Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
File: 6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa (raw, json)
Hash identifier: aPWMEKgeDmi/gtN7ViZYeZSWN0oQhQlrTok1gdKWEUU=
Subject key identifier: 50:3D:F5:BC:34:F8:44:0F:CA:92:40:DF:DF:47:88:58:FB:FA:E3:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C7700B3A52F2B5B99FDD7B18B9BBA88D30E3CAB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
Signing time: Fri 07 Aug 2026 04:50:07 +0000
ROA not before: Fri 07 Aug 2026 04:50:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:77:00:b3:a5:2f:2b:5b:99:fd:d7:b1:8b:9b:ba:88:d3:0e:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a6fee63abb97b48ad08e2879966fd7f9ffadbbb87b060198b08401b85282590c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:93:15:d7:97:f3:c5:70:df:48:a1:08:bf:
31:d0:bc:0a:0a:d5:9d:db:2c:86:27:e5:99:08:b8:
c3:44:eb:d1:bf:ed:31:30:ac:24:76:73:d0:37:48:
4f:38:57:81:3d:e3:a6:b9:8a:7b:cc:00:91:94:29:
b4:f7:d3:7b:80:1a:d2:2a:83:49:44:91:f3:6f:94:
26:07:15:48:1d:71:6f:16:68:0e:9c:4c:40:18:08:
d1:ae:15:7c:54:70:f6:0b:d4:2a:6d:27:6f:6d:45:
e5:b3:d2:7c:9f:41:9d:33:83:20:a1:e8:f9:0a:1a:
8d:57:8a:23:01:30:f0:84:29:b7:df:fc:b9:99:08:
ba:00:74:5b:e4:df:8e:00:03:5f:a7:bb:e0:cc:cd:
f6:7f:99:ff:0f:20:03:17:01:b5:50:08:e9:ac:00:
08:4b:f5:f6:d3:9a:f1:ed:a6:3b:77:9d:69:08:e0:
d4:e5:d1:78:40:48:75:05:78:82:d2:b2:7c:95:57:
1c:15:9b:77:d9:be:bc:fb:13:7c:aa:bf:d0:a2:4e:
49:74:11:7b:16:f7:40:8b:6a:6e:99:c9:e8:ca:11:
3a:43:a1:e6:6d:cf:d9:a4:98:18:23:e2:d7:96:0e:
f6:d9:fd:c5:f6:60:4f:82:41:11:10:3e:36:ad:05:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:F5:BC:34:F8:44:0F:CA:92:40:DF:DF:47:88:58:FB:FA:E3:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4040::/48
Signature Algorithm: sha256WithRSAEncryption
81:74:a8:e5:cc:01:38:fb:3b:f9:66:fe:68:09:c0:ab:5c:ef:
cd:11:a8:27:08:18:3e:74:d8:80:20:b8:f2:67:82:be:cc:31:
95:80:57:04:63:04:6f:2d:9e:a6:f8:32:f7:99:79:c1:43:95:
bd:49:ef:7b:e1:a7:37:c5:91:d2:2f:ca:be:52:ca:0c:34:7c:
c1:49:3d:ef:b3:8b:7a:b8:e5:19:e9:7e:ad:6d:d4:ec:c1:bd:
17:d9:51:cc:60:00:ee:61:e0:4e:d0:52:2f:f1:ab:88:46:f4:
54:b3:ba:3e:95:0c:c9:26:a4:b9:77:d6:47:29:78:39:4c:b8:
56:1e:47:42:c2:d7:4c:bb:72:90:73:06:cf:8d:62:5c:10:44:
57:98:b5:e3:f8:13:32:bc:89:70:f8:d8:8a:88:32:30:c5:48:
41:80:7f:2a:6f:2b:0e:c7:24:5d:70:9c:8f:97:7c:10:37:78:
0e:f4:16:72:3f:c6:b6:14:9b:2b:5d:88:78:be:83:89:77:c4:
fb:41:bc:95:76:a8:c1:3f:94:1f:e2:c3:73:7e:d8:68:3b:6d:
18:94:7b:06:0f:49:64:6b:dd:46:2f:6e:6c:71:d1:53:86:7e:
82:d9:98:ad:07:9d:5c:bc:8f:52:0a:97:e5:a0:6a:a5:ff:9e:
b8:f6:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:39 2026 by rpki-client