Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
File: 70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa (raw, json)
Hash identifier: Zt7fUy7dW1fAPFn5vkp+W9PUVQC5Tl8oKXdYQ5LpLoc=
Subject key identifier: 3C:0F:4F:E9:A9:B2:E7:28:11:CC:83:94:5A:BD:6F:EB:90:29:73:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19660EB8D91D751B23AEDDFECAED4C2BB268814E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
Signing time: Fri 07 Aug 2026 04:50:40 +0000
ROA not before: Fri 07 Aug 2026 04:50:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:66:0e:b8:d9:1d:75:1b:23:ae:dd:fe:ca:ed:4c:2b:b2:68:81:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5aed8ad78d156b955b57a29a11522d4fd082e36f141b906c0e077f41a3a7d22c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:d2:b2:c1:fb:84:c7:ce:e9:af:61:6d:9a:
69:0b:19:c8:5f:e5:0f:83:c9:cf:41:54:95:7b:51:
11:3e:c6:67:70:c6:f5:61:d7:ff:24:f6:de:c0:5c:
aa:63:3c:20:77:cb:d5:63:94:82:ec:9d:10:31:f8:
18:33:48:c5:d6:1f:5c:08:2d:ef:47:e5:b9:b4:e4:
b5:3d:98:db:49:95:15:b6:05:19:f9:2e:b8:79:36:
4e:98:e3:5f:43:ed:28:96:37:3e:a6:85:7c:ba:03:
95:42:e4:d3:1f:a1:41:b1:3b:7d:6e:e2:c5:ad:5a:
09:4b:03:65:be:6f:60:c8:24:aa:0b:17:dc:93:fb:
fb:c9:66:7d:7b:33:6a:f8:11:8f:60:a9:5d:bd:e0:
01:62:81:61:03:35:bb:5b:ab:1d:ee:51:7f:e0:08:
d8:4d:c0:73:5e:7c:92:26:0b:3a:03:2d:15:4e:14:
61:3e:b9:57:3b:54:2a:e4:c2:58:6c:e3:f0:e9:25:
0a:c3:6f:b2:aa:99:11:cf:b7:4c:6c:b6:b6:08:e0:
9b:10:14:c5:ff:08:39:ba:c9:9c:7b:2a:34:74:3c:
e3:b1:cf:46:2b:73:f4:44:59:b5:d4:9d:60:e9:9f:
55:57:98:bf:0e:f7:62:c6:14:5e:af:93:ec:55:34:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:4F:E9:A9:B2:E7:28:11:CC:83:94:5A:BD:6F:EB:90:29:73:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:5000::/40
Signature Algorithm: sha256WithRSAEncryption
2d:ec:38:6d:99:6b:d7:d7:f4:b0:02:9c:da:cc:27:26:fc:f7:
f0:10:f0:af:20:7e:37:69:6f:71:23:1f:12:c2:7d:86:3f:74:
91:fb:65:33:8b:24:a5:09:2d:ca:44:c3:5a:f7:55:65:e8:3e:
59:71:f8:fc:6e:e5:e5:7b:6b:a3:47:a2:47:76:92:3e:88:a8:
46:8b:4f:54:a2:3c:b3:36:1e:0d:80:70:ba:7c:9e:4c:6d:7b:
c2:15:b9:77:de:1e:49:5c:6a:c4:3b:a7:2b:87:63:44:9a:31:
95:15:64:d4:0d:8a:31:35:f4:cc:ed:fe:c2:d7:e8:3f:4e:8c:
71:66:90:9f:b8:83:8f:e5:80:9b:48:10:5c:f3:b0:57:f6:5d:
61:f9:7b:b3:6f:92:95:40:34:fe:83:51:c9:b4:65:3a:6c:81:
2e:db:c1:47:f0:fa:ca:57:15:92:67:9b:79:bb:c5:2c:61:92:
93:63:2d:dc:3c:d2:10:7a:38:92:28:5f:2d:20:89:4f:60:2f:
16:c2:cf:55:79:4a:5a:11:1d:43:65:58:f9:6a:c9:2d:d6:e3:
39:4d:b4:2c:75:20:db:b1:f8:f8:43:7a:df:73:ad:df:07:b4:
32:01:bb:ea:b4:76:87:a2:0e:53:f6:a7:a2:e1:ff:6c:cc:7f:
c7:dd:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:56 2026 by rpki-client