Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b803048-37ce-4021-8297-7934a5425c42.roa
File: 3b803048-37ce-4021-8297-7934a5425c42.roa (raw, json)
Hash identifier: JifXmDHUd4zneaMDPa5MZVzlk8o/ZqqPYBtirpowbLo=
Subject key identifier: E6:91:A0:99:D0:38:96:B7:D1:2C:16:54:B7:10:BA:FB:6B:A7:66:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F6FC1B3D1E22B5B8C086A8F780B8DE98DAFD9D1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b803048-37ce-4021-8297-7934a5425c42.roa
Signing time: Mon 10 Aug 2026 01:00:59 +0000
ROA not before: Mon 10 Aug 2026 01:00:59 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6f:c1:b3:d1:e2:2b:5b:8c:08:6a:8f:78:0b:8d:e9:8d:af:d9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:59 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=9ef688354acd087e4bbdf401a986a58d849e348f7b58786b08aafc4c73266d63, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:f5:b3:be:60:64:74:2c:05:f9:32:d8:65:
34:70:37:0c:d4:79:fc:24:20:54:18:e5:55:b2:22:
27:7b:76:94:60:76:3c:d9:9b:5c:ca:9d:34:98:f0:
a8:3f:06:b5:ec:50:b5:ed:e0:11:83:b9:1d:15:da:
7d:64:a9:7c:98:09:66:84:8d:44:1f:3b:83:ce:4c:
67:14:ef:ee:95:3c:cb:c7:96:94:13:a2:31:19:7a:
f9:8a:79:0f:f0:21:9b:4b:64:97:35:3d:6a:2a:7d:
82:7c:c2:95:af:4a:3b:74:27:fa:a7:46:80:af:5f:
43:4d:e2:9f:7c:9f:06:6d:b8:ad:e7:b1:75:8c:af:
45:1d:f8:f7:7c:51:7f:13:02:d1:1b:30:9e:93:90:
07:16:76:49:24:3e:ad:50:ba:4b:ea:9e:5e:01:80:
82:c3:0b:8b:11:d3:ea:51:be:b7:3f:bf:95:37:b6:
ba:bb:50:25:e8:77:17:07:c4:dc:a3:2d:54:6f:39:
b6:b5:eb:26:da:03:5f:68:21:91:de:ef:ae:ce:7e:
c2:c9:a5:07:c4:ad:f6:b7:26:27:1f:b8:64:ad:db:
ec:62:17:3e:65:5c:bc:8a:fc:40:f9:bf:25:ae:e3:
79:dd:30:90:36:eb:e1:8d:91:49:a1:74:12:50:32:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:A0:99:D0:38:96:B7:D1:2C:16:54:B7:10:BA:FB:6B:A7:66:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b803048-37ce-4021-8297-7934a5425c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:b080::/48
Signature Algorithm: sha256WithRSAEncryption
0b:1c:34:ae:df:88:d5:1a:64:2a:9d:e4:30:1d:8d:d7:63:55:
52:22:19:5e:e7:5a:f4:6a:99:96:d0:60:91:55:cf:2c:4f:0e:
88:1e:58:70:e3:5a:8d:6f:87:6f:99:88:b5:07:b4:b9:75:c9:
85:8a:fd:71:dd:a9:46:a6:1b:5f:e7:b9:86:a6:d9:8c:50:c4:
86:87:f7:db:6a:b4:7d:38:65:82:68:11:70:80:8f:9b:f4:d9:
e3:f4:81:c8:64:79:34:f6:5d:71:3e:f0:32:25:54:22:ac:15:
e6:46:69:2e:30:83:e5:eb:37:21:11:a6:b1:a9:48:12:ec:f1:
3e:8c:da:b6:79:c5:5c:bc:76:cb:2c:4f:e2:ee:a3:27:2c:07:
4d:46:1f:f0:3b:04:5a:82:9a:61:cf:af:e6:9b:b8:3d:3c:53:
9c:6e:01:da:34:1a:6e:f6:78:88:a9:14:d1:fd:86:b5:dc:6b:
1e:12:96:54:70:b1:bd:67:87:80:c4:c2:61:98:3e:78:85:df:
cb:0f:eb:f5:42:3e:3b:e3:2e:7b:59:18:88:fe:b7:93:74:87:
e8:5a:54:20:53:bb:18:8a:bb:b4:6e:38:4b:07:b3:35:c5:8f:
69:01:fb:cd:9c:0e:90:d6:90:97:ae:08:c6:a7:5b:9e:9a:90:
59:81:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:51 2026 by rpki-client