Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4618acc7-e81b-42bc-b7be-aa1447fcd076.roa
File: 4618acc7-e81b-42bc-b7be-aa1447fcd076.roa (raw, json)
Hash identifier: kdNNLie2WZlwTO1Am0Mq5phpiioyj+cW4NII2gLvaWs=
Subject key identifier: 6C:9E:48:02:47:C1:2B:D3:E5:B1:AD:79:2C:85:55:F0:33:DB:A9:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05E7E0EE4E3B39F6FD745A7B9C4706E8FA3BF578
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4618acc7-e81b-42bc-b7be-aa1447fcd076.roa
Signing time: Wed 09 Sep 2026 16:12:57 +0000
ROA not before: Wed 09 Sep 2026 16:12:57 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e7:e0:ee:4e:3b:39:f6:fd:74:5a:7b:9c:47:06:e8:fa:3b:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:57 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=35fb17ec3752d6c0491610e734247ebf559e8f7aa37d2f91bd355fb709967ad1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:72:4e:db:3d:98:41:08:57:07:93:6f:ba:
d1:64:92:3b:8c:be:34:aa:da:43:93:65:68:15:f5:
5a:ad:21:62:b8:c0:3b:84:9e:dc:91:63:b9:5b:f4:
66:57:dc:b5:2a:b7:e6:bb:b1:a4:54:87:ca:9f:51:
4b:75:d3:de:7a:34:47:6a:00:ee:8f:b8:d0:2f:de:
91:fe:f8:d6:64:0a:53:da:ea:4b:1b:da:28:9d:ef:
9d:50:13:b3:09:6c:0f:dd:8f:67:7d:ae:69:c8:80:
41:a4:dd:58:9b:28:b2:be:3e:46:7c:5a:c2:42:e6:
2f:53:d8:05:b0:9b:90:01:75:13:f1:46:46:dd:c8:
03:95:49:2e:0b:f1:3e:d4:5d:57:13:ad:d8:84:b7:
cd:39:d2:aa:be:f9:5b:92:95:cc:4c:01:be:8f:a6:
b8:a2:9f:3e:41:e9:43:14:59:57:48:b9:fb:34:21:
ea:84:d8:e4:ee:49:30:61:df:e9:54:46:00:23:f9:
b5:eb:ee:31:a4:68:48:1d:c8:05:e7:99:db:fd:0b:
9e:51:b3:5a:d0:87:00:8b:f1:02:0b:69:d8:70:eb:
63:12:08:b1:1a:bc:74:e0:7b:66:ea:db:44:a9:67:
da:00:bc:76:43:0b:cd:a6:ed:60:dc:d7:9f:0a:b9:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:48:02:47:C1:2B:D3:E5:B1:AD:79:2C:85:55:F0:33:DB:A9:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4618acc7-e81b-42bc-b7be-aa1447fcd076.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:9000::/40
Signature Algorithm: sha256WithRSAEncryption
05:d0:33:09:36:f1:78:50:c6:35:6a:86:8f:91:77:61:1d:a8:
7e:91:eb:77:5a:69:12:50:da:14:d3:f1:68:1e:a8:27:45:64:
06:eb:b2:24:b0:3e:f9:01:f9:e8:62:5e:81:57:4f:fb:15:d3:
2b:cd:38:14:fc:f5:80:6b:f5:9d:0c:ce:bc:1a:ec:fc:ba:0b:
27:9d:b1:10:42:76:e2:2f:94:38:d3:ef:e8:c6:02:48:65:76:
10:a6:f1:6c:bb:96:e2:9d:53:d7:90:44:63:59:ed:8b:a1:66:
7f:c7:a2:5b:79:7a:83:c0:a9:36:38:ca:1b:cd:61:df:a0:c4:
f9:91:f8:32:8b:ea:1d:4a:87:00:24:d4:d5:2f:a8:a8:c9:3c:
92:ed:e5:a0:58:55:75:6c:f2:c5:eb:b4:93:c2:d8:67:70:88:
e9:62:37:54:80:fe:a7:9d:40:fa:c4:1c:bb:0b:c7:e4:e4:67:
a4:36:ad:23:dd:f1:70:f2:12:b9:bd:2a:f0:c3:e5:48:43:d1:
33:3e:2f:88:68:8e:68:54:dd:90:29:a1:40:9b:32:bf:5a:61:
b3:97:f5:64:23:cd:ab:fc:ba:4e:dc:85:f5:44:5e:d9:64:52:
9b:ce:13:37:a3:35:fe:69:fa:c5:9e:11:ec:37:36:d7:b5:08:
7b:e6:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:36 2026 by rpki-client