Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
File: 5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa (raw, json)
Hash identifier: FvsX+YNI2ZK7cpW0oauduINKzHr4+Hp2hfs8oDfKnzY=
Subject key identifier: A4:13:EA:01:B7:B8:52:72:E8:1F:58:D6:18:0A:D4:41:03:28:62:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3471DF84665EBA8B5F10F5CA51F33CD3BD2823BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
Signing time: Fri 07 Aug 2026 05:00:48 +0000
ROA not before: Fri 07 Aug 2026 05:00:48 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:71:df:84:66:5e:ba:8b:5f:10:f5:ca:51:f3:3c:d3:bd:28:23:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:48 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=265b5e15b8edc63b37073d64b8bddb8e435f1788c9911cc30cb7747d90b98d83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:25:dc:ad:08:46:6c:eb:a4:35:ad:0f:91:
69:99:73:1f:21:01:b0:7d:55:7b:d5:1d:81:3b:a9:
fe:90:b5:41:f6:b2:cc:de:01:72:f1:6a:ba:83:e2:
6d:2b:b4:68:69:5c:32:df:29:a2:95:07:5c:76:c1:
02:6d:63:41:4c:20:78:cb:58:88:e5:35:8e:04:38:
c2:4a:29:92:d3:8c:34:d3:01:fc:07:42:3b:54:32:
bc:e7:34:35:a8:17:62:4f:40:82:db:a6:25:ff:5b:
72:64:3b:03:c0:ee:85:83:d8:e1:0a:57:6c:2a:24:
fa:b8:94:62:54:d1:6f:61:84:b9:a5:ed:c4:3b:78:
73:e0:86:a1:8c:fe:81:fa:cf:e0:22:f2:05:47:5a:
7e:24:9a:cd:f4:0b:81:85:8c:4c:35:3c:0f:c1:99:
c6:e0:10:cb:b5:8e:2a:53:f9:5d:c8:85:d6:65:ad:
2a:70:0c:d9:8b:4d:4a:29:52:5c:77:da:9d:a2:d3:
c4:bc:d9:a3:81:9f:66:77:1c:16:20:6d:51:de:75:
f9:ba:e9:ac:21:a8:5a:d5:92:2c:b0:1b:50:b2:68:
8a:1e:fe:ac:44:05:5f:ca:13:5a:aa:65:63:94:04:
3c:ca:60:f2:5c:ab:11:e2:b1:f0:a3:54:14:20:db:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:EA:01:B7:B8:52:72:E8:1F:58:D6:18:0A:D4:41:03:28:62:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.24.0/22
Signature Algorithm: sha256WithRSAEncryption
be:da:f6:2d:41:c1:46:99:08:14:ef:eb:de:c8:e2:58:45:78:
50:90:c9:0a:d3:ef:9b:db:c9:a8:db:21:b1:23:16:87:f3:07:
b9:13:c8:8b:a6:35:76:66:dd:09:bd:09:5c:5a:32:44:8e:f1:
e0:a4:28:a7:a6:67:cd:30:6f:16:4d:4e:25:91:93:d6:59:5c:
8d:95:99:28:6b:44:b2:bb:bf:c8:db:79:3e:87:16:64:ca:a0:
a7:8c:5c:be:e8:58:fd:ed:7f:d1:fb:41:7d:a3:37:53:29:c7:
e7:5b:e9:3c:e2:dc:7f:c5:cb:0d:f9:14:c6:e6:4d:fc:94:34:
99:79:0b:09:9f:d9:43:fe:6e:fb:a6:4a:2d:13:22:36:7c:0c:
58:ac:54:a8:50:eb:f3:c3:0c:90:d8:3d:f9:7d:43:6a:75:47:
fd:ca:e5:76:4b:c2:36:e0:97:3f:85:44:84:ec:a3:d4:5a:63:
66:0e:df:62:61:35:0f:ae:e2:6b:a6:a0:d1:86:2f:c0:84:13:
f1:b5:d5:3c:e3:3d:3f:7b:e4:c5:c5:b9:0b:fc:e3:74:ad:9f:
5d:99:7e:7a:37:b8:14:16:dd:cd:77:a0:b8:9e:f4:1b:7c:3e:
60:47:66:7b:8a:21:fb:0d:84:ca:65:45:a1:4d:0e:3e:be:b8:
02:51:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:46 2026 by rpki-client