Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
File: 5fe931ae-e353-437d-9738-79004c5e9188.roa (raw, json)
Hash identifier: pfj7bsCLNpckDm6C798Z194xKyTl8ZXIWCdYNvmbsD0=
Subject key identifier: D9:92:1B:9D:6E:96:83:85:51:C8:C1:79:68:B2:54:F6:4E:3D:3C:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3809A23AEDCDFAD6A8F22D855985938EEFF13479
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
Signing time: Fri 07 Aug 2026 05:40:27 +0000
ROA not before: Fri 07 Aug 2026 05:40:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:09:a2:3a:ed:cd:fa:d6:a8:f2:2d:85:59:85:93:8e:ef:f1:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9fa3fab7babc4136be9507821c76b4003d0d0e4b60456c1a7084862bc709bce1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:63:fe:de:f5:1c:80:33:09:97:fe:c9:43:
d1:49:16:67:1b:e6:13:bd:8f:6d:92:72:f4:4e:5f:
b7:53:cd:6b:af:02:81:e0:59:14:ec:a1:cc:39:f9:
9f:fc:6d:a8:f6:bf:79:43:44:7f:92:5f:5e:d6:1d:
52:41:76:94:29:ef:2e:8d:35:67:e1:17:ea:8e:44:
48:11:85:2d:6f:7b:7d:d8:02:ce:bc:07:2e:06:8b:
f7:d3:48:77:f3:53:27:98:c9:26:b0:5e:01:33:0d:
82:88:6b:85:0d:6d:8b:ef:3a:9a:00:f2:e4:80:f6:
e7:21:0c:d5:1f:c4:e3:d8:14:1c:03:8d:0e:c6:82:
17:fc:ba:c9:ff:4d:e4:2e:d4:dd:0c:c9:bc:04:20:
95:ae:06:fe:78:d1:76:e2:0d:0e:4e:4e:cf:bb:79:
0b:98:ae:2c:14:1f:f9:0a:63:ba:03:11:1f:c9:03:
45:b7:07:ab:18:71:dc:5a:70:68:83:a0:4b:f3:c8:
37:55:52:59:e4:0b:22:ed:a9:e9:0e:c3:15:45:f3:
9d:c6:2f:47:00:20:7f:e8:03:01:34:df:fa:3f:ff:
ba:95:e6:14:0c:d1:a6:27:91:03:56:b1:8a:ea:24:
00:e3:35:28:6d:39:ef:4e:e1:ed:5c:c0:fc:a2:74:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:1B:9D:6E:96:83:85:51:C8:C1:79:68:B2:54:F6:4E:3D:3C:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:c000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:80:8c:e1:bf:36:8c:31:e3:b8:51:dd:81:82:7f:3f:3d:12:
32:e4:3c:27:4f:8f:32:f2:46:a7:14:6b:97:61:4b:59:10:d4:
7b:eb:80:fe:97:f3:07:d3:09:03:2d:69:d1:21:59:4a:3e:61:
df:85:a7:d5:8c:86:37:76:5e:0b:1c:cd:2c:e7:24:9e:c4:05:
16:65:89:1a:12:16:9f:6c:10:3d:37:78:db:12:21:25:da:c1:
4b:7e:18:fb:90:8f:dd:a8:0a:8b:e3:22:e5:4d:15:30:0a:19:
b2:b8:1d:72:73:84:c2:04:2b:98:b4:89:52:d7:09:09:a0:c0:
64:e2:f3:6a:0c:7d:5b:ed:96:8f:68:90:04:27:e9:e2:b4:73:
e9:a4:96:2b:36:c5:2c:1c:23:3b:19:68:3b:53:5a:cf:bb:37:
41:e1:fa:4f:a8:63:16:24:ca:68:ab:d3:af:dd:f8:b7:19:7d:
fa:67:ef:93:95:7d:11:28:e8:69:50:bf:b9:66:ee:0a:fa:c2:
d6:2f:67:6b:95:e3:96:47:3b:a3:3f:74:59:7f:37:4b:2e:ff:
dd:bf:d1:12:37:fe:32:25:ba:f8:43:92:7a:03:fb:bf:39:b1:
c0:c0:f0:5b:67:f7:ea:77:82:d4:66:50:78:9d:6d:e6:37:6c:
ed:66:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 10:35:00 2026 by rpki-client