Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
File: 493f1269-3ba4-4dea-829a-985dda6749ee.roa (raw, json)
Hash identifier: GpJ+kPhNIJSMa3Uzj9vXOaooTiqxi8mpphsDLnuwM2M=
Subject key identifier: 08:D5:C5:73:F4:4A:81:39:88:7F:6A:10:9F:9E:40:61:A0:4C:78:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EB7E2E6EF86D3CDE73DD308E6F514A88139E815
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
Signing time: Fri 07 Aug 2026 04:30:18 +0000
ROA not before: Fri 07 Aug 2026 04:30:18 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b7:e2:e6:ef:86:d3:cd:e7:3d:d3:08:e6:f5:14:a8:81:39:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:18 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=00f32c7b2ceb7f23fcf1e86a248379da7495e32599af123830bcaef31886a145, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:70:5b:4e:04:cd:3a:f4:8b:89:c5:c9:e9:ac:
6d:f1:a5:17:9d:5b:da:a4:e6:df:e9:4a:ad:72:e4:
4f:20:74:44:4e:78:62:2c:48:d0:d7:71:cb:24:61:
d3:75:ee:c0:bc:14:87:73:6f:2c:84:9b:4d:09:9c:
36:53:1b:16:f5:71:4c:16:82:3f:f9:1e:34:0b:48:
00:17:03:79:83:42:35:06:8e:47:66:fd:b3:0b:ee:
54:6b:2e:96:c2:ba:cf:d3:5b:4b:64:dd:f1:59:81:
8b:f8:41:2c:4c:55:35:ed:fc:8f:8b:9f:ef:71:76:
58:05:c8:fa:5b:15:b0:e3:c8:9e:ad:2c:0a:b0:72:
84:76:7b:1c:31:8a:26:62:1a:d5:04:2b:28:f3:22:
93:31:19:35:ca:ce:31:fb:35:4a:71:46:f3:2d:87:
f7:0a:1d:bf:64:a4:34:ce:a8:89:ca:b7:14:43:68:
90:72:58:2f:63:a3:b1:9a:bc:e6:0d:ff:bb:66:33:
5a:53:17:bd:19:81:0e:7c:e2:bd:97:dd:05:b3:56:
1a:e2:51:59:37:50:e3:51:18:ee:af:cc:90:57:ee:
0c:88:44:55:50:a0:0c:dc:1c:84:a4:95:d3:46:85:
f8:46:2a:0e:95:4f:ba:5b:83:73:b1:ce:d6:8a:07:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D5:C5:73:F4:4A:81:39:88:7F:6A:10:9F:9E:40:61:A0:4C:78:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493f1269-3ba4-4dea-829a-985dda6749ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075::/32
Signature Algorithm: sha256WithRSAEncryption
11:cd:9f:dd:c3:e2:9c:7f:9f:37:be:6a:22:01:db:e6:c8:07:
f9:03:46:07:60:a9:e1:78:10:c0:b9:ef:1c:d8:67:39:a9:5b:
4a:00:e0:ac:d4:0e:f2:a9:15:d4:2c:a7:2e:94:8c:86:0e:d3:
c3:0b:bc:10:b5:9b:3a:5a:6b:50:c5:61:58:58:0b:b0:50:f0:
a2:dc:b9:5f:a7:48:2f:b8:02:83:72:af:e6:17:5e:be:3e:4a:
bb:4f:24:8a:f8:54:28:98:fb:af:3f:11:62:13:53:2d:65:f1:
b4:57:cd:50:ea:9c:5f:a0:9c:42:80:61:d0:2e:1c:e8:cc:97:
a9:01:a8:de:99:92:75:7a:0d:4d:90:ec:5e:60:49:63:48:b3:
1a:60:6e:3d:af:99:d1:70:38:2e:0c:60:d7:fb:fd:80:67:ff:
aa:78:2a:14:37:4c:ba:6e:3b:b4:59:6b:45:15:2f:26:d5:d7:
6c:e0:ce:68:c1:c6:8d:81:79:87:dc:60:2c:4a:b6:10:e9:80:
90:f7:d6:24:25:5f:77:24:96:58:64:f0:55:8e:ac:7f:de:77:
ae:6e:22:b9:da:4b:4e:b3:7b:a7:05:db:8a:d3:aa:3c:32:83:
de:4c:70:fa:8b:2e:15:d7:0f:22:67:d9:e7:3e:95:ce:39:33:
af:8f:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:43 2026 by rpki-client