Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
File: 3af05485-fd97-4026-a50e-0227f46bd107.roa (raw, json)
Hash identifier: QJcU57C42/sq8Pgg9JOCTlxjqoxsGhwmX/Vq3bUPv0U=
Subject key identifier: 57:C9:E1:97:69:AF:8A:2D:C1:4E:86:19:09:5D:C7:58:B8:D9:23:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EE00836AA48E9DAC7603BB38739E2B16EED64F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
Signing time: Fri 07 Aug 2026 04:41:10 +0000
ROA not before: Fri 07 Aug 2026 04:41:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e0:08:36:aa:48:e9:da:c7:60:3b:b3:87:39:e2:b1:6e:ed:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8d0a6f7fb0ca86a648e0c20f366b2588b3d369ed74447035535f7537894a52d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:47:b7:d1:ad:9d:74:af:c2:92:45:4f:b6:
5a:0a:60:01:1e:13:20:14:d0:b2:97:60:f0:cf:b5:
e8:28:03:aa:e5:b8:b5:91:34:a0:ac:50:1b:82:87:
e8:9f:cd:5b:00:63:6c:2d:47:08:94:53:88:55:15:
65:6f:6e:e2:fc:d3:20:71:39:d4:7b:a6:87:04:50:
32:af:cd:51:05:6c:8d:2e:3c:31:1e:01:c4:27:ff:
1a:37:f1:01:7e:86:8d:63:90:f5:80:ce:42:9e:be:
1a:ff:54:24:25:d4:82:a0:4c:ad:ca:57:6e:e5:ce:
9e:e0:59:5c:7f:3a:52:c8:7e:3e:5e:63:e2:13:e8:
66:cd:36:16:2a:72:90:08:2e:17:67:45:17:9f:a4:
69:ee:5e:f4:d0:d3:44:95:8d:51:a3:c0:7b:fc:9d:
19:f1:75:b9:7a:9c:67:5c:83:c8:50:92:97:d3:06:
3c:b1:54:a5:f7:60:1c:70:a8:6c:49:e2:90:92:ad:
57:8c:3a:0d:b9:88:40:ad:1f:f6:47:0e:ef:6a:65:
fa:86:a2:cd:52:a8:b9:e3:f1:d3:93:13:e8:72:8c:
46:bb:4d:6c:61:2e:fa:85:1c:89:e5:ca:a2:8c:47:
23:c6:80:31:64:09:bd:70:ae:0b:40:41:6d:e4:1f:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C9:E1:97:69:AF:8A:2D:C1:4E:86:19:09:5D:C7:58:B8:D9:23:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
71:e9:83:e3:45:ac:25:34:0a:39:4c:4b:66:ed:ac:1d:a1:c9:
b7:92:d5:fa:d9:e4:f9:a9:cc:b6:33:2f:37:99:59:ba:e5:b4:
3e:5b:2f:49:c6:e4:5f:65:aa:aa:e0:0b:29:12:4b:f8:4c:cf:
57:dd:f1:de:4d:a3:d2:ab:ed:1b:0b:b1:b9:ee:50:72:61:5a:
c7:11:79:75:43:3e:bc:d3:53:65:fc:8f:78:28:48:42:00:67:
c6:10:97:7c:f0:fe:1f:21:08:6a:7d:64:35:5a:f8:3b:26:c5:
da:fa:4d:fa:f5:c3:62:b7:9b:18:cc:33:a8:ad:05:16:40:34:
e2:9d:f0:0f:4d:3b:9a:ae:a5:18:b7:c3:5c:1d:6f:c7:e4:95:
46:c4:a6:97:77:5d:82:5a:3c:a7:38:da:e2:3b:ab:58:78:99:
79:61:46:34:1e:c1:24:8e:0c:9e:31:46:34:f2:c7:23:90:a9:
6f:ba:84:da:c0:cb:85:4d:3d:e3:31:8b:ef:7b:6a:78:f2:79:
99:35:e3:3f:89:3a:06:9e:38:fa:f0:45:9b:a2:88:14:73:78:
ec:86:ad:69:a6:f0:6e:20:4f:1f:fe:5b:51:d3:98:bd:5c:aa:
5e:19:51:dd:44:6d:61:7f:17:f3:d8:1d:14:b7:19:56:65:34:
0b:21:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:15 2026 by rpki-client