Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86da4413-78aa-4722-a1a2-1b8c81e93a74.roa
File: 86da4413-78aa-4722-a1a2-1b8c81e93a74.roa (raw, json)
Hash identifier: LWKurwSYNVf5b3MtIw/GNc+lvjrFVU0a5lhEuyDQYtg=
Subject key identifier: 8C:81:53:92:40:F8:E9:18:43:6E:61:B5:71:6F:95:5C:82:36:8B:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 087F475EF2DD56EB2B557BC86DE214153B8DF80F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86da4413-78aa-4722-a1a2-1b8c81e93a74.roa
Signing time: Wed 19 Aug 2026 00:50:07 +0000
ROA not before: Wed 19 Aug 2026 00:50:07 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7f:47:5e:f2:dd:56:eb:2b:55:7b:c8:6d:e2:14:15:3b:8d:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:07 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=b248016ea7653e5648f9412237deeae9e29899c1434c1e57179a44597146cead, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:08:e0:4e:8d:5c:61:aa:02:80:93:2f:85:
32:52:ed:28:5a:bf:9e:f5:3c:f0:0a:05:21:f4:4e:
36:33:1c:b6:9e:0f:3c:cd:fc:dd:4b:cc:45:63:69:
9f:92:42:56:a1:b1:31:93:3d:c7:f5:67:bb:e4:98:
fc:fc:3b:60:56:e0:3d:fd:eb:31:48:69:c8:10:33:
56:0f:37:ab:d8:6d:c4:6f:4e:8a:dc:84:86:62:93:
69:98:23:89:a7:cb:c8:fc:d0:e7:8a:0f:75:4c:89:
11:ea:80:11:23:aa:de:e4:ed:0c:95:86:cd:0c:80:
87:0f:39:ff:ff:81:85:7b:1a:d8:9d:01:ba:93:ea:
bd:f9:13:51:64:c7:91:b5:a7:f3:cb:15:f4:98:70:
58:9d:d4:40:ab:8f:0c:29:45:5e:bc:22:17:8e:a4:
30:57:9d:96:d2:ea:c5:04:0e:2f:17:b1:d6:31:a0:
7a:a3:28:9c:0a:50:55:d8:d4:17:af:80:aa:8b:b5:
8e:81:0a:f0:36:68:4d:f1:d9:35:da:5b:bb:be:cd:
0d:ef:5a:7c:3e:cc:64:8b:ff:c1:83:ff:24:76:65:
7b:58:3d:4e:cc:e5:86:96:bf:6e:1b:26:e6:19:c8:
a1:fc:ac:39:b8:11:46:d7:63:d3:f5:ba:48:96:da:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:53:92:40:F8:E9:18:43:6E:61:B5:71:6F:95:5C:82:36:8B:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86da4413-78aa-4722-a1a2-1b8c81e93a74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:0b:96:55:1f:38:12:d6:73:d6:63:a1:8b:19:ea:fa:6d:6c:
cc:d7:3c:99:b6:d5:a9:56:0d:14:1e:59:04:eb:9a:d5:72:d2:
d6:80:00:5b:34:66:9c:2e:78:0c:94:1e:b0:72:95:0d:de:ab:
96:f2:ee:4c:e0:95:60:d6:5d:e2:4c:00:c0:5d:51:37:88:69:
4d:07:7c:a9:4d:e6:2b:a0:e2:87:36:8f:a8:03:35:31:7c:c4:
39:0a:0d:68:23:12:3b:ad:43:c8:66:38:48:8a:ec:ad:5b:34:
47:1a:49:35:73:ec:a6:e6:3d:49:56:71:30:12:3c:b0:f1:51:
a9:af:44:ac:d6:74:8b:5b:66:31:15:a8:32:e9:df:d1:b4:e9:
01:4e:21:4d:eb:b6:75:70:c8:90:8d:a3:82:0c:23:57:9b:f6:
e0:6d:fe:ab:b5:9d:a2:63:6d:62:53:44:93:7d:c4:82:30:54:
59:ff:8a:86:2b:68:93:fc:0f:0b:44:a3:c2:45:f5:b6:c0:3a:
f0:16:23:3b:ae:e0:88:12:aa:a4:2a:01:dc:fa:0c:b8:51:f2:
5f:aa:74:8d:23:b4:9d:1e:5c:f1:04:7a:b5:1e:b1:1d:f3:0d:
5c:26:f5:ac:3e:d5:b5:ea:d1:81:af:b3:20:9b:4c:b5:2c:d2:
84:08:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:52 2026 by rpki-client