Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4967c03f-f17b-42f4-bfca-8694bb963ab0.roa
File: 4967c03f-f17b-42f4-bfca-8694bb963ab0.roa (raw, json)
Hash identifier: a7AxHB2kUZRprN1e4+FSbIvIZPBgOveLzS3ed7j1J8U=
Subject key identifier: F0:F1:A1:29:42:D8:D8:1B:3A:AC:E2:6F:F4:5D:CA:9C:B9:76:71:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D2B13236CD8BD68478EA3CA426BBBA0FD7FA330
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4967c03f-f17b-42f4-bfca-8694bb963ab0.roa
Signing time: Fri 07 Aug 2026 04:40:31 +0000
ROA not before: Fri 07 Aug 2026 04:40:31 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2b:13:23:6c:d8:bd:68:47:8e:a3:ca:42:6b:bb:a0:fd:7f:a3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:31 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=514d21aca047cf8d59481521b6eec0011ce0d1af092d0551bf405962fee78207, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:83:a4:7b:22:7b:98:a0:57:4d:b3:13:35:
5d:9a:11:6e:07:23:d9:e9:b6:96:7c:79:f9:62:de:
07:b2:25:a0:70:db:ac:12:e1:7c:40:e9:90:d3:7b:
48:53:cd:a9:32:41:41:a0:81:73:e4:44:6b:1d:bd:
e1:79:06:4d:08:b2:6b:5a:93:8b:6b:e5:20:c0:b5:
40:2f:89:ad:3d:9c:98:c5:27:21:26:b5:23:c6:65:
c8:8f:49:31:e2:0d:a9:d4:6e:fc:9e:8e:f3:65:09:
b1:de:32:0c:fd:6f:e9:18:1b:4f:cc:ac:fe:05:61:
28:a6:95:5a:d8:a4:37:06:2f:39:ab:2e:1f:67:80:
4b:a9:c7:b2:63:82:88:6a:50:12:a0:1b:cd:7c:8a:
b8:8e:59:b9:74:a1:4c:8d:95:ef:e5:b4:3d:a6:2e:
d1:c2:88:28:3c:f7:ee:c2:3b:73:92:6a:1f:39:2e:
0f:a5:cb:c7:25:d0:30:86:78:9d:69:6e:f6:6a:81:
9c:44:97:9f:98:74:f3:c0:7b:fa:be:1e:ee:54:15:
27:17:e3:93:4b:a5:db:d6:ce:fb:a4:2d:84:0d:7d:
39:61:29:8e:ca:59:28:5f:4e:aa:d3:55:bb:5f:e8:
13:a2:25:02:40:93:96:28:c0:2f:db:03:60:96:7f:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:A1:29:42:D8:D8:1B:3A:AC:E2:6F:F4:5D:CA:9C:B9:76:71:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4967c03f-f17b-42f4-bfca-8694bb963ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:9040::/48
Signature Algorithm: sha256WithRSAEncryption
c3:5b:ec:01:cb:43:12:aa:c7:3f:00:ec:25:5e:64:84:a0:9b:
41:bf:50:48:9d:d0:37:9d:5d:db:66:1e:6f:17:39:d2:75:bd:
75:d1:6d:fe:49:c8:7d:ab:64:b2:50:f3:54:b9:dd:54:56:6c:
f9:eb:13:9e:ff:2b:5f:38:13:1d:0b:8f:97:c5:ff:4e:31:00:
3e:43:90:51:ee:b7:cd:44:3a:a6:af:2d:76:fc:37:fe:45:14:
7b:a6:ff:15:b6:ef:3f:c1:86:aa:23:65:d1:52:35:43:bd:34:
59:46:a5:b8:dd:8a:59:c8:15:77:22:44:c1:13:1d:e5:33:dd:
29:ae:f4:6f:0f:2d:13:d8:41:8f:63:8f:a8:c4:7f:e7:10:94:
84:b6:23:5e:06:f7:8c:d9:06:fc:73:dc:15:87:04:75:bd:b5:
8d:c2:b3:2d:65:d5:ed:59:5f:b7:60:78:09:41:0b:5c:95:17:
6e:6f:2a:0b:c2:19:27:dd:c2:87:5c:ab:b0:5a:29:2b:3b:a1:
d8:96:af:b2:34:ef:32:3d:cb:58:51:ce:d3:c6:a4:9c:34:94:
a2:c6:86:bf:29:a4:09:a1:8e:a1:70:45:a4:31:1a:6b:74:d7:
ba:a2:5e:25:aa:f3:bc:f5:2c:3f:32:d1:8c:46:37:53:a5:01:
cb:5c:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:12 2026 by rpki-client