Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b126f7d-726e-4427-9067-27eff51c32bb.roa
File: 3b126f7d-726e-4427-9067-27eff51c32bb.roa (raw, json)
Hash identifier: oW1Y4WqhbIqAgt1osngPikEbjRM7Z/V0kB311+GJiCw=
Subject key identifier: 82:6D:EB:08:EC:8D:F4:3C:55:7D:18:2D:CE:2A:43:D4:E4:53:F6:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 655068FC77EE1EECBBBA7411ACEBD5A903F50D8B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b126f7d-726e-4427-9067-27eff51c32bb.roa
Signing time: Wed 19 Aug 2026 01:01:00 +0000
ROA not before: Wed 19 Aug 2026 01:01:00 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:50:68:fc:77:ee:1e:ec:bb:ba:74:11:ac:eb:d5:a9:03:f5:0d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:01:00 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=4bb2aca177408a42b36ea2336d8a684b38246a2ea425e0449c13a3bfba27e49d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:59:f5:9b:8b:c8:75:32:dc:1a:3c:39:76:
46:9e:c7:3a:a3:fc:88:fa:7b:1f:ab:e9:ea:7f:16:
5e:12:3f:65:f6:92:eb:2d:97:97:e3:d1:d4:6d:72:
95:8e:f5:a8:3c:c3:33:24:be:4b:9c:bd:68:8a:4b:
35:16:b5:96:72:b7:2e:52:ec:54:42:67:5f:ba:eb:
04:3f:59:da:61:6a:2a:10:05:19:27:21:ce:e3:2a:
fe:63:b2:45:35:e7:1c:3b:2f:bf:81:77:fb:1e:55:
5a:ca:78:39:97:e9:5e:99:66:7a:94:a1:99:4b:30:
36:b4:8b:22:40:de:20:45:ee:ef:09:c7:9d:9f:45:
7c:c8:0d:17:78:d3:d2:5a:c2:84:a7:dd:35:41:fe:
30:99:1e:a4:06:bd:ad:ad:d5:af:0d:34:8e:7d:14:
76:65:2e:ff:84:e8:74:ab:5d:89:85:a1:66:ee:89:
b4:5e:7a:74:72:07:6d:f7:2c:18:2e:d5:98:6c:35:
82:3e:72:8b:9b:d3:fa:16:6b:f6:e9:c5:2f:09:7c:
f7:2e:9b:62:cd:c7:93:85:80:74:2f:89:19:01:cd:
bb:8c:c3:4f:ab:bb:d1:7a:59:08:e5:9b:cc:79:b2:
f5:ee:aa:47:b1:dc:20:ce:75:c7:d8:17:1b:0a:dc:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:EB:08:EC:8D:F4:3C:55:7D:18:2D:CE:2A:43:D4:E4:53:F6:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b126f7d-726e-4427-9067-27eff51c32bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:1080::/48
Signature Algorithm: sha256WithRSAEncryption
b0:a9:64:8e:52:65:61:d1:0e:07:9e:66:a5:71:ff:b8:d4:c1:
da:30:56:30:7a:a0:d4:02:37:f8:0e:62:38:c3:30:9c:87:ca:
b3:e3:31:e6:b9:b1:5c:a9:25:b9:7a:27:fd:14:b6:94:da:46:
f5:f1:e2:e9:e3:3b:c2:e5:d8:91:51:53:91:d9:a6:cd:d6:90:
a4:71:e8:d8:86:18:f5:9a:d3:16:92:f1:76:87:2d:74:0f:17:
c2:80:66:3f:19:c0:99:79:5c:91:d1:9a:09:a5:6f:96:a4:f1:
e2:43:7d:9d:a2:00:f2:9a:9d:c6:07:4a:95:0a:e9:7b:00:a5:
c7:17:3b:5a:cf:b3:5d:1a:9c:21:65:e3:e8:5f:c3:72:5f:b0:
bb:55:a8:17:e0:51:fe:97:27:29:90:ca:4d:2b:63:42:3e:91:
da:8a:69:72:5b:12:fe:d3:fe:32:9b:89:4f:12:5d:5b:35:40:
08:9d:aa:e7:ae:ef:cf:eb:1b:99:1d:c2:1c:bc:47:42:46:40:
fe:c3:11:b9:46:80:a9:d3:9f:93:57:2d:ca:62:45:05:b5:06:
10:13:7d:8d:49:1d:5a:56:0b:ea:5c:4c:36:a3:ec:08:33:ea:
13:e8:12:d3:df:28:8c:49:18:d8:3f:4f:ba:68:7c:52:7b:47:
98:b2:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:04 2026 by rpki-client