Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa
File: 7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa (raw, json)
Hash identifier: TUzPvQbBnSx/S77D54GZ/xfQndh5YMDAfF7JF7934OY=
Subject key identifier: D4:DB:80:06:B2:DA:49:4E:65:91:CA:D8:1A:0F:5F:87:DD:AD:44:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1310684B0DF271E590EC1A675138FBD4C0BA0E83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa
Signing time: Mon 03 Aug 2026 02:00:06 +0000
ROA not before: Mon 03 Aug 2026 02:00:06 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:10:68:4b:0d:f2:71:e5:90:ec:1a:67:51:38:fb:d4:c0:ba:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:00:06 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=9de094b58aa1b394d0eca12287dceba0ffff7593c77fccc0d438de0818579c90, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:38:be:77:5b:17:77:90:49:3e:12:2d:c5:
76:03:87:4c:92:18:09:06:12:91:13:a8:ac:f5:0a:
d5:9a:9e:5c:ce:86:4b:e1:e6:de:1a:b0:9b:f0:35:
68:ed:3e:e9:fd:f4:f0:a8:4b:d4:56:f1:fe:ab:68:
a5:c4:2b:40:4e:34:ca:67:32:74:7b:4a:ed:28:d2:
95:a8:5b:4d:fd:9c:0b:d1:b4:bb:bd:0f:82:25:09:
1c:12:7b:f1:f8:4f:8f:57:4b:ca:22:95:0a:cc:43:
13:f6:49:b1:67:87:af:b1:56:f8:b0:2c:60:4d:de:
ac:fe:d7:8c:7d:93:cc:77:40:97:2c:fc:1b:a3:b8:
c2:39:51:2a:96:5b:ae:2f:6a:17:46:30:86:3e:ea:
ca:01:5c:6f:6d:2d:f6:6d:66:8c:e3:96:d8:15:1b:
7f:93:41:b9:e4:f5:e6:61:cd:aa:a7:0c:39:68:b4:
9f:f0:59:da:43:64:55:63:78:16:b0:31:64:41:ea:
b3:8d:36:be:a8:18:71:3e:8a:40:9c:f3:8e:92:ee:
dc:3c:dd:e7:85:22:18:08:aa:0c:08:35:08:d6:53:
13:0e:42:48:51:00:b4:20:db:e4:61:d2:1a:47:15:
49:7f:3d:52:6d:67:5f:df:3e:6c:31:e4:10:db:19:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:80:06:B2:DA:49:4E:65:91:CA:D8:1A:0F:5F:87:DD:AD:44:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:4000::/40
Signature Algorithm: sha256WithRSAEncryption
03:b1:41:82:3f:78:22:98:c5:bf:42:b7:4a:7e:dd:fe:92:bd:
87:2f:24:25:3a:1e:d6:b6:42:e5:98:05:aa:55:5b:c3:d8:68:
ea:9c:b7:e9:9c:b3:67:02:5a:00:9b:27:b3:61:14:aa:72:b1:
1f:8c:ab:25:a1:d9:78:a0:73:f2:ad:0b:2e:a6:af:a4:05:26:
d4:e1:fe:97:da:76:14:42:a2:9b:8b:48:3a:2e:10:91:d1:de:
85:62:cb:6c:24:52:db:e9:ee:19:63:73:09:18:36:d4:18:0b:
69:3e:31:bb:a0:a2:c8:9f:ae:51:06:a5:6f:6a:e7:c7:f5:40:
1f:d3:ed:74:3e:00:46:5e:97:66:c4:d5:7c:8b:73:ce:f2:65:
3d:ac:90:a7:1b:f3:33:30:5e:dd:4a:f9:61:e0:db:8d:8d:7d:
56:6e:25:4f:d7:24:42:bc:9d:07:cc:ce:7a:f9:65:3e:3b:56:
7c:ec:32:fe:3e:04:46:0c:b0:a7:a9:de:a1:76:0e:03:0b:95:
d2:52:07:2d:fb:b1:f1:4e:78:72:dc:fc:0e:fd:a0:4d:83:ac:
5e:ae:9d:23:4a:3e:d4:7c:0b:fd:cb:04:37:bd:8e:cf:8b:39:
a0:c1:f9:94:d2:a0:26:5d:38:7d:1d:7e:5a:82:f1:88:a6:c7:
09:ad:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:17 2026 by rpki-client