Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
File: 4e84f0a8-9d20-4219-b641-9a6905a033d9.roa (raw, json)
Hash identifier: ptb2Un49R/T99MCgTD6Bx/XSiFLybXXkx3/0NBnMnPI=
Subject key identifier: CF:C1:F9:02:06:A1:B1:94:5B:07:A3:82:06:A1:B9:E3:F3:A0:2A:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3088B0CC0B102EA28909AEE6345743F8F3B81AEF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
Signing time: Fri 07 Aug 2026 04:40:10 +0000
ROA not before: Fri 07 Aug 2026 04:40:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:88:b0:cc:0b:10:2e:a2:89:09:ae:e6:34:57:43:f8:f3:b8:1a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0c2f7bdd8572f4a6d11dc4d8e431c867b4e89dc521a5cfe8ab118c2397e24257, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:92:85:1a:78:a9:10:40:b2:4e:9d:19:02:
c6:e2:b2:61:4f:96:e8:0e:14:45:a9:27:c5:dd:2d:
9e:ad:23:c4:c0:5a:3c:bc:1d:71:39:78:0e:fd:02:
93:8d:87:30:3b:a9:14:75:af:6a:69:5e:fc:f9:5f:
74:f2:73:de:02:41:78:7a:de:e2:f1:52:8a:56:1b:
62:dd:02:02:9f:32:27:4d:98:e1:cd:09:95:13:3d:
f4:91:97:b1:33:6b:c4:bf:c3:9f:ec:00:4c:e1:14:
1e:0d:7c:82:a1:90:2e:69:4a:fc:3f:de:27:ef:d7:
d3:42:32:3f:f4:f6:7a:87:72:85:b4:75:b8:56:a7:
03:a6:7d:17:bd:93:86:7d:3d:f1:78:ca:b0:4f:ea:
16:1e:d6:3f:d6:27:dc:68:8a:d6:e0:fc:74:50:50:
de:f0:ac:61:d7:aa:89:d4:be:c0:1e:aa:e0:ce:99:
db:60:ae:9a:f2:f9:f3:14:40:ca:df:83:49:cb:30:
55:7e:82:65:b9:c6:36:59:21:3f:d3:5e:88:2c:6d:
af:18:ec:c4:ed:79:15:3d:1f:df:8d:53:d9:51:26:
a0:1e:b6:5e:53:fe:64:4c:19:a3:71:99:76:65:83:
71:40:0c:c1:3c:d8:53:eb:93:08:5a:ec:f2:64:12:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:F9:02:06:A1:B1:94:5B:07:A3:82:06:A1:B9:E3:F3:A0:2A:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a040::/48
Signature Algorithm: sha256WithRSAEncryption
c9:13:35:51:16:88:ea:0a:8b:21:53:5e:d3:cd:ba:bd:2f:30:
4f:4f:9d:69:4b:2e:f5:b0:9c:2a:94:cb:a5:d5:fe:f4:11:eb:
6f:46:b8:f2:fc:73:ac:53:47:17:5d:e9:81:ad:35:db:0b:45:
da:d0:3a:6c:ff:e8:48:bb:ad:a4:a1:7f:a6:5d:0e:d7:1c:9c:
c0:d6:3c:81:a7:8c:c2:72:86:8b:fa:16:12:bc:b8:d3:9e:97:
8c:13:bf:4a:f3:f6:78:a3:88:1b:2a:8f:86:67:6f:e2:b5:5a:
8a:05:07:24:4f:76:cc:c3:b2:66:c3:03:cb:f6:ec:7e:63:f7:
37:2d:71:d5:1d:dd:3c:85:1c:dd:8e:5e:60:20:26:06:9f:e6:
4c:78:24:2b:62:aa:d7:06:08:3d:49:a3:fa:34:5e:cc:8e:81:
86:3c:3e:c6:61:04:1f:18:76:27:8e:72:c5:a8:a8:52:2a:26:
71:ae:d9:41:05:b3:c3:f0:b2:2d:3f:d2:6e:95:c7:5e:91:19:
80:10:f5:1f:9d:21:a5:04:e8:14:8a:8f:fc:6b:c3:cf:f6:85:
0c:05:34:a7:c6:0a:d1:9e:2e:67:4e:e4:0d:e4:71:c6:af:f0:
cb:92:29:92:c7:b4:d8:e0:5d:58:62:80:14:1a:6a:b2:56:7a:
8d:7b:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:47 2026 by rpki-client