Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32bd9a79-3a9c-4dd8-83e8-e888f62452af.roa
File: 32bd9a79-3a9c-4dd8-83e8-e888f62452af.roa (raw, json)
Hash identifier: dMX79YZiXiJ+4dMo7l/Vcc4ynxdzFqmIiNqV5CPGGoE=
Subject key identifier: 63:32:C8:19:11:4A:34:2E:D2:77:7A:5D:D9:91:A0:76:23:95:5F:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 220256564FA24932A31EFBB6D78C85E86EE8CA79
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32bd9a79-3a9c-4dd8-83e8-e888f62452af.roa
Signing time: Wed 09 Sep 2026 15:12:30 +0000
ROA not before: Wed 09 Sep 2026 15:12:30 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:02:56:56:4f:a2:49:32:a3:1e:fb:b6:d7:8c:85:e8:6e:e8:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:30 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=0386bbb1fc242973398eccbf7e5f01546c47d8e689c3ceb302061ddae0000f6a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:00:95:ab:d6:f3:56:7f:f2:9d:2d:f1:9f:
1b:55:45:87:8d:15:27:a7:3b:a1:d6:4e:de:8e:ae:
ef:da:81:ea:2f:69:2c:5e:6d:82:02:5a:7c:ab:4e:
b8:c4:d3:21:90:79:fd:63:96:5a:78:5e:ac:f8:e0:
fa:f5:33:fa:37:7c:01:4c:55:d1:4e:05:7f:4c:e6:
85:4b:f9:ad:68:80:dc:ab:85:22:d9:58:a1:d7:1a:
9d:42:db:ec:27:05:9b:02:76:59:ef:5e:96:42:96:
c7:23:5d:93:eb:f4:f1:78:db:45:47:c9:dd:fa:09:
90:1d:06:01:1d:20:d9:39:31:0b:1c:2b:85:59:41:
39:47:41:b7:3a:94:04:95:f8:c6:67:79:0e:e5:26:
60:c1:63:60:7a:63:59:06:48:d7:79:01:ec:55:94:
05:68:cd:c5:77:42:c0:2b:07:c3:4c:5b:a1:1f:52:
9b:04:62:6e:bd:a4:b2:f9:88:e2:65:53:6d:3c:8d:
5e:4e:91:8f:68:f5:24:17:37:67:99:9a:19:d6:eb:
5c:aa:cc:6a:b2:f5:a1:11:84:64:c0:65:a9:31:2e:
4c:40:6d:d7:6f:4a:6e:22:57:d1:1e:89:3d:e3:15:
e4:b4:d6:3b:82:95:46:5b:a7:e9:cf:02:17:ed:d4:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:C8:19:11:4A:34:2E:D2:77:7A:5D:D9:91:A0:76:23:95:5F:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32bd9a79-3a9c-4dd8-83e8-e888f62452af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4880::/48
Signature Algorithm: sha256WithRSAEncryption
85:38:c9:89:64:85:4b:5e:34:fc:7c:94:c9:7d:5d:15:d2:d2:
fc:60:cf:06:ca:56:4a:ca:d3:29:33:cd:71:fe:5f:32:e9:d5:
fb:c3:8b:8f:38:0c:20:ac:40:9d:c7:1d:9b:17:56:24:b3:ae:
fe:6f:bb:e2:aa:d6:0f:50:42:86:4b:7f:c5:4e:7a:5c:0c:11:
a4:ce:93:c4:9b:58:f9:79:00:cc:1a:0b:08:cc:7d:74:26:0e:
6c:6c:9e:a3:00:d3:af:cd:29:ae:cf:51:79:4f:d4:52:f3:70:
be:dd:37:88:ca:10:3f:87:5c:0a:9f:f1:9b:df:fb:0f:32:3e:
85:e2:f9:e9:b3:67:66:91:ba:f8:f0:99:15:0c:3a:51:8e:0d:
a5:28:1f:d6:e6:1e:2c:38:e8:b9:1e:c8:68:7e:ab:3d:f4:e1:
1f:5d:eb:d8:79:cc:55:3f:9c:4d:cb:09:9f:3e:19:cd:71:4a:
0a:47:54:ee:33:62:b4:9e:bb:c2:4f:3a:fa:24:8e:ce:6e:ea:
10:1b:f1:60:5d:15:65:a2:f5:5e:19:04:04:54:7d:4d:2a:69:
be:ca:0f:68:4e:4d:d3:8e:44:f1:cb:5a:a9:41:8c:a3:f0:3f:
97:32:d5:9b:92:a3:5d:15:d5:26:ba:ca:72:32:9a:00:9c:ce:
5f:24:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:24 2026 by rpki-client