Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f9b1b5a-4ac1-49ce-968b-b274a81da08e.roa
File: 7f9b1b5a-4ac1-49ce-968b-b274a81da08e.roa (raw, json)
Hash identifier: YFNHwwwe1mXVxO1cEeAy5vyfytYrLAg1F6kbqDHbX/k=
Subject key identifier: 39:A5:27:DE:24:1B:1A:C7:81:70:7A:36:5F:23:8D:D0:B3:47:0B:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EC4527708920918CE00D0A9A2DC7A9982A8AFC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f9b1b5a-4ac1-49ce-968b-b274a81da08e.roa
Signing time: Wed 09 Sep 2026 16:14:10 +0000
ROA not before: Wed 09 Sep 2026 16:14:10 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c4:52:77:08:92:09:18:ce:00:d0:a9:a2:dc:7a:99:82:a8:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:10 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=eeac24a77fc3a964248f492e9a2234d3ff9dd58f8787d6cdf3eb81a98428d92b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:de:ed:d7:ad:9f:09:75:2c:13:98:0c:fa:
2a:82:e9:63:d5:7d:2f:75:eb:9d:06:47:8c:78:08:
d9:ff:65:42:b5:34:a0:62:e9:10:f3:6d:80:31:3c:
c8:77:29:4d:7c:97:10:44:09:a8:c3:64:44:18:8e:
3a:c9:4a:f6:09:02:3e:59:27:24:fe:9c:4c:32:b4:
54:9e:3b:6a:35:f4:03:a4:45:b4:cd:df:c8:1b:87:
af:0b:1f:13:97:37:b8:ae:f5:3c:d2:22:12:8f:e7:
22:be:23:a9:b8:86:a7:dc:7e:dc:27:6f:b1:05:50:
a5:d0:a3:01:0f:e8:b6:8a:71:a8:f2:28:e5:85:b2:
ed:27:5a:f1:34:02:ea:43:6e:6c:ee:af:86:79:5e:
5f:7e:e4:d2:89:97:c7:ec:2c:8f:ad:e3:b7:6a:b1:
46:5a:9a:4e:48:cd:12:90:2f:99:cf:06:43:38:cb:
81:61:7c:35:93:bc:79:1a:bd:bc:6c:b7:87:ec:e8:
08:e4:a7:d2:f5:71:27:34:df:89:4c:ba:6a:46:25:
4d:ee:f7:16:e9:d7:fc:cb:5b:dc:e9:0f:78:6e:a5:
e8:21:24:e1:05:53:b1:e2:b9:f9:cc:c6:da:83:40:
dc:c5:5e:ce:78:5a:ea:b0:d4:f6:41:81:d8:df:dd:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:27:DE:24:1B:1A:C7:81:70:7A:36:5F:23:8D:D0:B3:47:0B:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f9b1b5a-4ac1-49ce-968b-b274a81da08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8880::/46
Signature Algorithm: sha256WithRSAEncryption
9e:9c:a9:03:40:70:b2:0b:73:7b:9e:52:cf:d9:68:15:cd:df:
50:96:b8:c7:be:7d:03:3a:57:26:12:74:5a:41:8c:57:b2:1d:
7b:88:98:15:4b:25:d9:eb:8a:c4:50:4e:3a:53:aa:f2:28:ed:
07:de:a3:c1:06:59:73:20:c2:ea:33:74:cc:7a:f2:89:98:2d:
97:b3:47:07:11:f4:34:64:dd:1c:0d:65:88:ad:04:79:a9:62:
0e:2d:30:75:9d:5f:a3:81:3e:ef:6e:64:2a:7f:1c:45:ce:ff:
43:17:cc:a3:0f:24:53:8e:0d:e1:dd:c8:85:7a:e8:3e:21:cb:
06:af:6f:68:1e:db:b9:72:c6:36:7b:b6:dd:43:40:cc:ab:90:
f2:42:9c:fc:28:8b:e9:42:01:b5:29:8f:3d:f6:8b:6e:f8:4b:
ca:df:40:9d:ad:eb:1c:45:6a:ca:fc:55:20:d1:86:83:cc:c6:
59:7b:b3:3f:83:dc:01:32:31:72:bb:95:8e:f0:a3:cc:36:75:
fc:38:68:1e:91:e5:ec:b7:3d:e1:37:27:b1:1e:74:c3:9c:c3:
de:5e:a7:49:e5:77:2f:d8:7f:15:50:43:01:11:f5:60:b8:14:
bc:79:d8:5b:a4:6b:c2:12:84:1a:7a:64:7c:49:a6:3d:79:5b:
5f:23:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:19 2026 by rpki-client