Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/502c0b91-9f0b-401c-98d8-abd03898fa7f.roa
File: 502c0b91-9f0b-401c-98d8-abd03898fa7f.roa (raw, json)
Hash identifier: uvTeDNXs1n1GwQs5ItekrCxHK/QJliAhWKNWYVC1OcE=
Subject key identifier: C7:0C:60:96:9F:9B:9E:8A:EB:8C:2E:F7:65:3C:BA:7D:3D:3E:CB:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16BE605B3E5FAC038186CA427FFF1D3964D30088
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/502c0b91-9f0b-401c-98d8-abd03898fa7f.roa
Signing time: Mon 10 Aug 2026 01:00:10 +0000
ROA not before: Mon 10 Aug 2026 01:00:10 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:be:60:5b:3e:5f:ac:03:81:86:ca:42:7f:ff:1d:39:64:d3:00:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:10 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=0fd2a12f6e03a889e958695d3d217223eca34012c9349f32bb4d07e80a11cf06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2a:bd:6f:b0:a2:03:bf:00:de:fc:f0:c9:f8:
c8:31:e3:a5:6f:21:59:c5:68:65:ce:7c:14:1e:74:
11:7b:9e:1e:8d:87:6d:e3:9a:3d:62:4a:6c:81:20:
35:98:09:61:f0:f9:ad:26:96:b2:44:34:77:1d:59:
75:67:93:73:39:98:91:2d:51:af:c9:b7:a5:f7:8c:
5a:06:19:bc:46:19:02:a9:e1:b6:f3:e8:4a:5f:7a:
85:7f:d0:fc:b7:ca:79:c8:40:91:62:13:b8:39:e9:
ac:90:00:a0:04:20:76:a0:1b:25:11:c3:d5:82:81:
e1:6d:96:90:63:dc:90:68:cc:d0:c2:f3:90:6b:88:
a6:4f:5e:76:c9:e9:d0:7c:64:89:21:9a:04:e7:2a:
25:57:51:df:78:4f:d1:66:58:eb:68:70:cc:5b:45:
a1:d6:08:7e:3c:f4:78:7f:f0:52:b6:dc:44:c4:f0:
43:aa:bc:88:d6:0e:07:08:75:81:96:cd:d3:96:93:
a2:74:83:fa:68:d5:a9:50:9b:19:42:df:c4:37:45:
08:27:2b:ab:b9:fa:41:d0:bd:f1:a4:83:76:bc:5d:
4c:7a:2c:2c:98:8c:18:a9:7b:94:99:c1:bd:e6:4f:
d3:ba:c3:d4:91:89:20:5f:66:8f:1b:05:38:9e:7a:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:60:96:9F:9B:9E:8A:EB:8C:2E:F7:65:3C:BA:7D:3D:3E:CB:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/502c0b91-9f0b-401c-98d8-abd03898fa7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:8f:2e:4b:df:ee:04:08:88:ff:0f:4e:32:f9:f8:a4:96:44:
90:12:1f:0f:d5:1b:92:f5:a0:28:8a:96:ad:67:44:64:2b:e9:
8d:0b:2d:50:6d:2a:00:5b:db:0d:d3:28:80:6f:08:2a:4a:e4:
5d:a9:bc:54:a5:9e:f7:be:8f:38:2a:12:7b:ac:4e:0e:d9:1d:
2b:2e:92:1c:f9:a6:e4:a3:bc:d0:d6:93:87:1f:73:51:b1:ec:
bd:fb:4a:a1:6b:66:e6:54:94:97:c0:74:99:00:f6:95:de:5c:
7b:db:b4:7c:bf:4d:cc:39:a6:4b:b1:6f:c6:91:32:60:35:60:
5b:a3:45:b3:8e:07:8f:74:95:a8:a5:50:cc:a5:fa:88:f6:49:
aa:60:fc:85:28:22:96:77:e0:32:10:ae:ac:a8:ba:ea:7d:c8:
07:b7:8a:9d:e4:e9:06:b5:9d:76:1e:6b:94:ac:35:bf:04:65:
27:89:e8:b4:4e:a3:99:d1:4c:f3:95:c9:66:a6:b6:8a:0d:a9:
58:1e:b4:89:81:ca:4a:83:11:8f:3b:1f:31:a4:d0:f9:a6:b7:
30:de:5d:ec:45:3a:28:13:5d:d3:0d:70:8f:ec:58:40:4a:e5:
d7:98:d1:23:f2:78:14:7d:14:ea:a5:01:6a:80:f5:6f:bb:9e:
28:10:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:41 2026 by rpki-client