:82:94:47:b4:b9:a1:f7:e2:af:a2:ec:57:be:
1c:af:a9:45:45:b4:3b:cd:11:27:06:8c:1e:41:8c:ad:d2:17:
c3:17:77:44:09:c4:85:60:0b:72:29:4f:e9:5d:de:c6:2b:01:
f0:90:4c:68:3b:36:4a:9a:21:96:24:60:d0:70:76:45:e8:91:
85:72:35:81:51:fe:1e:57:14:e0:68:12:ae:6e:88:d6:76:7e:
94:09:cc:88:94:50:df:f8:e0:30:31:33:40:f2:26:9e:ee:01:
6f:72:e6:89:0a:b8:71:02:8a:3e:e4:47:a5:01:7f:a1:eb:56:
38:8f:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:21 2026 by rpki-client