Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
File: 436b2ee4-1cd1-477a-83f9-e45d118e5574.roa (raw, json)
Hash identifier: x7Q0WvW5GxUXSLj0eFMxBQLuKgxiz4nsKkUqS/6xbyE=
Subject key identifier: 5C:45:2D:03:4C:74:13:91:B4:76:D8:D2:3D:BF:C9:71:3A:54:97:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2124C71A8FB200A5AB49DD38FBE9FF2022C70194
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
Signing time: Mon 24 Aug 2026 00:00:05 +0000
ROA not before: Mon 24 Aug 2026 00:00:05 +0000
ROA not after: Sun 22 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:24:c7:1a:8f:b2:00:a5:ab:49:dd:38:fb:e9:ff:20:22:c7:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 24 00:00:05 2026 GMT
Not After : Nov 22 23:59:59 2026 GMT
Subject: serialNumber=5ab0288c3be4e20f9d1748ed407993cf1d7f9729ad038cd6734c3b3a6e4f424d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:5b:1a:bc:98:c4:85:8f:d9:dd:2e:30:67:
69:04:b0:7c:b0:cb:a7:ef:4a:42:40:1a:31:06:11:
ab:ed:d4:2a:02:2c:89:c0:88:50:36:52:89:d3:fa:
a6:50:13:24:8a:46:48:45:74:8b:f0:19:01:78:3a:
f9:cc:46:94:d8:91:93:7e:f9:24:45:bf:2c:75:e7:
91:8b:95:1d:5c:63:c4:70:d2:7b:24:ce:0e:27:2b:
7b:d1:ba:62:ec:3a:18:e5:f6:04:a0:52:e7:0a:b8:
34:27:a3:3c:54:de:12:2c:85:c5:23:2b:80:a6:eb:
6a:29:39:62:c4:17:e5:20:9a:07:96:e4:63:b9:01:
36:80:cf:a8:c6:7d:7c:fe:16:d9:dd:e1:64:04:8e:
80:04:56:60:e4:c2:91:f8:ca:d0:47:4d:77:b3:4f:
2a:45:24:95:a7:cc:2d:31:de:79:d2:5a:a7:83:4a:
d1:c0:98:25:15:12:ca:70:a4:84:6c:3c:75:e0:e8:
c2:d0:c0:24:dd:85:d3:0f:b0:3f:3c:ce:6e:80:f3:
6c:50:47:1c:21:83:0b:e4:8b:61:e8:8a:8e:da:9d:
fa:8c:7c:8c:bb:62:db:a8:ec:6f:ee:e4:b6:63:69:
49:16:1f:8e:94:e0:d5:58:df:b8:a2:97:17:10:85:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:2D:03:4C:74:13:91:B4:76:D8:D2:3D:BF:C9:71:3A:54:97:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/436b2ee4-1cd1-477a-83f9-e45d118e5574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/48
Signature Algorithm: sha256WithRSAEncryption
ae:60:a6:20:c2:6a:8a:a7:7b:84:b6:46:99:a9:c6:13:07:c3:
b3:a1:82:6f:f1:74:97:81:bd:95:6c:22:bc:1c:00:8e:9d:53:
92:2b:95:0a:e8:9d:40:0e:ce:b7:0b:4b:d5:c7:2a:75:f6:c2:
23:2a:ae:55:53:4e:1a:8b:74:82:93:7c:7f:b9:36:84:37:b3:
f5:e1:1d:af:70:6a:a3:11:d4:00:15:86:97:32:19:bd:87:01:
06:6c:56:76:22:5f:38:b0:ee:20:63:04:87:79:06:45:30:40:
c0:49:36:7b:22:0d:9d:b6:a0:40:8c:44:62:02:96:73:1b:f0:
e7:df:04:53:29:32:7c:40:7c:25:2b:51:fd:7c:5a:8c:0b:4e:
82:71:1f:02:e0:55:5b:9b:95:fc:40:8a:c0:84:24:cc:ad:b9:
f5:0a:bb:11:4b:08:02:2d:b0:51:96:a0:a7:76:9f:7a:e8:68:
ef:9a:9a:de:33:ed:9a:c2:69:be:f6:f3:a1:57:4d:ec:b0:51:
cb:5e:c9:23:47:77:98:fa:91:35:70:96:b6:35:c0:82:89:43:
d5:d1:da:89:77:04:39:d3:7f:d1:b8:87:d0:e5:ca:3c:46:54:
73:3b:63:9e:9a:82:de:5e:7c:f0:4b:d2:c4:5a:69:2f:1a:96:
6c:c5:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:24 2026 by rpki-client