Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
File: 73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa (raw, json)
Hash identifier: we8y8r2zzVdy60wjcK8ZYW0507DM0J3052/vI84XHYo=
Subject key identifier: E0:10:77:92:AC:9C:E6:E0:76:84:BA:E4:79:91:10:D6:19:D7:7E:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67EE467D64C12C2EC763E594F49DFE8EA9F9C682
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
Signing time: Wed 19 Aug 2026 01:00:38 +0000
ROA not before: Wed 19 Aug 2026 01:00:38 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ee:46:7d:64:c1:2c:2e:c7:63:e5:94:f4:9d:fe:8e:a9:f9:c6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:38 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=37ef4903159d6d8e9e288a798b4eb5d309930bbf2cb129732010618a89a4efe4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:77:6a:6d:63:94:ce:70:62:90:45:95:ad:
44:50:aa:5f:d0:40:8d:35:24:ee:bf:eb:a7:c5:77:
29:3e:23:89:c6:ab:95:1b:1c:15:bb:c3:b5:9b:d3:
a3:99:f1:dc:4f:e2:37:1e:d3:20:e9:e7:de:53:23:
48:11:56:b2:c4:61:4d:d6:13:a4:34:12:77:a8:9a:
85:38:90:08:58:03:03:c4:ca:10:c7:7e:1b:63:5d:
14:a1:8c:01:a4:c1:66:08:d8:13:9c:73:59:79:d4:
bf:40:ff:64:9d:53:e7:69:7b:a8:7b:ac:ce:04:c1:
8f:60:67:02:7c:e1:c9:3d:0f:8f:7d:2c:ce:2f:3c:
da:97:d8:75:63:66:dc:c1:c5:59:f9:3f:7e:c5:7e:
c3:17:87:f9:0e:3b:5a:49:8d:75:ec:c5:6e:49:61:
64:0b:f3:97:17:f8:33:5d:73:98:db:7d:eb:a9:bb:
4f:48:b9:8a:cf:3f:d6:c8:b2:32:e5:17:40:ae:55:
87:92:a0:07:8f:ec:4b:0f:6c:cb:99:d0:28:cf:d4:
94:e6:c1:8f:41:1a:a1:1f:73:4c:be:c0:89:09:eb:
10:d1:6b:9a:e2:84:04:02:94:be:2e:3e:44:c5:ab:
99:1c:5a:20:f3:78:6f:ee:ce:61:c9:e3:13:79:dd:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:77:92:AC:9C:E6:E0:76:84:BA:E4:79:91:10:D6:19:D7:7E:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:6040::/48
Signature Algorithm: sha256WithRSAEncryption
95:a1:9d:ea:f3:d2:3d:91:fe:23:bd:a4:ef:a7:8f:5d:ec:b5:
3a:51:6f:21:74:ca:a5:09:27:7f:4f:e4:69:a2:49:98:8d:b0:
43:ed:97:1c:34:b1:c4:63:72:55:11:b2:4f:7f:6c:e4:6b:9c:
04:0c:e6:94:00:e0:61:3f:19:76:34:8c:ff:62:d8:57:ee:86:
97:ea:13:f9:ed:aa:c9:29:dd:25:17:53:3f:07:0d:53:1c:85:
1e:aa:0f:75:ae:5e:30:cc:c6:6f:7d:08:95:7c:e8:77:5a:04:
39:e1:29:71:f4:71:02:c0:cb:3a:83:60:cf:1e:fc:4e:10:de:
c8:71:9c:59:5a:f1:9c:eb:e3:61:17:d3:58:e9:c7:e3:79:59:
72:d1:5a:63:fc:ba:9e:6a:ac:ea:cc:a8:a9:85:b7:07:48:d7:
d3:eb:39:72:2a:b4:a5:fe:73:e6:d7:ab:b6:67:21:7f:37:10:
ea:46:61:7f:44:3a:39:64:73:c2:9b:90:e2:69:9b:fb:5f:be:
94:17:45:1e:14:b8:a7:fc:33:ca:80:0c:41:b3:b2:94:c9:e8:
e4:e5:c4:5a:e4:e1:e4:e5:3d:05:0d:ac:63:9c:3c:7c:0c:2e:
3c:24:d2:5f:fd:11:31:ad:db:c0:2f:15:0a:e5:a8:bf:2f:55:
d3:ae:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:26 2026 by rpki-client