Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60e6a684-7f6a-4f3f-8ca5-0d566c2a7875.roa
File: 60e6a684-7f6a-4f3f-8ca5-0d566c2a7875.roa (raw, json)
Hash identifier: SBKybskYgs4ph5uBayQm63dBbGnat+nevgHgpLSePSE=
Subject key identifier: 1C:75:41:A9:4D:E9:26:5A:A3:65:1E:5E:8D:DB:9C:C5:DF:82:AC:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 035BCFEEBD242B6F6C777A214DEAE50B408F5D80
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60e6a684-7f6a-4f3f-8ca5-0d566c2a7875.roa
Signing time: Wed 19 Aug 2026 01:00:07 +0000
ROA not before: Wed 19 Aug 2026 01:00:07 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:cf:ee:bd:24:2b:6f:6c:77:7a:21:4d:ea:e5:0b:40:8f:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:07 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=e09a8444b7b499bbda3afdd4eb60931f1c58072d9f6c5fbf287b32ca97356af3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:7e:fc:03:53:84:69:dc:ba:cc:e5:ed:d0:
f8:ee:89:70:3e:31:b5:c4:70:97:85:da:a3:26:68:
d6:38:60:ee:06:31:2d:a0:76:f9:41:70:e8:24:c1:
6a:d6:61:68:79:e5:14:36:b1:6f:2c:6a:71:5b:99:
50:a8:8f:e4:c4:39:48:5b:29:91:18:98:2a:8e:5d:
46:99:12:4e:6e:9f:e4:f5:73:81:68:ac:f2:c4:ee:
28:79:cb:13:c2:7b:62:c3:06:c8:b5:80:cc:91:53:
c3:31:9e:72:c7:f2:9a:91:7e:12:ea:2e:d2:7c:db:
33:9f:a9:43:8d:87:ad:30:bf:3e:fa:c9:67:fc:ff:
86:bf:03:a3:a7:d6:02:f1:22:b2:72:6d:84:e9:ed:
62:38:99:c1:ef:79:62:81:37:51:2f:0d:70:9f:a6:
a1:ec:89:10:df:86:8c:81:14:c9:70:15:81:fd:e6:
30:53:d7:61:f6:2d:17:09:6a:f1:14:d6:69:8c:01:
35:f2:1b:69:71:e8:b0:8d:c1:67:b2:77:a3:3f:29:
f4:98:88:cd:27:de:b4:d3:8a:8f:eb:7d:32:56:5a:
2d:bf:99:8c:89:ea:58:9b:e7:51:7f:b2:ac:77:62:
2d:ee:7f:c2:15:02:9e:da:8a:98:44:9b:99:41:8e:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:75:41:A9:4D:E9:26:5A:A3:65:1E:5E:8D:DB:9C:C5:DF:82:AC:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60e6a684-7f6a-4f3f-8ca5-0d566c2a7875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
64:87:63:d3:dd:f6:60:38:1c:c8:c8:cd:e3:76:93:c6:21:86:
73:c0:06:e4:d3:14:50:82:63:46:d2:ec:20:21:ea:64:07:07:
81:86:59:1f:f3:47:e8:0d:43:24:5f:2a:97:4f:bd:c0:e6:af:
5e:fb:54:1b:1d:45:e9:af:4d:7b:f1:4e:b5:cd:7d:e9:38:57:
24:06:81:9e:fc:9b:a8:05:ee:5b:63:5b:58:7d:ba:6b:ba:f8:
f3:0d:ba:f2:97:33:d5:cf:7e:07:a3:50:08:fd:89:5b:91:37:
f8:c7:cd:05:be:17:3d:8a:f6:25:d0:8c:0f:29:81:2e:40:4b:
63:f1:67:e1:4b:83:72:8d:21:0f:b4:e8:ec:d9:41:6a:27:29:
44:d4:c4:6e:1c:ea:42:ac:d3:76:d5:85:99:14:06:35:ed:01:
1f:77:1b:fc:2f:f8:24:18:97:0e:d4:04:24:8c:42:62:50:5c:
2c:7c:8c:91:d9:fa:73:00:38:c0:35:e4:92:f1:76:7a:18:04:
21:8a:2d:3d:bb:c6:71:58:e6:94:f0:0c:66:96:6b:c3:d3:45:
02:aa:10:9a:33:9d:ec:9d:68:15:2b:85:50:6b:39:aa:87:15:
51:2e:3c:c3:4e:5b:b5:1b:98:ab:68:97:28:df:01:29:38:0c:
a4:f0:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:25 2026 by rpki-client