Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757b26a0-8d3a-4aa4-b322-9a509279af6b.roa
File: 757b26a0-8d3a-4aa4-b322-9a509279af6b.roa (raw, json)
Hash identifier: Xv6QdWYZMQb7RWc5K4wTgDG3eGQkEph88CSETe1H9Ek=
Subject key identifier: 7F:18:EC:B3:C7:91:BD:37:02:46:4E:AB:9A:0C:F7:CF:E1:5B:17:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BF3D1B4B9B508355A1D2E43671C3B642FBD1F9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757b26a0-8d3a-4aa4-b322-9a509279af6b.roa
Signing time: Mon 10 Aug 2026 00:50:06 +0000
ROA not before: Mon 10 Aug 2026 00:50:06 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f3:d1:b4:b9:b5:08:35:5a:1d:2e:43:67:1c:3b:64:2f:bd:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:06 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=76beb49c0704aa4fc842423b9b6306b20a0c0b90ebe038ae2661e3b6881a2030, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:36:d8:b1:89:0e:a4:dc:bb:03:06:af:2e:
64:7b:e4:5c:5f:7e:37:23:b7:da:c3:64:bd:b0:7a:
0a:4f:d7:ba:d4:7b:06:5b:9e:06:2f:b3:e4:7a:3f:
6b:ee:11:82:2b:be:f8:31:73:f5:c4:0f:f0:7a:85:
d6:1d:a8:a9:4f:da:4d:3c:6f:70:a6:4d:c9:d4:83:
51:1f:b8:37:99:64:ca:f4:28:2f:4a:c0:32:40:94:
44:d0:eb:e2:78:5e:2e:fa:c8:83:51:9b:1c:a6:1f:
30:96:67:4d:9a:50:09:54:f5:ce:f6:85:53:21:75:
64:f6:3b:48:ed:64:88:94:d6:67:8d:8a:4f:26:e7:
7e:35:ec:f2:b6:d0:5c:dd:33:46:40:19:92:e0:5c:
8a:c6:44:bd:b8:39:e4:83:92:14:41:6b:c3:e3:b2:
75:6e:f5:e7:a7:ff:6b:24:fe:84:ee:cc:58:18:1b:
8a:a7:7a:1b:dc:8a:b9:6d:c6:ff:d0:99:29:c0:c2:
6e:0a:0d:97:d0:9c:56:ca:b8:43:9f:17:af:08:3f:
71:cb:57:b3:07:4c:1a:48:7e:2f:90:49:12:fb:1c:
57:38:94:2b:1f:69:58:f8:63:6d:2e:cc:29:5c:3d:
b5:58:3b:7b:ff:d2:a4:6d:c1:96:86:62:30:40:2a:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:EC:B3:C7:91:BD:37:02:46:4E:AB:9A:0C:F7:CF:E1:5B:17:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757b26a0-8d3a-4aa4-b322-9a509279af6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1000::/40
Signature Algorithm: sha256WithRSAEncryption
9a:11:7f:d6:c3:ee:c6:af:4f:0d:4e:15:56:e1:d5:05:20:76:
69:9e:bf:88:07:e9:97:9f:4c:28:26:9a:fc:11:44:4f:56:84:
f7:fc:a3:22:1f:6a:a7:21:cf:11:be:27:7c:6b:cc:3a:4d:76:
0f:8e:eb:63:b4:b5:bd:4b:1b:80:51:3e:7b:ff:94:95:df:a4:
2a:40:55:65:57:d2:fa:f9:38:9d:34:16:aa:9b:7d:b6:c5:4e:
cd:cd:5d:e0:8c:d9:41:24:6a:a5:10:a5:59:58:9b:2e:60:bd:
12:ef:d2:bf:4e:45:5b:e3:df:49:db:e9:b5:49:c4:d1:3b:59:
48:74:72:1c:47:86:40:85:25:2a:7e:58:f3:6d:95:0d:40:63:
77:8e:bc:33:bf:e1:b2:7e:eb:00:09:3b:59:5c:d9:6c:e3:a2:
4b:b1:a7:fb:f8:c8:fe:01:57:88:19:12:6d:dc:6a:2f:f7:e7:
17:62:24:81:7e:ef:53:f1:08:97:90:5e:a1:5c:60:d7:46:89:
78:d6:ff:3e:1b:ed:a4:d2:8e:4e:56:8b:c9:8a:33:f9:4e:a2:
17:23:a5:1a:e8:13:56:2e:77:85:4e:f1:66:4e:6a:90:6a:d3:
12:e8:92:8f:43:2e:e1:8c:7a:a0:76:82:4f:0f:a8:37:2e:6e:
d8:0d:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:27 2026 by rpki-client