Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fdad93c-1777-4074-983f-de5537a5f29f.roa
File: 5fdad93c-1777-4074-983f-de5537a5f29f.roa (raw, json)
Hash identifier: yt5jG+W0gDpnmnHbsk4IzBoSdsHrs4KdcJQ+YPy/sTY=
Subject key identifier: 9F:BF:35:C9:32:D3:AA:12:28:DC:50:4E:16:32:2D:9E:78:F0:63:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54D59EA032B3121DAC8C7D8F720ABF1E9B4F7661
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fdad93c-1777-4074-983f-de5537a5f29f.roa
Signing time: Wed 09 Sep 2026 16:14:02 +0000
ROA not before: Wed 09 Sep 2026 16:14:02 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d069:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d5:9e:a0:32:b3:12:1d:ac:8c:7d:8f:72:0a:bf:1e:9b:4f:76:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:02 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=0c2c1bf67ee986ac5f04ef1f418e9cf13026ced7bb9ae969a4c059681328efe6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:14:c3:9d:a9:8b:e4:08:0c:12:14:5d:f2:
7e:a5:c9:79:71:4b:fc:ed:58:4b:54:44:43:db:cf:
84:4f:72:75:19:c2:ae:1e:85:64:47:53:68:86:a1:
99:20:b8:0d:9d:1d:5b:2d:36:11:e0:e5:df:d9:ff:
b9:cd:00:b7:6a:74:82:3a:ac:d8:ff:31:41:6d:b3:
c2:7b:c5:ec:de:0a:dc:63:36:44:30:59:e4:dc:bb:
32:c5:9d:77:18:ad:ac:01:88:9b:69:f4:69:ea:e1:
3e:d9:2e:6e:3a:bf:34:98:d9:09:90:8a:18:95:6b:
20:c3:ec:0f:75:9f:09:c8:c6:98:1e:02:54:53:84:
d3:dd:af:c9:3f:2f:af:4b:d7:fe:e2:9c:a2:37:8c:
0d:c1:f5:83:5a:aa:0c:a8:fb:02:cd:ba:be:eb:59:
78:43:05:eb:c7:12:7c:0a:ba:f3:96:48:da:22:10:
a4:2a:00:28:79:a1:cf:94:ee:9d:51:cc:6b:4e:e9:
9f:54:08:c8:91:b0:13:bd:4a:b3:3a:f6:8c:f7:26:
4f:4b:77:78:b5:36:14:e2:f9:c5:27:df:c3:21:22:
c2:a2:84:45:7e:9a:74:d4:ce:b0:c2:e2:5c:be:1c:
f2:24:2e:ed:01:2d:3a:7d:bd:52:28:0e:65:b4:1a:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:35:C9:32:D3:AA:12:28:DC:50:4E:16:32:2D:9E:78:F0:63:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fdad93c-1777-4074-983f-de5537a5f29f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d069:b000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:e9:a3:93:f0:07:fd:76:2d:1c:45:54:49:f2:66:42:f4:f7:
53:c8:fd:80:16:be:73:17:a9:f4:6e:31:f9:33:77:2a:5e:ae:
ca:55:6b:34:bb:b3:22:03:2c:33:15:6f:16:0e:02:34:af:55:
69:86:5f:52:83:cb:07:11:c4:c0:23:bb:a3:ab:7c:b9:ff:88:
d5:1d:c5:49:ce:63:87:10:7b:3b:ac:92:fb:ea:ff:cc:73:be:
27:08:09:f3:f5:95:00:47:13:05:fd:48:6f:8d:cd:f5:79:8d:
08:f2:c0:31:a5:a4:df:47:b6:e5:03:7e:63:5a:d4:38:dd:9c:
be:c0:a9:c2:ff:49:1a:57:96:5b:06:06:fc:f5:b3:4b:28:e6:
3b:d3:d9:09:db:d3:99:cb:1b:42:f9:d6:d7:f0:d0:ae:1e:63:
0b:0f:c5:b4:ce:b7:e6:fe:b0:0c:bc:d8:2b:37:6b:0c:8b:f9:
6d:d0:c2:5c:a6:e3:94:58:5b:fd:3c:f9:75:7c:83:4a:79:06:
1a:ef:53:36:95:fc:e7:45:ad:26:fd:7f:31:e4:66:44:bf:03:
fd:ff:fb:68:19:82:08:5a:7e:00:55:b3:fd:2b:8f:10:8a:06:
6f:9d:fa:42:5b:ab:29:67:c2:56:33:33:d4:30:db:4a:ac:35:
16:21:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:34 2026 by rpki-client