Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
File: 77bc679b-5199-43c2-8199-be5c04a6c0d9.roa (raw, json)
Hash identifier: 4mRZtSDP4GnSO3ZKRcpCVEipOin8RFcIyVjIcnsF/po=
Subject key identifier: 70:CF:A2:E6:96:0E:AE:8D:D4:70:47:D2:0E:70:82:E7:72:23:CD:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22E02AFCC8FA1AEB6EB77B8A85395F5033958A6F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
Signing time: Fri 07 Aug 2026 05:30:56 +0000
ROA not before: Fri 07 Aug 2026 05:30:56 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e0:2a:fc:c8:fa:1a:eb:6e:b7:7b:8a:85:39:5f:50:33:95:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:56 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=514b79d6cc8704c680e3f00bb1b7cbeebf1797afdbc14dc9555f990cbddb6fec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:fe:86:b2:f8:d4:c0:66:3f:7a:72:a8:db:
96:05:fa:20:2e:05:37:35:1a:22:d0:07:ad:a7:1d:
ec:ef:94:d9:e5:d3:1f:05:c9:57:76:80:6a:ff:03:
48:95:f4:3a:81:44:59:5b:86:77:4e:26:d1:79:0c:
cf:10:b3:a4:6e:73:dc:2b:a2:f7:39:c2:26:49:f7:
19:b2:ff:0f:82:c8:5a:6f:95:7f:bb:30:d6:56:3e:
fb:1d:be:23:88:f2:f3:ce:a0:12:63:18:3d:80:58:
6c:6e:6f:e2:78:46:62:7f:e2:25:51:26:12:f3:e2:
19:f1:98:09:75:09:0a:e5:fa:70:47:fd:ff:9c:d0:
a4:70:19:a2:32:cc:c6:f5:26:57:ed:c7:15:bc:d7:
41:ed:ea:64:8f:1c:11:91:52:ad:01:37:b2:d4:f6:
a9:ca:1e:34:3b:a0:66:83:79:11:b4:49:91:38:3a:
37:f5:c9:d8:f2:9d:b4:62:22:2b:68:3b:b4:2e:e5:
a0:2a:8d:69:62:64:b8:41:bc:b5:47:25:c0:78:86:
ae:da:b8:49:4d:80:fd:68:34:04:b9:99:7f:67:09:
3f:4e:ec:de:f2:b6:d9:bb:e7:bd:94:d6:6c:75:9c:
81:a5:85:8b:b7:a6:a4:e7:ce:7b:45:9c:f2:92:fd:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:A2:E6:96:0E:AE:8D:D4:70:47:D2:0E:70:82:E7:72:23:CD:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c040::/48
Signature Algorithm: sha256WithRSAEncryption
62:0b:55:87:a5:20:74:de:35:0a:3d:7d:70:01:34:08:d9:b0:
1b:b5:8a:fb:27:c1:4e:6a:20:99:dd:a6:cb:28:41:1f:4e:a4:
1d:d0:0d:78:1c:17:89:ee:c1:19:0b:22:7e:37:fa:cb:a5:b3:
ff:07:66:4b:64:45:e4:26:6c:c4:a9:e6:db:c5:3f:9a:74:64:
05:40:dc:48:24:4c:6c:ea:70:58:dc:ff:f3:97:02:33:fe:4a:
1b:1d:63:8e:c6:a8:96:b6:e2:f4:f4:b2:68:bc:af:f0:45:f7:
12:53:0c:fe:c6:f9:f8:8a:76:40:41:84:66:4b:c1:ee:54:0b:
2f:7b:30:9d:73:ee:9d:ae:21:3e:e2:03:cd:d0:f0:96:6b:31:
3f:8a:6e:f1:5f:a4:1b:3d:fe:bb:2b:00:b0:a9:92:de:aa:d6:
c4:bd:63:11:7f:9c:78:77:bb:c3:39:5c:79:3a:ec:dd:85:3a:
e2:f8:88:96:c0:a0:03:b5:03:e8:c8:c1:f2:19:26:8b:8c:0e:
e3:52:6b:15:46:37:8a:64:92:50:cb:23:1e:b9:5a:11:15:11:
ca:65:8e:08:2f:2f:c1:33:ca:d4:74:ad:95:b7:a8:96:22:34:
5e:0c:4b:73:bd:3a:55:e8:7b:d6:9c:15:80:f1:63:f9:4d:3f:
03:26:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:44 2026 by rpki-client