Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69f5be05-70d5-4f47-a04a-4d5030b172cf.roa
File: 69f5be05-70d5-4f47-a04a-4d5030b172cf.roa (raw, json)
Hash identifier: xUbjvLZ4n6Nx/iBi/tz8pflmERZLKDmHFYHMMLQTtCc=
Subject key identifier: 6E:14:2A:E1:AF:C0:FD:F5:FA:74:5B:2E:A6:D5:82:3F:02:59:CD:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6ED0530364E5AFB2D479D9B4E165D25F6CA9DDD4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69f5be05-70d5-4f47-a04a-4d5030b172cf.roa
Signing time: Wed 19 Aug 2026 01:00:42 +0000
ROA not before: Wed 19 Aug 2026 01:00:42 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d0:53:03:64:e5:af:b2:d4:79:d9:b4:e1:65:d2:5f:6c:a9:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:42 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=9a21221548184829148b225fa7d91cff52beafd0550a5e79f439a34623701c40, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:cb:03:36:54:ef:fd:ed:55:b3:0f:c3:35:
a9:ba:a8:c1:6f:1e:87:4b:90:fb:d4:8e:8f:ba:cf:
67:c8:3e:a7:0d:df:ee:a2:2d:06:e2:24:f3:c5:69:
66:1e:e8:44:71:8a:b3:60:9a:90:2f:44:62:59:da:
3e:9a:93:61:f0:56:5a:10:06:b2:81:2f:9c:83:3c:
2c:1c:d6:86:45:44:0d:71:0d:1b:a8:ab:c0:c0:15:
c8:1b:8c:4a:65:42:da:72:95:9f:af:3b:3c:2a:12:
1c:9a:84:aa:94:71:ea:67:dc:16:77:62:ed:31:c2:
4e:21:5b:68:0c:f3:3d:a9:e1:29:15:dc:5a:73:5d:
bf:cb:35:ba:f8:4a:e3:5f:25:ea:48:c0:cf:4e:7f:
dc:d8:1b:16:9a:c8:a0:f8:0e:00:a0:8c:07:a6:fd:
4f:d7:6e:f2:1a:0e:fc:37:80:32:51:10:70:74:29:
2d:45:06:2f:d8:6e:bc:4e:8e:26:41:84:80:70:71:
38:5c:b7:10:9f:0d:f6:97:53:86:3c:e9:c2:46:2e:
42:13:78:59:e5:85:37:04:02:58:bd:a0:9a:e0:b8:
7d:3b:67:a0:6e:07:6c:5d:18:7d:bd:b4:c8:4f:57:
f6:95:7f:9f:38:7e:53:ac:c4:19:64:0b:97:e8:90:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:2A:E1:AF:C0:FD:F5:FA:74:5B:2E:A6:D5:82:3F:02:59:CD:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69f5be05-70d5-4f47-a04a-4d5030b172cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:b080::/48
Signature Algorithm: sha256WithRSAEncryption
43:df:c3:97:df:e4:d5:c7:cc:7a:d2:94:5b:58:9e:82:d2:07:
00:40:56:f0:29:fa:25:56:3e:d2:cd:d1:69:78:47:40:5d:7f:
7d:cc:67:b9:54:cd:f2:6e:18:e4:1d:7c:1f:ed:66:41:db:eb:
30:66:bc:53:7d:5b:f0:5b:02:1c:51:54:ba:51:fc:1c:04:9e:
88:62:52:70:e0:2a:cb:d8:51:db:ae:67:99:06:7c:d6:bf:ec:
77:ce:6b:4b:8c:ed:34:d5:c1:cd:82:26:1e:d1:8d:b4:e4:c2:
5a:e8:fe:e7:10:d4:63:1f:64:46:50:60:93:f5:73:32:77:06:
ed:13:36:31:9f:8b:18:6e:f4:05:db:27:66:56:26:c5:e7:83:
71:fc:63:ed:f0:1e:d5:8c:b0:a3:f7:39:52:42:87:1d:00:2d:
b7:84:0a:9d:a1:23:53:8a:71:4e:92:2d:a9:53:0c:ef:fe:56:
1b:45:27:b9:e0:7a:51:e8:70:de:b9:10:4d:20:d5:de:05:c3:
8b:d9:a4:64:a5:92:2d:72:1c:ed:34:ab:fc:5e:0b:b9:2e:b6:
ec:3f:fc:ce:58:b6:22:ea:d7:77:fb:3f:35:58:17:13:04:88:
2b:6c:e0:34:52:2f:41:4a:4d:68:d3:87:83:81:cd:28:82:2f:
30:ae:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:40 2026 by rpki-client