Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
File: 7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa (raw, json)
Hash identifier: aV+exMMA0QhtL5F/exheG31AgJWiAo7xdsEP7OIfEWw=
Subject key identifier: 49:44:2B:FB:61:46:25:9A:25:46:66:1B:ED:8D:2A:61:CA:48:C5:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59942BBD987971C5A6663265FB02E21FD2343C88
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
Signing time: Tue 04 Aug 2026 01:10:08 +0000
ROA not before: Tue 04 Aug 2026 01:10:08 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:94:2b:bd:98:79:71:c5:a6:66:32:65:fb:02:e2:1f:d2:34:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:08 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=2dc64d144013246a0f8663ede71bb904df6974ff5e1c7415f4672bd309669ea8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:ea:cc:8f:8e:5f:8f:49:3a:f2:a5:26:ff:
20:b7:c0:db:61:47:fb:d5:73:e0:95:e3:17:db:d5:
d0:ad:19:9d:1f:38:f4:88:a2:62:c6:8b:28:70:46:
6e:8a:a3:62:27:a8:eb:0e:45:c6:e9:4e:1a:79:02:
7c:d4:fe:94:39:d5:e0:b8:f3:12:c1:f2:22:9b:9c:
0c:c0:f5:36:6b:6e:7d:f0:41:69:d2:0c:65:07:01:
2b:56:e5:16:53:a5:fb:3b:15:6a:e8:92:a5:0f:ce:
ee:45:79:50:c4:65:87:c5:43:60:f3:7e:e5:b2:87:
51:6e:eb:3a:ce:98:5e:ce:e9:1f:81:2d:b8:bd:8b:
d5:27:07:e7:a7:a1:fb:fb:96:84:eb:11:c9:91:63:
fe:07:2b:d2:3b:2a:4a:1f:b7:77:1a:10:40:74:26:
c8:cc:15:6b:64:70:e9:dd:0f:49:85:31:a2:e1:be:
0b:99:cc:e8:89:a1:16:87:07:55:54:b1:cf:c8:e7:
9f:9b:73:f0:9c:db:3c:d0:10:0e:74:8a:40:72:fc:
be:e3:b4:2f:14:0c:44:54:27:8d:c3:61:ad:a0:31:
f5:6e:11:24:20:9b:d1:58:95:7d:a6:3d:45:96:20:
ec:ab:51:75:10:22:e0:5a:fe:a1:d4:87:09:fb:30:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:2B:FB:61:46:25:9A:25:46:66:1B:ED:8D:2A:61:CA:48:C5:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:6000::/48
Signature Algorithm: sha256WithRSAEncryption
08:37:01:7d:6e:2f:60:25:ce:1c:f2:d5:77:3d:4c:6b:87:33:
ae:ef:97:2c:c5:cd:27:a5:66:1e:28:5e:52:d4:50:a4:1a:c8:
86:c3:27:0e:97:4f:2f:08:ca:61:47:7d:4b:68:af:46:9d:2c:
3a:a1:54:c2:50:8c:86:2e:73:0c:0f:26:ff:cf:8f:fb:92:35:
c8:2b:0b:71:64:61:43:83:9b:57:07:18:b0:21:97:18:85:ec:
13:a1:df:b7:93:ca:b8:38:60:8d:87:c4:4a:e1:ab:66:4b:6e:
25:68:54:73:aa:d3:e9:9b:ad:c9:27:72:23:c4:53:eb:43:54:
66:c0:0f:00:61:f4:ed:8b:c1:75:c9:d4:18:85:5c:97:b8:dd:
b9:4b:8e:f0:47:4c:c7:60:0a:4b:c7:1f:c5:56:56:6a:db:3c:
71:6e:1f:61:cf:33:04:8a:5a:58:58:f2:bf:c4:b4:9e:d0:72:
14:3f:4a:b2:93:94:3e:44:72:9b:f9:17:03:b9:56:87:15:d4:
94:74:b7:7f:42:89:08:3a:67:58:87:5a:1e:82:b3:87:17:c0:
b2:6c:ec:57:5b:da:7a:c9:d2:50:42:cd:be:63:32:da:9f:c0:
cd:62:45:e0:50:91:b3:37:91:96:ec:57:b2:8b:93:c1:a7:aa:
3d:e0:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:55 2026 by rpki-client