Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7faac5a8-c482-4a8a-8670-ed6a8130467d.roa
File: 7faac5a8-c482-4a8a-8670-ed6a8130467d.roa (raw, json)
Hash identifier: pwGZEUIWG2QAh753QhMTxPS6F843Gh7/xjMlv9B5blc=
Subject key identifier: 37:CD:D1:FC:88:7A:8C:01:81:1B:23:EA:D2:60:AA:EE:9B:97:62:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BBCD3EDDE683AD7E2D1ADB4D02A6A213DD5F44D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7faac5a8-c482-4a8a-8670-ed6a8130467d.roa
Signing time: Mon 10 Aug 2026 00:50:11 +0000
ROA not before: Mon 10 Aug 2026 00:50:11 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bc:d3:ed:de:68:3a:d7:e2:d1:ad:b4:d0:2a:6a:21:3d:d5:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:11 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=a5a891f2ea99479a20e5d2ee137b7526b6546a1b5c1ba82997061de87b1a5b9d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:ba:f2:1d:09:ac:1d:d1:8a:11:43:3f:6b:
58:9f:9b:4a:9e:de:6f:13:5f:b4:dd:95:17:95:dd:
f6:f6:a9:da:e1:33:ec:87:b9:ad:87:2e:d6:cb:d5:
5f:38:30:7c:d3:71:e3:ca:ef:77:d9:9b:20:ab:a1:
7d:3e:a1:0c:eb:a9:f6:17:2c:5c:d4:3c:7d:5a:96:
a2:90:b9:55:00:11:b7:a9:d2:e7:51:6d:55:65:f2:
b4:35:67:c4:24:4f:54:09:fa:1f:f8:10:ac:4c:9e:
41:37:4f:88:3c:7a:27:d9:19:b1:3c:0a:a9:69:b4:
2d:e3:dd:12:70:d1:5d:17:de:39:e0:ff:a7:8c:5b:
cb:18:8b:59:6f:48:70:4b:12:29:16:dd:ef:96:96:
e1:51:3c:f0:46:ca:13:64:da:51:50:26:91:b0:b3:
6d:12:de:cb:94:fa:f0:0e:38:6f:53:57:25:63:46:
98:30:1e:fd:5c:a1:7b:b2:cf:68:7b:69:0e:bd:14:
df:1c:99:b8:2e:70:3a:a8:58:a0:d1:e6:a4:2d:68:
78:09:d0:7b:08:87:62:78:57:c8:7b:38:da:52:af:
4d:cd:7d:40:89:1f:38:b5:04:fa:a5:38:b7:05:97:
1b:99:f6:d7:cc:2c:ff:33:fb:1c:b3:5c:56:65:98:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:D1:FC:88:7A:8C:01:81:1B:23:EA:D2:60:AA:EE:9B:97:62:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7faac5a8-c482-4a8a-8670-ed6a8130467d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:e080::/48
Signature Algorithm: sha256WithRSAEncryption
44:a3:7c:97:93:84:a6:17:0c:b2:29:60:d4:06:d1:cc:cd:f9:
8f:60:58:19:fd:10:92:4f:f5:16:d7:72:04:f1:78:07:50:e3:
5b:06:45:b9:ce:aa:64:6d:f7:48:d2:cf:67:af:34:a0:e8:3b:
e8:9c:d5:4d:ca:a5:4f:cc:80:bc:c7:0d:8d:e6:ee:f7:a4:41:
d2:61:a3:d7:01:7f:7d:5a:af:23:1a:6c:cb:95:55:29:27:89:
39:65:b3:2d:94:08:61:ba:17:ae:d9:62:cc:e8:a4:51:c4:14:
72:10:a7:2f:2d:f3:b3:6b:06:12:04:06:9b:ee:4f:30:06:ac:
b1:ed:68:f0:17:2b:10:18:77:00:44:9b:d9:29:c9:a4:bb:6a:
89:c9:6c:51:c6:3c:16:8b:ad:29:b7:c5:04:d3:5b:dc:c5:f9:
ed:03:64:4c:2b:59:4b:99:1c:70:be:9c:e8:51:f0:3d:84:00:
74:30:4a:00:13:44:e7:47:63:b0:7a:6c:d8:c1:43:75:52:6f:
32:71:b4:fa:e2:8d:a9:1c:c5:9f:3f:f5:3b:7f:54:bc:ec:34:
d9:5f:90:e6:b7:b7:cc:0d:6d:6f:d9:f0:ba:7f:2f:9b:06:f5:
e1:f0:a4:87:00:14:7c:fc:04:2d:6f:d3:50:a9:0c:77:39:b3:
b0:bb:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:11 2026 by rpki-client