Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/572100ba-71f4-48c4-9e53-155d24984558.roa
File: 572100ba-71f4-48c4-9e53-155d24984558.roa (raw, json)
Hash identifier: xRlsqShoX+kFW0S8pKd6FJagprXNBE2L0P7wUm2bamA=
Subject key identifier: 80:87:AE:B3:15:DA:5C:EA:22:F2:34:A2:D8:B8:A2:F9:8F:0A:35:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1AA35E0522D56DB31FA01994930C61998FC53DD5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/572100ba-71f4-48c4-9e53-155d24984558.roa
Signing time: Mon 10 Aug 2026 01:00:08 +0000
ROA not before: Mon 10 Aug 2026 01:00:08 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a3:5e:05:22:d5:6d:b3:1f:a0:19:94:93:0c:61:99:8f:c5:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:08 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=be02f07831e2303d6bd59f04a418414eced3583a90a4c521e36e927c2b324582, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:4d:22:fa:06:e3:13:10:4b:2e:da:1c:eb:
99:9d:96:e5:fa:da:0e:17:59:31:04:49:f7:9c:40:
65:98:da:ce:a7:25:ac:f1:d6:e1:0c:5b:ac:5c:43:
f0:d4:3d:aa:7b:bb:d4:a1:97:a8:2f:51:ee:47:98:
aa:7b:f7:ce:e6:13:77:09:7f:56:b3:6a:c8:d8:52:
71:d0:6e:f0:88:22:63:39:bb:27:db:ed:ce:e5:e4:
31:75:66:73:69:5c:97:63:81:5c:a8:1b:bb:ff:e1:
08:3a:c1:67:4d:21:5f:58:1d:56:9b:5c:13:fc:73:
e9:ab:1b:04:fb:78:b6:f8:77:5a:81:8f:80:b3:18:
61:a5:fb:99:0e:7f:2f:33:d8:a9:ea:bb:f2:d5:bd:
f0:5b:6f:9d:ce:b3:52:a4:47:ea:f5:df:42:41:0d:
39:44:aa:11:9a:3a:eb:5c:e9:63:04:db:61:bb:78:
f3:ec:58:76:10:91:51:0b:e2:f3:a7:41:1d:94:43:
7d:74:e5:b2:50:0e:44:4e:c6:a9:8f:8b:b6:ad:b2:
e5:0c:61:1a:ba:ca:82:93:3a:f0:a8:73:1b:21:92:
f8:0c:56:46:e9:6f:0e:59:b5:a8:bd:c6:a6:93:f5:
3c:0c:25:8b:76:ef:e2:bb:44:6a:4e:c9:c5:51:10:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:87:AE:B3:15:DA:5C:EA:22:F2:34:A2:D8:B8:A2:F9:8F:0A:35:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/572100ba-71f4-48c4-9e53-155d24984558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:b000::/40
Signature Algorithm: sha256WithRSAEncryption
09:98:d1:48:1a:a5:78:d9:94:c0:0d:d7:6e:af:b4:0e:5f:ec:
ce:ff:f7:70:f7:c0:9b:25:a3:cb:93:0b:47:1e:76:1f:70:de:
82:70:ef:7d:b4:e0:e6:a7:c1:fa:76:e6:e5:4e:14:2f:b1:af:
23:0a:11:f9:e0:eb:39:41:e8:31:e9:90:36:1a:7e:ca:83:0f:
7a:92:a4:b2:1d:0c:53:d0:f1:32:a4:ca:e9:10:5e:37:23:3b:
e3:0f:c6:5e:b4:78:d5:a0:9c:a7:62:68:10:a8:41:46:fc:05:
15:62:49:58:65:d4:7b:17:3c:e5:09:2c:51:b6:0c:65:00:5e:
8b:13:92:a2:4e:12:f7:c6:14:f8:d0:65:f4:9a:f4:c3:d6:fc:
60:11:b0:22:56:60:db:58:c6:6d:71:97:01:bf:00:77:e0:54:
ca:b5:b1:ef:2c:1a:5a:d1:61:75:c4:06:df:65:34:64:1e:6c:
c9:28:2c:97:4d:97:97:25:d8:d5:0e:d1:3e:46:87:45:e2:cf:
99:34:90:02:17:00:c8:19:b2:ba:e8:af:77:dc:f6:b5:48:64:
b7:de:26:1f:b9:93:2d:8a:ca:9d:92:d9:13:21:25:53:48:86:
71:f8:8d:02:4a:81:41:c8:91:ea:45:42:6a:f8:05:7e:c1:76:
9a:fc:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:18 2026 by rpki-client