Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fa41d34-0465-4e2e-a269-23175f0ddb04.roa
File: 2fa41d34-0465-4e2e-a269-23175f0ddb04.roa (raw, json)
Hash identifier: jnuXYTUzba/JGnmwRDWNbDvCK+XMrbif9HDjK9JQ+dk=
Subject key identifier: DE:E5:23:92:5E:7B:82:07:C5:3A:EF:7D:35:AA:14:43:1D:7D:0F:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5246BBD447E9E94C27DF872F0A5F1F0BFD135379
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fa41d34-0465-4e2e-a269-23175f0ddb04.roa
Signing time: Wed 09 Sep 2026 16:15:21 +0000
ROA not before: Wed 09 Sep 2026 16:15:21 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:46:bb:d4:47:e9:e9:4c:27:df:87:2f:0a:5f:1f:0b:fd:13:53:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:21 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=d59e202ebd0163a20710ca9daa869e1779a99ccfec5e9a13b1df6d1c4a34c49e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:50:f3:cb:c4:bc:17:84:6e:5e:bc:16:2e:
fb:89:3b:8a:cf:09:d4:1e:27:31:57:a9:c5:0d:04:
98:94:fe:7a:f6:8e:5f:a8:63:e3:a6:50:f8:8d:0e:
34:06:48:1f:66:43:41:3d:55:a3:bf:71:ed:13:a1:
c0:e0:59:98:c6:74:6e:62:c3:4a:b2:08:50:52:40:
92:f9:35:95:98:14:32:ee:83:5e:84:80:26:17:37:
66:d2:14:12:8d:85:61:ee:40:6a:a8:6a:26:0d:f0:
ff:54:9c:7a:2d:0a:d8:71:9a:c9:32:9c:05:3e:1c:
b8:93:85:92:19:c0:f8:26:6b:2b:a2:8e:94:9b:d4:
5b:4a:cd:a9:65:ae:c5:7b:3c:97:6e:5f:5e:c1:fd:
4b:c6:07:dd:5b:ac:a9:99:a6:8d:00:28:b3:94:48:
f6:c1:5f:d4:2a:63:87:a2:77:f3:b3:f5:b8:14:d1:
21:3f:9b:56:ae:f2:d2:dd:9b:ca:e2:4a:bf:4b:07:
cf:5e:49:03:1b:4f:fb:59:7b:67:c9:86:a5:f6:a1:
4d:ca:2c:26:ea:24:72:a1:df:95:51:75:94:d1:8c:
47:49:39:04:54:ff:04:38:95:a4:9c:0d:cf:65:d1:
64:3b:4a:78:9c:81:88:79:a1:ce:0f:a0:a0:18:dd:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:23:92:5E:7B:82:07:C5:3A:EF:7D:35:AA:14:43:1D:7D:0F:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fa41d34-0465-4e2e-a269-23175f0ddb04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8800::/40
Signature Algorithm: sha256WithRSAEncryption
01:32:51:4c:31:c8:e5:01:1f:39:9d:84:df:b9:6a:95:33:8e:
66:7e:99:3f:f7:af:3d:de:89:42:0e:6a:6d:42:d6:72:62:ea:
44:60:16:4c:f9:29:f4:e5:98:d1:c9:c8:bf:d9:6a:e2:fb:f1:
18:ce:74:6f:ee:ff:3e:58:8e:a9:76:06:82:ab:11:94:58:4e:
a4:db:8f:79:24:3c:cb:b3:da:01:9c:53:a1:a1:c3:03:4f:56:
af:fe:50:57:99:be:57:d4:c2:2f:d0:a1:e2:c4:06:41:01:c7:
5d:8d:af:ad:4a:8f:8f:da:70:55:95:46:03:7f:51:1a:0a:ed:
c5:4c:34:8a:76:e1:45:a2:a7:de:35:9e:b0:fe:46:f8:bc:b8:
92:42:3f:1e:da:76:51:93:79:2f:2b:09:b0:02:ea:2f:77:8e:
c3:5d:26:f6:40:a3:9b:23:3c:2a:a1:77:6f:04:a4:03:25:32:
ae:05:3c:f8:dd:da:79:aa:36:13:90:fe:27:aa:86:57:97:44:
c1:66:b5:ef:39:c1:6d:4b:44:b8:51:38:69:ef:62:91:1e:f8:
de:e0:1a:47:1a:bb:dd:c1:79:b2:ab:f1:e1:1e:7f:7e:1e:b4:
a0:e2:e9:ba:48:41:3f:9a:f2:63:a2:02:6d:9b:2c:77:98:8c:
53:01:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:13 2026 by rpki-client