Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8688b9c1-9a76-4d87-b042-a086fadce46b.roa
File: 8688b9c1-9a76-4d87-b042-a086fadce46b.roa (raw, json)
Hash identifier: uJjkoDgEi9BJbejtwuU8yn5u+bmX+lNO5e3+uprKKLM=
Subject key identifier: 9A:36:64:92:1D:EE:0C:47:2D:F7:8B:C2:62:6C:0F:1A:1F:4F:04:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 065D3522FB3FCFCE4F82E228C76B92311767D29E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8688b9c1-9a76-4d87-b042-a086fadce46b.roa
Signing time: Wed 19 Aug 2026 01:00:23 +0000
ROA not before: Wed 19 Aug 2026 01:00:23 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5d:35:22:fb:3f:cf:ce:4f:82:e2:28:c7:6b:92:31:17:67:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:23 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=1aa544229fe0a108136ebc70507ace45b0c846752dae88689faf684158956398, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:ea:da:cb:99:60:5f:8f:f3:b3:c9:cd:93:
71:13:5e:2a:13:90:bb:de:5e:85:16:0a:06:05:be:
3d:3e:d1:d8:13:ed:d9:d8:7a:50:79:d1:6c:e4:c1:
ea:ac:8b:5c:3d:f6:ce:6c:41:2a:6e:24:64:90:9b:
b2:06:d2:bd:a9:75:14:4f:12:b9:54:68:8b:84:65:
fa:98:7e:a1:21:8c:57:f6:8c:f1:eb:ba:fb:bf:f3:
f5:96:1e:31:fd:55:4b:e8:10:84:a7:a9:68:db:88:
29:5c:5e:88:98:f7:11:a0:a3:09:e0:b5:bb:71:80:
90:59:09:7c:67:06:97:b6:f2:d1:9a:43:ff:e3:61:
6c:2f:47:ab:83:e0:f7:d0:83:b8:7d:95:f9:11:07:
8b:c9:79:d6:df:53:26:ce:ea:58:22:f0:b5:7b:4d:
5c:08:85:db:71:a4:f8:cf:f8:fe:89:c8:9f:89:58:
86:71:b4:e9:8d:9c:23:18:fc:15:36:4c:9c:19:4f:
17:29:31:9e:67:30:fb:c5:12:69:4c:e3:85:b7:f5:
d1:35:f5:16:53:12:60:ab:67:f2:2a:4f:c7:11:cc:
79:77:2c:9f:7d:a9:0c:63:51:ac:59:c9:02:ac:c8:
e0:33:ac:79:1c:69:f4:84:41:21:1b:bb:9d:6d:5e:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:64:92:1D:EE:0C:47:2D:F7:8B:C2:62:6C:0F:1A:1F:4F:04:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8688b9c1-9a76-4d87-b042-a086fadce46b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:e040::/48
Signature Algorithm: sha256WithRSAEncryption
93:e1:55:1a:93:40:7c:73:96:57:ee:70:d7:bf:0a:b8:98:8c:
88:1b:2d:8b:4c:2b:dc:eb:c0:b9:1f:01:f4:cc:e8:74:06:83:
0e:47:3f:72:d4:9d:93:3d:6b:03:6d:bc:24:2a:73:b6:ed:e5:
74:b2:61:9d:b9:43:bf:23:53:d4:05:b1:29:21:67:e8:d6:f3:
00:ea:a9:14:4a:61:c7:fe:6d:c1:6c:ba:df:18:f3:a0:4f:19:
6b:2c:fe:70:8f:05:e6:4c:a8:ff:91:79:11:ca:a8:d5:ad:a0:
fe:d2:b5:73:3c:14:40:14:ae:f3:b1:4b:ac:c0:23:d7:22:f5:
6f:21:12:c1:7d:3a:40:c0:33:9b:e3:75:9e:fc:85:21:f6:20:
c6:45:ec:88:be:9d:dc:67:28:af:9b:cb:11:94:75:c5:77:b6:
90:d9:f8:e6:50:47:12:9f:da:7f:5a:3b:32:26:27:50:ba:7e:
0d:a7:4d:2e:e6:ac:f6:62:67:8b:e6:d8:08:b7:27:9d:d6:5c:
30:21:fa:c0:35:93:97:a3:34:17:92:eb:ec:1d:b4:76:b3:5b:
70:b0:df:d5:3a:11:9b:45:2f:e0:95:99:99:bc:fe:d7:53:ad:
f8:6f:48:61:b9:e3:12:a7:73:2e:1c:5e:3b:35:db:53:30:5f:
5f:79:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:11 2026 by rpki-client