Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6141fbb2-1d90-4dfe-b686-04ed301ce139.roa
File: 6141fbb2-1d90-4dfe-b686-04ed301ce139.roa (raw, json)
Hash identifier: e9fOM3ynqY4T1fsTdo/wfNiLOY9QXnzXwxGMZ/k2KYk=
Subject key identifier: 93:42:FE:46:E0:D2:32:D5:61:D9:8A:33:6E:EE:E2:60:0E:EA:37:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 016124B251F87E64497207AA8A751CFBC02E9DDE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6141fbb2-1d90-4dfe-b686-04ed301ce139.roa
Signing time: Wed 09 Sep 2026 16:12:54 +0000
ROA not before: Wed 09 Sep 2026 16:12:54 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:61:24:b2:51:f8:7e:64:49:72:07:aa:8a:75:1c:fb:c0:2e:9d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:54 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=3eac1db9d214db4cd418adf71db657f0838029d65797818b71bf08808ccd62bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:33:fd:40:ce:35:c3:c0:89:24:6e:58:e3:
55:c3:1f:e1:d9:32:cf:5a:d0:ea:62:1a:63:28:7d:
c2:ba:7c:bc:90:92:8b:6d:09:84:dc:73:9d:6a:60:
c1:7f:b6:b7:fd:63:f4:33:03:37:41:56:20:86:48:
3f:f9:af:c9:12:32:c8:8f:91:e1:39:6e:b3:be:5c:
14:f3:82:d5:e0:29:13:95:2c:36:6d:1e:e1:ae:5a:
7b:89:fd:6b:10:24:70:a7:a3:f8:6c:2a:81:39:ad:
27:94:c9:d6:1f:4c:3d:e6:5a:03:4e:6c:be:a1:f2:
8a:37:56:2c:f4:70:99:61:b6:32:e1:e7:07:d2:64:
06:91:9e:1b:b5:61:85:da:21:9c:33:81:f5:f9:94:
ff:f5:a5:f4:42:8e:e1:d6:b3:c1:be:f6:2a:92:b6:
db:71:c4:34:fb:1a:30:2a:5a:f6:63:55:fa:77:27:
2b:47:d9:b9:a9:03:95:cd:14:e2:52:e4:b7:b8:ce:
c6:f8:aa:18:56:9e:1a:d9:2a:05:59:9c:93:1b:7b:
fc:fd:81:9e:50:81:b0:4e:dc:a9:f0:72:c4:73:a6:
86:1a:b8:e4:6a:ee:e4:26:3f:fc:90:f3:8e:57:25:
4a:59:10:92:e0:d0:3b:09:70:3d:7d:b3:da:85:2f:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:FE:46:E0:D2:32:D5:61:D9:8A:33:6E:EE:E2:60:0E:EA:37:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6141fbb2-1d90-4dfe-b686-04ed301ce139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8800::/40
Signature Algorithm: sha256WithRSAEncryption
40:74:eb:3f:c8:e6:8a:45:a4:f0:c2:8d:f4:94:47:81:1e:0e:
24:26:55:d4:3d:e2:98:e0:72:e2:07:4e:a3:f9:49:4f:6f:c4:
7d:00:62:a3:e9:ab:5c:62:7d:24:2e:67:bd:b1:eb:af:4e:dd:
f3:bc:1b:94:ed:e4:2e:99:20:52:46:99:e6:fa:e8:2d:dc:29:
20:e4:e9:25:7a:15:b4:8e:26:fa:30:6a:ff:78:01:75:3f:02:
e5:db:3f:d8:bb:c8:d5:79:ab:37:4e:dd:67:30:e4:40:b9:50:
07:b2:1d:71:29:bd:28:cc:59:eb:2a:1f:48:18:05:79:68:ce:
8f:64:aa:97:86:9f:ac:08:db:8d:11:bf:74:a4:86:c3:2e:3f:
03:1e:de:2a:d7:29:d3:42:9f:fe:dc:d1:a0:69:a3:de:13:de:
4f:a9:9e:f2:48:de:e7:b9:46:85:c1:8b:8c:1f:dd:15:e6:11:
56:2c:f8:8f:36:9f:a5:e0:5a:2a:45:b2:59:d9:6f:23:10:da:
53:78:f5:d5:17:92:a8:e2:c9:70:44:b4:7a:5f:3d:bd:fc:4d:
db:bd:8c:53:5c:d1:81:b0:90:6b:b4:09:09:e2:1b:6e:1d:48:
de:5b:56:29:5f:1b:14:5d:3e:77:8a:da:3b:df:96:54:61:1e:
a6:3d:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:52 2026 by rpki-client