Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
File: 8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa (raw, json)
Hash identifier: VhaPlx1h+al6q7NXTXDpawZSAHTe0m3qNDMBKs4xunk=
Subject key identifier: 5C:F9:70:F1:AB:BD:E8:2C:77:98:46:BB:14:4D:F4:A4:EF:D1:15:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03FDF6180F78C9304C5A00ABE8FEA71BAB0E2C16
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
Signing time: Mon 10 Aug 2026 01:00:08 +0000
ROA not before: Mon 10 Aug 2026 01:00:08 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fd:f6:18:0f:78:c9:30:4c:5a:00:ab:e8:fe:a7:1b:ab:0e:2c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:08 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=be090b9d2d8194a28018c1eb66a76733f9e7f009fd65d14d799efabcb9d68d19, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:39:cb:31:32:10:8a:a5:3c:9a:41:15:09:
4e:42:63:07:5a:37:39:12:36:a2:37:52:f8:8f:0d:
9a:1f:35:a5:4d:ea:6d:f3:b0:8d:97:c9:4b:35:f5:
a5:dd:b7:b8:fc:af:84:ea:f9:87:2b:24:59:f7:17:
7c:b9:78:ab:81:53:40:fd:56:b8:3c:9a:4b:ae:2e:
cf:92:f3:24:e9:11:ee:5b:27:07:cd:48:59:2d:f2:
d5:99:12:48:90:e5:c1:47:ba:90:e3:7c:f6:62:9e:
2c:55:91:d1:1e:b2:06:76:35:64:b4:f0:4a:dc:2a:
dc:d3:64:53:34:10:21:8a:21:d9:a8:aa:dd:84:b1:
f3:16:65:cc:e8:ce:92:25:7e:38:72:52:6b:11:96:
85:18:cc:b4:96:58:df:cb:ac:7a:b4:57:ac:74:8c:
52:bf:04:00:96:6a:b9:52:a2:e1:37:a3:8b:f8:c4:
29:b1:fb:07:52:9a:1a:e2:b7:94:4c:9c:b6:47:74:
b9:cb:d7:bb:44:06:7b:c5:fa:85:8a:21:75:b4:44:
e2:38:61:0e:10:bc:53:11:61:69:ee:7c:1a:9c:85:
e8:d9:a5:47:de:6c:ad:ee:06:24:e1:76:55:22:79:
d2:2b:aa:76:cb:b9:01:1b:94:fe:95:fb:05:62:64:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:70:F1:AB:BD:E8:2C:77:98:46:BB:14:4D:F4:A4:EF:D1:15:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:c080::/48
Signature Algorithm: sha256WithRSAEncryption
62:34:83:61:15:f9:78:2b:4c:a3:23:03:6e:a0:b6:98:10:a2:
18:b5:0a:ff:c8:72:2b:b6:b9:a5:f5:c3:1a:d8:89:f5:ae:4a:
e3:f9:88:d6:54:85:e0:1b:16:91:11:a3:8c:8e:0d:cd:25:b9:
43:ad:87:e3:4c:81:d6:f7:00:1e:28:1d:0b:7c:4f:89:2d:03:
27:37:f0:b8:be:b4:6a:9c:74:92:d3:06:4f:29:87:cd:95:71:
9b:e6:a1:0e:37:a7:5c:8a:51:7f:00:ed:b6:e1:27:d7:5d:11:
09:e0:e0:74:17:88:23:a1:28:f5:c2:f9:d7:ee:7c:27:33:84:
86:4d:63:0a:9f:28:b4:80:d6:7e:7f:8f:a5:db:c0:49:b9:0f:
b2:f5:cf:1c:51:13:16:dd:fc:aa:18:25:de:69:f6:78:34:50:
04:3e:64:af:70:42:23:b2:69:f4:a7:40:3a:43:49:f6:bf:06:
0a:ac:4f:d5:3d:85:ad:49:2c:dd:16:05:06:33:4f:6e:8c:be:
35:df:a3:42:27:48:07:b2:9e:25:24:67:0b:e5:1d:b5:cc:02:
ac:61:3b:1f:4d:8f:13:75:2d:cb:1b:d5:a9:89:6a:78:52:4b:
c5:72:45:e3:67:bf:75:6c:e7:a5:7b:45:e3:24:1f:ad:cf:fc:
64:7c:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:55 2026 by rpki-client