Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
File: 7116ef93-bff5-462e-a725-ae90147ffd39.roa (raw, json)
Hash identifier: hEo1QHy4nwpHQKbB9SqAUv6hVHEKLvFsNo654DwFuvU=
Subject key identifier: 3A:4C:92:AA:4E:49:A5:F1:8E:42:B5:1B:6E:6C:44:3A:23:E3:1C:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A55DEA9459EC60854F88E0B6476D0B8FA2513FC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
Signing time: Fri 07 Aug 2026 05:10:28 +0000
ROA not before: Fri 07 Aug 2026 05:10:28 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:55:de:a9:45:9e:c6:08:54:f8:8e:0b:64:76:d0:b8:fa:25:13:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:28 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=04c1900bb1603fe38906fdf3a13064297cb609d421b95aba8186ba8bfa373acc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:31:12:2f:e2:11:61:b4:17:dc:55:0b:19:
a1:c0:49:79:df:2e:dd:82:d7:5f:69:30:1b:a7:6f:
b6:c2:4c:11:15:cf:67:19:e3:c2:7c:14:e3:10:84:
37:23:09:6e:6d:a8:6f:cb:cc:9a:4c:63:56:e8:73:
6a:dd:71:9b:5d:0f:0f:a4:35:c5:34:56:74:05:b2:
fa:3b:43:c5:9c:5d:85:0e:f8:0c:71:85:23:00:69:
15:4e:4a:aa:22:d1:93:30:06:4a:df:d6:09:7f:95:
10:c8:ea:51:7a:aa:31:f6:fb:73:3e:01:5a:82:cc:
59:06:75:42:e5:27:9b:f7:cd:ea:c9:ab:45:b2:26:
74:53:5c:62:c8:05:92:59:e5:fc:6c:9f:14:9a:2f:
cd:99:97:88:b6:d3:6b:c9:2b:27:26:0c:ac:2e:7b:
7c:ad:23:4a:b0:f6:c5:c5:5f:90:8f:a9:63:f7:b2:
82:17:76:4f:46:d0:b4:c4:24:d8:3b:85:66:e0:35:
94:a2:d3:ac:10:21:2f:69:11:f4:b2:bd:17:e7:a9:
83:95:0d:1b:4d:23:55:a6:01:dc:73:7f:d9:8f:10:
7e:c6:5e:d9:0d:93:23:6f:57:06:26:67:18:eb:5e:
06:a6:72:29:24:e4:71:46:8d:bf:ed:e8:ca:7a:6d:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:92:AA:4E:49:A5:F1:8E:42:B5:1B:6E:6C:44:3A:23:E3:1C:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
82:d5:45:bb:40:5a:ee:26:3c:fb:e4:89:fc:4b:18:e1:ce:26:
e2:ec:fc:4f:7b:77:4c:77:65:f7:bc:9f:a5:21:23:99:9b:3b:
8b:2c:1c:bc:46:2c:73:53:05:e1:ca:56:c5:5a:ba:82:1b:8e:
e2:56:c2:48:0c:61:a4:dd:ee:f5:d2:dc:b8:a4:a2:9a:12:1e:
1c:b7:39:d1:d7:9f:b8:79:bf:ef:3e:f3:6d:80:a0:7b:2a:e4:
33:d7:e9:27:98:e1:3d:2c:f0:91:86:76:91:b3:1e:48:65:20:
09:09:18:65:c0:ac:6e:40:1c:68:65:fb:7a:80:91:bc:70:4c:
6d:94:3e:bc:55:a7:45:f2:f2:b8:86:6b:59:5e:9b:27:59:7d:
bd:ca:17:b9:41:1f:5b:29:3e:d5:40:7f:ed:4d:49:1d:e1:4d:
d5:22:0d:5e:6d:ef:cc:11:d9:4c:59:b8:d4:04:ee:9f:ca:e0:
85:76:ff:7c:54:b3:91:00:b5:00:f7:51:b9:65:f8:96:b1:1e:
39:10:51:61:1c:00:6f:c3:0f:9b:0f:61:ca:25:a9:3a:15:90:
3e:22:11:9c:d7:e8:97:7a:0b:1d:79:35:a1:03:34:17:88:46:
dd:63:a3:ed:6d:33:8b:70:b0:c4:ee:57:65:88:7e:a9:89:78:
59:95:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:20 2026 by rpki-client