Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/665e752b-86eb-4efb-b3a2-6e1e433d30d3.roa
File: 665e752b-86eb-4efb-b3a2-6e1e433d30d3.roa (raw, json)
Hash identifier: NRzt3mbohxMPfk6qc3HpOsFmxtFPhIq7Aom2CMcOFlw=
Subject key identifier: 31:A4:A7:91:13:EA:7F:39:83:4A:83:B0:54:DB:15:5B:C8:85:AE:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F66F44A208B4D6239992AD8BCEFCBD5DE4E9DAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/665e752b-86eb-4efb-b3a2-6e1e433d30d3.roa
Signing time: Wed 09 Sep 2026 16:16:34 +0000
ROA not before: Wed 09 Sep 2026 16:16:34 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:66:f4:4a:20:8b:4d:62:39:99:2a:d8:bc:ef:cb:d5:de:4e:9d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:34 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=bf755438e5e95419f462b79356d4e3060d166513364063fcad41d65296ce099f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:da:5a:bf:0d:c0:84:c3:5f:43:04:73:4b:
cc:9c:bd:ff:64:50:6f:08:62:4f:e6:7f:db:4b:71:
9e:b4:36:23:93:f8:dc:a8:27:45:1e:4a:57:c4:36:
ac:0d:94:c2:6c:87:4b:d6:b4:58:24:ad:09:7f:7f:
6d:3b:04:91:a9:6c:a6:2d:21:66:fe:04:87:ec:2a:
11:00:47:8d:9a:0d:9b:03:ba:2f:ee:2d:90:ab:c3:
9f:30:0b:1e:8f:53:03:9e:ee:d0:0d:a9:78:04:21:
01:93:2c:35:cd:b4:a3:ab:5e:0d:18:c2:27:55:29:
18:9a:5b:2a:f2:53:70:e0:c8:94:74:88:85:a6:25:
af:c4:10:4f:e0:bf:8d:e9:0b:c7:19:7f:e3:b6:00:
ea:a6:06:87:a1:cc:c2:ec:ad:38:13:0c:b3:60:00:
dd:68:5e:72:a3:6f:41:60:6a:b4:d7:94:63:b9:77:
b8:c6:cc:3e:ea:2b:3e:7a:ef:65:cb:e6:30:f0:f2:
9d:41:fa:3c:bd:40:46:4e:15:dc:fb:fa:ce:53:13:
49:80:49:ba:7d:08:fe:fc:5d:a8:74:bd:02:60:ff:
85:75:1a:f9:4a:28:1c:08:c4:3b:5e:b7:fc:56:63:
90:0b:d5:d5:75:fc:25:7f:c6:6f:48:31:9f:31:79:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:A7:91:13:EA:7F:39:83:4A:83:B0:54:DB:15:5B:C8:85:AE:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/665e752b-86eb-4efb-b3a2-6e1e433d30d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:4800::/40
Signature Algorithm: sha256WithRSAEncryption
4a:e0:07:38:bc:53:32:d7:b9:71:d9:e9:0d:22:3c:0e:43:e8:
1d:31:87:16:7d:e9:1d:68:64:c9:f5:1f:3b:a1:33:ac:08:c9:
c7:a0:70:c1:01:4d:84:0e:72:5e:2b:ab:84:d7:ae:d5:d6:6a:
11:fa:d2:f3:21:c3:c2:b4:17:ae:55:71:64:84:a6:36:e5:ca:
b8:8f:bc:f2:50:a6:03:3c:00:8f:78:ba:88:f0:f6:ec:fa:8f:
e4:2f:00:59:34:bb:4f:38:d0:b2:81:43:28:48:b6:6a:1e:e8:
89:3a:79:03:d3:8a:3d:a1:d0:60:94:d4:9d:f2:42:f5:ae:36:
e2:ff:cd:d6:31:4c:34:6c:32:78:e4:eb:fa:d3:93:68:56:10:
5a:47:4f:ad:c1:f0:ee:d9:cc:21:b1:25:f3:ac:da:85:7a:4e:
b3:22:fd:cc:13:b5:28:74:57:43:a1:93:91:f1:e2:24:d1:5a:
1e:08:b9:f2:9f:8d:79:e7:d0:8a:89:44:65:72:cd:c6:b6:96:
00:7a:e0:50:e3:5f:13:d4:e8:0c:9c:20:44:b6:22:d4:13:c6:
23:9b:d6:95:64:97:71:3a:e9:71:a4:d2:c1:8d:24:3c:15:95:
b6:bb:b5:8b:df:ea:d4:10:8d:96:ad:ee:82:e9:69:e7:86:6b:
57:92:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:16 2026 by rpki-client