Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File: 61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier: lspcxVKBMwaJSYyH8fgQhrlSYQcuemgGE8LTgrJ/4m8=
Subject key identifier: 80:D2:C6:79:79:6D:E7:06:BB:D2:71:D0:77:78:65:FB:40:8A:7B:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74B370175CCC48017E2FDB081D18E3F4F4359997
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time: Fri 07 Aug 2026 05:30:52 +0000
ROA not before: Fri 07 Aug 2026 05:30:52 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b3:70:17:5c:cc:48:01:7e:2f:db:08:1d:18:e3:f4:f4:35:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:52 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9f3671ea22885c05a3af1c054cfb7e87e890368db0538524c4d42c3240418247, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:31:4f:23:d9:4b:90:58:e9:10:7a:67:5f:
2d:c6:8f:64:de:b4:51:a7:fb:cb:28:78:48:72:19:
7a:2e:11:46:5a:f7:b0:2a:16:11:14:2e:2d:6e:97:
99:27:55:c2:ab:0d:6e:90:51:14:88:4d:8e:49:d9:
7c:91:c5:e1:19:43:a9:e4:53:89:a3:56:08:cf:73:
ad:28:76:13:5e:e4:ff:5a:76:de:20:96:5d:02:65:
8a:3e:09:4b:0b:96:3f:38:ca:b7:e6:d3:a2:76:3d:
d0:d1:d6:12:ec:21:53:64:1b:11:a0:12:65:0b:a4:
89:80:d4:81:fb:3a:ec:f5:b2:ad:a3:37:fe:e2:31:
63:5b:5d:fc:1a:c8:39:74:b7:a5:9c:51:bb:0d:79:
a4:fc:d3:7f:31:2b:bd:b5:50:2e:56:70:c8:73:ce:
c9:52:fb:2c:60:2f:5a:d0:fc:9d:08:af:4d:b7:6a:
aa:2b:46:af:a3:b3:ab:2d:cd:45:fa:28:17:8b:ab:
e2:6d:84:8a:82:44:df:c0:ab:d6:88:48:8a:02:f6:
f5:e1:3e:eb:7b:de:56:2d:c4:48:05:99:11:ec:26:
d5:6b:eb:e6:d1:2f:8c:40:37:bb:48:ea:5f:f1:54:
8e:1d:24:88:62:43:90:4c:6e:81:84:11:a3:21:63:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:C6:79:79:6D:E7:06:BB:D2:71:D0:77:78:65:FB:40:8A:7B:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:a000::/40
Signature Algorithm: sha256WithRSAEncryption
41:2e:10:17:32:7e:4f:c2:35:64:08:f8:ba:52:89:aa:26:64:
d3:9a:37:e2:66:bf:5d:cd:bf:56:4f:ab:20:f8:e2:2b:48:cd:
74:79:11:17:e2:ee:08:95:36:be:04:9e:7d:26:b5:06:ee:40:
b7:3a:32:53:47:4e:6d:7d:be:13:42:10:0a:62:e0:86:4b:7e:
80:c4:39:b1:4d:84:6a:ff:e1:25:ed:aa:2e:87:d1:b2:a3:5b:
b0:0c:90:51:9b:5f:a1:fb:29:4f:d0:f5:d5:16:a8:b4:76:60:
d9:4c:9c:75:e6:26:36:51:f3:f4:ff:04:b2:ca:38:d3:40:38:
61:13:65:1d:f3:bc:c9:54:5b:d0:3d:27:a2:cc:4c:b4:e3:e7:
ed:36:81:62:0a:c0:84:9c:8e:81:16:af:13:00:bb:f7:f3:ea:
6a:c9:36:24:4e:55:52:6d:95:93:bb:08:e0:db:bf:15:92:60:
d3:d8:90:61:c2:6a:ba:6a:60:46:09:0f:a5:43:1f:5f:9b:67:
9e:5d:84:00:90:07:4c:bd:f1:fe:96:86:4c:81:e2:98:a3:df:
dd:ff:a4:3f:3c:a1:ec:cc:8a:f0:22:7d:8b:99:2c:89:ea:5b:
da:d1:57:ae:df:67:6f:a1:50:bb:a6:20:25:b9:2f:ff:34:55:
6d:22:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:29 2026 by rpki-client