Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
File: 3c7c4703-2876-4e04-b857-8c0298bd0897.roa (raw, json)
Hash identifier: x6KSoDB0N95MGyQzCHy6rOnE8HE8WCR983h7v6hkNQI=
Subject key identifier: 45:71:4E:9D:CF:B3:68:B9:DD:7D:F5:D4:F5:E4:85:06:28:E2:B5:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4241F8665FAAD1C165C2CA9C0CBEFC37C319758B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
Signing time: Fri 07 Aug 2026 04:40:08 +0000
ROA not before: Fri 07 Aug 2026 04:40:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:41:f8:66:5f:aa:d1:c1:65:c2:ca:9c:0c:be:fc:37:c3:19:75:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6c5a0e42b1f8486cecfb499c1edfc141383fa502071e45dc5a541db70eafac8d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:d3:f3:ab:aa:d0:f2:eb:e3:80:e4:6a:f8:
89:7d:44:d6:a2:8c:36:f5:1b:2b:a6:60:c0:db:03:
74:2f:b2:e4:5b:f1:be:78:df:9a:6f:3b:9b:69:22:
22:0f:b6:50:a5:91:ad:d9:ab:9b:fd:94:ac:c4:ca:
d2:79:41:4d:ab:9c:d5:bf:e0:ef:41:5d:01:2b:b1:
2e:41:22:65:8c:14:ba:c3:31:50:76:c5:a1:e8:90:
f2:53:71:3c:a2:f8:30:14:03:89:94:b3:69:fe:04:
77:b3:00:e7:db:a8:6d:77:8c:cb:f0:d7:b1:90:9b:
ee:4f:e2:1c:26:8b:b8:3c:c0:8d:e8:c9:b3:51:d2:
96:0e:46:53:2c:25:09:0d:26:83:26:2a:85:f0:cb:
90:90:d7:7c:bf:0b:4e:38:b3:93:6d:06:73:79:4c:
99:0b:96:97:3c:40:ca:5c:39:7e:05:bf:9d:ff:95:
f8:0b:1c:a1:46:1e:17:95:5f:01:77:72:c2:8e:df:
99:d4:aa:a3:c3:50:76:4a:b6:d8:d9:5d:40:96:2d:
c4:3b:a8:ef:52:94:2f:df:a9:6f:ba:c2:db:66:96:
86:d9:bb:e0:3b:fb:a4:d6:3c:e1:74:d4:a2:67:7b:
6a:6e:82:79:f7:03:60:3f:a7:00:d2:f0:43:76:87:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:71:4E:9D:CF:B3:68:B9:DD:7D:F5:D4:F5:E4:85:06:28:E2:B5:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c7c4703-2876-4e04-b857-8c0298bd0897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:b9:8e:09:ce:59:1e:d3:2f:4d:da:f3:7a:f3:61:b6:5e:9b:
f8:59:a7:c5:c2:68:c4:e9:17:b6:ed:d2:37:25:9d:97:ae:d1:
88:fa:77:39:dc:24:09:88:e2:1d:1d:b9:f6:58:22:de:bf:fb:
ec:9f:4c:8f:62:33:d6:59:20:db:98:65:7e:42:05:34:1e:14:
22:cf:9b:1d:e2:61:49:ad:57:ac:b1:66:00:e8:ce:10:ce:a0:
7c:ce:48:5d:9f:8c:34:22:51:d3:76:f9:11:44:b3:a8:4a:fa:
49:6e:e6:c2:f4:ff:34:f6:a4:80:53:ce:1f:f7:99:00:85:0c:
98:ec:15:ef:e6:c2:da:0a:05:4f:fa:4a:e5:f5:27:a9:0c:0e:
c6:b9:d6:5e:58:73:17:a9:9e:d4:df:b6:04:cc:09:a4:3a:d6:
37:3e:41:7b:9d:fb:cf:2e:19:f8:ed:57:94:4d:98:a5:e4:9f:
6d:45:e6:df:fb:a6:d6:5a:b3:c6:c6:fd:1e:60:06:88:e5:8d:
f3:49:86:2f:4f:9e:c7:72:ee:80:b5:ef:e4:85:91:eb:bc:9f:
30:9f:82:46:ec:70:6e:d1:5a:ea:07:30:07:05:a4:40:7c:7b:
da:92:32:dd:26:53:41:3b:23:8f:a9:0e:56:00:be:e1:5f:dd:
5a:9b:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:32 2026 by rpki-client