Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa
File: 7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa (raw, json)
Hash identifier: 6+xyYzDCrkYEiJ9YQz0FyMRNrs6aHspnRTlTrMcINgc=
Subject key identifier: FC:6D:91:E7:F9:50:6A:5F:F1:A6:D3:E5:99:4B:DE:32:DA:92:EB:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65BAEA96F119C50530EA745545788E254C12080F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa
Signing time: Fri 07 Aug 2026 04:41:11 +0000
ROA not before: Fri 07 Aug 2026 04:41:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d027::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ba:ea:96:f1:19:c5:05:30:ea:74:55:45:78:8e:25:4c:12:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8d1ecdad0550acc024b32b57096ce5644989f5a620f7efcf4ee70d02361b027c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:66:c4:50:14:df:26:5c:8d:c7:a9:c0:19:
3b:c8:14:76:7e:4d:03:57:04:bb:f2:21:17:4b:d5:
da:57:13:c2:ac:65:9d:77:ce:b0:af:5f:b4:79:f9:
88:b3:70:93:dd:99:46:a9:5d:77:20:9f:bb:51:fe:
c7:ca:d7:94:4d:3d:30:e4:52:ee:6c:b1:2d:9d:a0:
cb:ff:4a:bc:ad:80:c1:5d:fb:4c:0f:98:f8:9f:f6:
4b:94:c2:be:cc:eb:34:c8:e0:81:98:da:f4:35:f2:
77:9e:d3:e0:a6:b1:fa:92:e7:e8:8e:89:92:94:83:
ac:22:99:fc:b3:4a:92:56:e0:47:d8:c2:a7:a7:71:
a8:04:f0:f5:a1:fd:7e:a0:69:de:d9:53:c1:8d:11:
8b:d9:3a:6b:3e:4c:e5:2f:f6:ee:04:11:86:4e:c0:
d2:81:cd:ac:d0:bf:c8:26:aa:64:5e:4f:02:96:6c:
63:9e:1b:2c:f9:71:f8:24:d2:0a:8c:9e:64:57:a7:
b8:df:08:a8:ef:37:1e:63:3b:27:3d:0c:e5:07:31:
b4:e8:d9:1e:16:71:8d:68:ca:31:de:ae:f6:b0:52:
b3:06:e0:ce:38:a6:6d:ea:27:47:ae:fa:17:c1:f0:
a0:02:cb:f0:d6:ba:16:20:8d:98:e6:10:b7:68:8a:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:91:E7:F9:50:6A:5F:F1:A6:D3:E5:99:4B:DE:32:DA:92:EB:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d027::/36
Signature Algorithm: sha256WithRSAEncryption
9c:4a:a1:28:fa:0d:70:cc:51:aa:db:bd:ce:66:c3:d7:cd:d0:
a7:b2:74:7b:1b:5c:b4:bc:7e:a4:d1:d4:c9:77:e0:7a:83:fa:
be:f0:25:f5:27:39:1d:22:05:08:ea:42:35:54:1a:47:9b:24:
1c:3a:04:e0:ef:8d:e2:b3:16:cc:24:b7:fb:bc:01:09:7d:a8:
2e:c3:08:71:58:51:e0:ee:40:aa:e6:83:89:a8:6e:f3:cf:d8:
0e:f6:6f:9f:84:c9:17:a3:2d:49:ae:20:61:05:51:c6:54:b2:
2b:e5:72:3d:76:f5:da:63:5b:f3:ec:84:49:c6:ef:8e:44:fd:
64:3e:62:cf:ac:cc:d8:17:25:bd:c3:27:99:90:43:ac:c6:47:
91:18:b8:dc:27:0f:70:17:8b:2c:8c:6b:ee:1a:a3:cf:a3:55:
90:f8:11:d7:f3:8c:40:b7:b8:28:d2:a4:9e:5d:ea:1c:39:6b:
79:42:26:f0:71:e2:41:c5:0d:43:97:72:14:07:2c:dd:fc:b3:
46:1b:fe:d2:c8:15:fe:e1:8b:8d:a5:94:5c:2f:ad:95:4b:47:
38:a4:0c:30:f8:b1:18:c1:8d:fc:16:5b:70:1e:c5:8d:72:43:
20:13:02:cc:20:05:0b:08:12:c7:ec:65:09:04:a0:9e:53:74:
47:39:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:11 2026 by rpki-client