Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3816340e-2101-41e7-af42-6ab2123b5c04.roa
File: 3816340e-2101-41e7-af42-6ab2123b5c04.roa (raw, json)
Hash identifier: 3V1cqbVnZdweA1QjYNN33q7KttRLlcDh9FsFkbzRw1g=
Subject key identifier: BB:9A:85:12:2C:E8:0E:1B:C2:13:2C:30:F0:94:54:2B:F3:0B:16:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 023C065D42BA581E21B60CD31B9150A5CF8C60C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3816340e-2101-41e7-af42-6ab2123b5c04.roa
Signing time: Thu 10 Sep 2026 02:40:09 +0000
ROA not before: Thu 10 Sep 2026 02:40:09 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:3c:06:5d:42:ba:58:1e:21:b6:0c:d3:1b:91:50:a5:cf:8c:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:09 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=fbf856af041abae7f6a9cdacc94de03ba309b54f9891bbe462f84656d5b8fa44, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:0d:45:b5:1e:99:9c:3c:07:e2:e3:8c:09:
94:d4:7b:58:89:61:f4:30:f3:4d:3b:8f:92:3c:2f:
e0:b5:b1:7b:54:95:65:1f:80:0d:50:32:4e:51:8a:
b5:3e:2e:52:a2:50:97:0f:14:c2:75:79:54:cf:96:
59:30:49:84:73:39:e4:3e:4a:10:5c:da:9c:b2:a4:
0e:5a:c1:9c:48:5e:33:df:8d:39:93:8f:49:f4:91:
fe:54:f9:4c:aa:08:27:6a:45:63:10:fb:02:5d:0a:
d7:f5:61:07:10:af:b7:f8:48:cc:4a:83:c1:5b:a6:
29:c5:9a:94:70:bc:a0:d8:f9:d1:2f:6f:ea:b7:41:
72:22:ca:b5:e1:05:3a:f6:db:b0:ba:a9:88:9f:4f:
36:29:fe:01:9c:43:3b:36:7c:52:07:2c:d2:dc:3f:
2f:9a:0d:7d:e2:61:cf:3e:0c:5e:96:7b:f3:c0:c4:
26:43:bf:df:f2:ab:2d:a7:77:de:d5:47:22:7c:02:
3f:53:d2:ca:84:9c:bd:03:58:39:37:7b:aa:85:a0:
ab:e4:e6:55:3e:f6:fa:93:ac:22:cf:49:71:bb:b1:
dc:3d:4e:c4:72:6b:6b:31:cc:0f:57:d5:45:8c:ab:
e4:2f:85:58:a9:87:bc:4f:e3:d3:81:f7:69:43:0a:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:85:12:2C:E8:0E:1B:C2:13:2C:30:F0:94:54:2B:F3:0B:16:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3816340e-2101-41e7-af42-6ab2123b5c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
16:7a:c6:fc:f7:e8:5f:d6:d1:e4:47:89:35:27:3a:9e:92:d9:
9c:6e:74:45:af:15:9a:21:94:45:83:78:06:28:61:92:45:bd:
50:6f:66:56:71:4c:01:86:d8:1f:fe:93:67:c7:f6:7b:f8:84:
0c:13:c6:60:49:14:f0:3c:79:c7:49:72:a2:cc:ea:0e:de:97:
11:30:81:ff:ca:ef:03:0e:18:dd:cf:09:37:8d:80:da:ed:25:
09:07:af:34:00:b3:51:56:de:8a:62:1e:f6:2f:50:5c:7f:a9:
4b:bb:df:1e:9a:3d:bb:d1:52:ad:3b:9e:d5:97:cf:3c:17:46:
5e:5e:8f:e0:bb:ef:49:80:9f:fe:9b:24:f8:43:93:0b:86:d5:
48:6b:08:81:a7:68:ef:a2:75:83:96:cf:65:6b:19:00:c8:ce:
76:dc:aa:d5:93:c7:fb:66:83:92:3c:71:c6:9e:f5:11:81:6a:
dd:e8:f2:d5:25:d1:9e:70:15:f9:5a:3c:bb:9f:49:13:f1:19:
4e:a0:fe:e5:4b:3c:90:92:14:4d:a2:82:c2:7e:27:0f:8b:0d:
f6:62:24:f8:eb:d7:9e:d7:b7:91:13:17:66:e8:20:5d:64:ba:
17:f3:25:72:b2:e3:ed:f9:89:bf:59:e8:77:e0:49:dc:0c:2d:
52:68:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:31 2026 by rpki-client