Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
File: 6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa (raw, json)
Hash identifier: tSgihXaqcp9p8n1zRQ+wLTcLNc+vVals/pCGskQAMog=
Subject key identifier: C3:9A:40:DF:EA:A2:9E:41:76:7B:0D:CC:E1:7C:BF:C0:AA:86:4C:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05840DEBCFE0062EFF50C402B557F86EE5C9E639
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
Signing time: Fri 07 Aug 2026 05:30:53 +0000
ROA not before: Fri 07 Aug 2026 05:30:53 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:84:0d:eb:cf:e0:06:2e:ff:50:c4:02:b5:57:f8:6e:e5:c9:e6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:53 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=048f81f340196934300a70165834ad5162d4e3d0d69f6fd7d4b9d949cb3df4bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:41:02:63:95:42:0e:86:95:84:ac:a5:13:
9a:e1:4b:7f:2b:32:8a:7f:c2:f5:39:07:ac:20:06:
e7:45:69:47:6e:a6:a4:0b:cc:a8:32:76:7f:fd:e4:
00:7c:76:ab:5c:bf:fb:a8:5d:04:d4:6b:1e:b3:64:
c9:e0:bc:53:96:1c:a9:df:47:73:78:93:f3:09:d9:
ee:81:9c:df:78:fc:ae:de:b7:16:3c:47:50:de:51:
a4:50:4d:a0:1e:74:e6:a9:63:99:6f:84:eb:3b:b7:
14:da:d2:a4:28:22:85:83:1e:8b:9e:34:ba:63:26:
0e:77:70:5a:07:3e:3c:04:47:27:ad:8a:92:e8:4d:
00:67:a3:a5:d8:63:2c:4a:41:5d:2d:8f:79:cb:e4:
3c:87:48:2b:eb:6b:43:11:2b:60:75:9f:a8:8f:d5:
11:d8:ec:6b:ed:52:9f:53:ac:f7:e1:f6:cc:99:ff:
e1:eb:e9:36:98:d6:f6:dd:61:ea:9a:cc:7f:f7:a4:
2f:9f:08:d6:dd:5a:6c:aa:8a:c6:6d:70:df:ff:bd:
1b:43:e6:24:cb:66:04:8c:56:8c:b8:a1:e9:73:23:
5b:6d:6c:19:8d:7c:96:34:44:30:aa:1e:e2:8b:4e:
9b:13:cd:cc:e4:f2:e6:ab:58:33:4f:47:bc:61:24:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:40:DF:EA:A2:9E:41:76:7B:0D:CC:E1:7C:BF:C0:AA:86:4C:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e58fa17-0cfc-4a06-8d48-47d96c0d49af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e::/36
Signature Algorithm: sha256WithRSAEncryption
8c:fd:97:34:9f:99:81:b7:81:68:e9:8c:c7:63:0c:5c:4a:83:
11:fe:30:7f:a7:4e:2e:86:87:d2:ba:21:89:06:3a:7d:35:49:
c9:68:b8:50:18:a3:f8:2e:2d:31:b6:7c:08:3e:67:c6:90:34:
36:da:34:66:4e:59:f7:59:27:fa:59:81:75:b1:a9:22:bf:cb:
1a:67:60:87:29:32:c8:69:1b:4c:89:94:dd:78:55:da:7e:4a:
f7:4f:f0:90:56:3d:91:27:a5:99:71:58:84:40:4e:9e:cd:de:
d7:83:00:88:4d:e1:2b:d6:fa:de:19:80:90:10:97:43:8f:ae:
f9:ab:ed:74:2f:b0:b9:2f:7e:08:79:fb:1f:82:47:cb:b8:86:
58:3e:8b:55:f9:c7:bd:b5:13:22:06:d6:ec:68:be:e1:71:89:
be:45:b9:d3:76:9b:9f:62:0a:17:46:a1:6b:fd:87:9b:70:ca:
bd:c7:23:ec:17:3e:75:4e:52:22:82:6f:d7:6d:8e:1f:01:69:
45:58:61:93:4e:39:d0:bf:03:3e:8d:13:03:aa:cb:d4:2f:66:
b0:8e:97:24:cc:44:d4:5c:02:42:c3:83:0e:73:1e:f4:1c:f9:
9e:d9:38:38:61:4f:82:12:91:12:f7:36:bb:ca:aa:66:ac:94:
8c:6e:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:04 2026 by rpki-client