Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File: 5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier: adAmvYwDgQ6z5LK4sRsbsxkjrUVnfSQHXo3R8+Vgqs8=
Subject key identifier: 1C:B9:E4:3D:6A:FB:B7:6B:2D:0B:26:8A:1D:6E:EA:9A:B8:48:66:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 156D8A5926F3ADC851B88C7028261FFF2A4BA3D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time: Fri 07 Aug 2026 04:50:08 +0000
ROA not before: Fri 07 Aug 2026 04:50:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6d:8a:59:26:f3:ad:c8:51:b8:8c:70:28:26:1f:ff:2a:4b:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=efdeea3e18c7e8f41fb69b00094d9ecde663185d5f6b794598fb505e85182aa1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:8a:76:ab:e8:fb:20:d6:1b:f5:d5:5f:4e:
af:cb:39:4f:5a:e6:36:26:99:ad:f7:b0:ea:a8:d1:
c9:04:13:06:e8:eb:cc:f0:c3:4d:0d:d2:43:96:ab:
13:af:25:53:56:9b:91:b8:7c:be:4f:ce:bb:ca:89:
4a:22:41:33:6b:6f:21:e6:a5:de:1a:43:f8:85:f1:
1b:6b:44:e1:11:2a:fc:db:4a:5c:b0:bf:31:21:fe:
fa:d6:0e:8d:68:73:34:97:da:cd:03:ec:0b:26:c9:
28:5f:81:46:6b:ae:9d:93:7b:55:0d:72:07:42:aa:
12:50:33:8f:9d:c4:db:d9:7c:7b:27:c8:08:1e:cd:
02:c7:86:79:d7:44:57:82:60:94:93:4c:d5:82:23:
7f:ab:35:91:8b:ef:f6:85:26:81:c5:ce:14:7d:56:
3c:af:b3:7e:35:f2:4c:df:58:5d:a1:22:6b:e5:b7:
9a:4e:d0:26:93:56:22:5a:ae:30:fb:d9:8e:cb:38:
c5:8d:5d:ec:c6:6a:59:59:4c:23:bc:3a:99:c3:35:
a8:4f:bc:0f:22:57:db:9c:75:ff:78:e8:87:6f:c7:
12:ca:18:07:f4:2b:f1:3c:1b:6d:de:77:f5:a3:6b:
82:7e:93:6d:ae:d0:50:b6:47:d1:54:43:d0:d0:27:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:E4:3D:6A:FB:B7:6B:2D:0B:26:8A:1D:6E:EA:9A:B8:48:66:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:c000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:fb:0d:89:1b:52:a5:b1:82:c0:f1:b0:bc:13:24:ca:6e:39:
c8:59:ca:fb:ef:ff:45:02:7f:91:d5:e3:74:d5:0d:f8:7b:dd:
44:30:b0:75:2c:53:b9:19:9b:0d:37:1b:57:42:f7:45:aa:8d:
94:5e:bb:1f:79:b9:2f:82:d3:bf:bb:ec:79:41:aa:d1:2b:23:
de:4b:8d:01:cb:c3:39:29:dd:e8:e6:6f:0a:65:88:68:30:3f:
b9:be:c7:ea:70:fd:22:e2:33:26:24:33:20:d3:2e:71:60:f5:
f3:dc:4d:ab:de:ba:40:50:90:e0:27:43:67:7f:32:35:40:c4:
54:80:a4:60:4b:6d:66:ef:cc:bf:e8:58:a4:ef:7e:0a:82:33:
d4:e2:16:4c:97:a1:27:a0:f3:c5:05:94:cf:a4:20:6e:b0:fb:
92:3e:d3:cf:91:e3:33:f3:af:ed:2c:e8:7b:a6:61:96:90:fa:
d6:10:f3:5a:47:50:06:c6:bf:43:49:b4:e5:e2:75:b9:44:88:
8e:28:c0:13:3b:58:6e:89:49:22:72:b1:b7:d4:b7:eb:1b:7c:
0e:8a:79:5a:ae:d7:b4:f0:02:8a:15:5f:8d:07:3d:57:4d:4a:
4b:e8:59:00:62:64:96:c9:66:d9:2d:67:e4:4d:89:f9:c4:8f:
41:8c:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:07 2026 by rpki-client