Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
File: 76526233-4062-463b-bfd0-bbe1d12891fa.roa (raw, json)
Hash identifier: PrWh9PchnLF7WWguwBnfSE9BEJ0RG53k58ShT0ONfYs=
Subject key identifier: 5D:A0:60:AB:5A:98:92:62:F0:B5:B1:76:09:22:81:F9:61:6E:6B:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48F3412C531760C5AB02EB940DC911FF871593
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
Signing time: Mon 03 Aug 2026 02:50:09 +0000
ROA not before: Mon 03 Aug 2026 02:50:09 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f3:41:2c:53:17:60:c5:ab:02:eb:94:0d:c9:11:ff:87:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:09 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=41bc7b54755dd75120206ec1d4efff8d2d184b8d2cf72cadc49d50606eb2102a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:f8:db:f8:90:c8:0e:b4:86:64:da:a8:d1:
14:bc:68:50:eb:e0:bb:7a:4c:c2:27:16:95:26:94:
fa:ec:c3:b1:5b:05:29:bb:fc:80:9e:79:42:28:31:
f5:a9:22:ed:09:e1:14:aa:fd:75:0d:50:d6:93:a5:
6d:c3:2a:65:4d:67:11:e7:80:94:ef:37:c7:14:13:
18:1d:74:64:17:03:85:95:99:a8:77:6d:a4:bc:b3:
38:9b:71:82:69:f0:6d:15:0d:22:96:03:3b:60:65:
e9:70:a1:b1:96:53:f6:b4:1e:b6:69:28:04:bd:8a:
08:e9:68:bd:52:e1:93:9f:58:bd:e3:f1:4b:7f:c1:
44:7b:94:c3:77:73:58:4d:d6:12:6e:b4:85:1a:40:
98:98:04:85:e0:6f:e1:8f:a1:61:d5:68:a4:60:12:
f1:40:b0:ea:01:88:e4:10:5e:90:ef:61:9d:90:71:
4b:8e:f6:4a:27:12:cc:8c:f7:cd:4d:67:e4:41:5f:
ac:f8:62:11:6f:17:24:c9:3b:a8:e4:01:9f:93:80:
51:04:d0:9f:f5:e3:04:8c:eb:8f:1b:98:e4:30:0f:
e3:45:00:f5:69:88:2f:3a:ee:27:16:0e:e2:ee:66:
be:5e:f2:57:4d:0b:7b:38:c7:d7:10:e9:c1:0c:2f:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:60:AB:5A:98:92:62:F0:B5:B1:76:09:22:81:F9:61:6E:6B:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4010::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b4:a6:98:e5:42:df:09:78:62:f9:ea:eb:24:2b:3b:f9:41:
0b:51:70:aa:c5:d1:eb:0a:4c:36:c9:f7:97:75:63:3a:c9:a0:
be:c5:17:e4:1f:fe:4e:a6:fa:09:26:83:e1:43:d5:d9:06:88:
63:d4:de:73:65:0a:0e:f4:75:13:61:7d:ee:46:4a:3b:1a:15:
8f:d7:7b:b3:67:da:8e:1d:9a:d6:32:a3:f8:e8:6b:51:62:ef:
5e:ff:95:26:ca:4d:4e:a0:42:09:c2:01:3e:69:c0:22:8b:a8:
cc:83:66:b0:4d:31:8b:47:88:cf:86:0e:56:64:bf:a1:7e:8c:
66:33:af:6f:ec:7b:e3:2a:40:16:80:f9:65:d6:63:27:5a:96:
da:a9:c3:66:8f:63:00:59:8f:a6:12:bc:16:50:f6:3e:a4:aa:
34:07:c5:60:d3:97:1d:29:6b:64:97:ac:5f:df:8c:43:30:5b:
bd:d3:a0:09:95:90:e9:67:21:71:76:21:8a:b0:e3:4d:05:e6:
03:72:d1:09:0b:12:d1:e1:6d:7e:e0:74:57:d6:63:9a:a6:e5:
85:64:05:e6:a6:dc:56:05:79:fb:01:93:45:5f:f6:46:27:43:
3d:51:24:b0:68:49:52:ce:a1:66:70:d4:81:6e:a3:ff:35:67:
30:50:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:40 2026 by rpki-client