Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
File: 357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa (raw, json)
Hash identifier: fUT8jWsQshvAUMU8gVNeIUTNpFJc5M5i6vYWswaSt+0=
Subject key identifier: 13:DC:18:63:FC:F6:60:7F:0E:5D:4B:4B:5A:32:36:81:20:8E:34:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16FB6EB35E9232CF13BAE573E5D31DFE84DF8498
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
Signing time: Fri 07 Aug 2026 05:20:54 +0000
ROA not before: Fri 07 Aug 2026 05:20:54 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fb:6e:b3:5e:92:32:cf:13:ba:e5:73:e5:d3:1d:fe:84:df:84:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:54 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8b2ef369207cf6902cb79d3851e0dfa5a256a979aa4336ac5fb188e0c7cbc35d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:31:3e:2d:91:db:7a:d0:f3:a6:4d:d8:e6:
0a:aa:15:d6:64:89:5f:07:22:d1:ff:9e:6b:45:fb:
95:98:94:50:5e:a9:1d:d2:47:cc:92:a3:fa:a9:4b:
ef:06:bb:b3:95:54:c1:bc:ff:45:de:3c:51:a5:cf:
ae:a2:5c:3c:74:7d:78:8b:7f:3a:fb:5e:ee:63:7f:
bd:cb:5b:a5:dd:b4:1c:8c:e8:ef:1a:a9:92:71:04:
c8:4d:35:b6:f7:bb:a8:b5:0b:9e:59:cb:bb:3f:0b:
55:0a:7c:29:43:bb:21:48:b8:9a:b5:6e:09:c3:f7:
8d:ea:99:80:de:2a:0f:77:0b:b0:36:bf:ee:b3:6d:
8c:d7:dd:e1:b0:fd:fe:67:0e:97:ec:1e:7e:4a:a0:
25:e5:97:36:e1:d3:cb:03:05:8b:4f:02:c5:59:c8:
69:f2:1e:e7:7b:61:94:55:43:cd:25:22:a8:85:b0:
c3:f4:11:72:eb:08:37:5a:9c:8b:fa:e0:7f:d5:57:
09:c9:3d:88:5c:83:36:17:9f:be:de:b3:63:c2:0f:
74:54:a1:e9:25:7d:7f:88:c3:96:39:a9:2d:53:81:
25:7e:33:62:e0:20:b8:dc:37:42:17:c1:7d:34:0c:
26:21:2d:c5:09:e6:89:01:32:7f:5a:88:a3:14:d4:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:18:63:FC:F6:60:7F:0E:5D:4B:4B:5A:32:36:81:20:8E:34:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1000::/40
Signature Algorithm: sha256WithRSAEncryption
02:f2:1e:20:8d:b7:62:cd:1d:7d:4f:fc:ce:97:e6:de:bc:2f:
29:7c:2c:2e:35:65:51:f6:40:d1:dc:e0:1f:63:25:52:41:3a:
87:c5:4a:a9:3d:f1:19:be:81:67:5b:eb:81:1f:2d:61:4e:65:
3d:93:10:92:17:16:e9:d6:ad:8d:b0:0c:6a:07:e4:3e:3a:c5:
a9:d3:1d:cc:85:e5:bd:61:17:ea:24:15:75:55:b4:75:74:e2:
d9:1f:5f:4c:f3:9e:86:fa:ef:e2:ec:87:c3:b3:51:53:94:d9:
19:e0:15:4c:99:cc:6f:bb:51:bb:ab:62:c1:c5:07:46:61:73:
49:2a:5a:83:33:75:c2:84:3e:9d:26:04:6f:9b:69:a7:bb:61:
5d:8a:17:96:b8:12:27:18:d6:6d:65:63:87:69:96:a5:d6:0c:
2b:79:33:00:2d:f9:ac:2b:92:2f:84:30:8d:d1:76:cb:92:f4:
aa:9f:ad:bf:5f:f1:a1:c7:91:78:d6:dd:26:2c:f0:14:08:25:
6d:a9:42:67:87:93:97:b5:8a:57:5e:c7:ec:50:df:3b:2b:66:
dc:f0:96:77:59:b9:84:6c:54:77:1f:bf:83:ed:1f:0d:46:d1:
af:0f:d6:17:6e:5c:ad:ab:38:49:eb:eb:6c:04:8b:b4:ec:70:
e5:3e:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:03 2026 by rpki-client