Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a06e909-5227-47d9-a58c-be623a2a4cad.roa
File: 8a06e909-5227-47d9-a58c-be623a2a4cad.roa (raw, json)
Hash identifier: XNTCuFotHz4Bd0HKQDmPVx8fVq7OEeIOEVGX+Tmz91o=
Subject key identifier: 8C:1A:B2:14:84:E6:90:DE:6E:1F:67:0E:93:56:E6:2D:AD:15:B5:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 149ED1B3E58C816D82F8D66F93D6019632E338F1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a06e909-5227-47d9-a58c-be623a2a4cad.roa
Signing time: Fri 07 Aug 2026 05:20:26 +0000
ROA not before: Fri 07 Aug 2026 05:20:26 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9e:d1:b3:e5:8c:81:6d:82:f8:d6:6f:93:d6:01:96:32:e3:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:26 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ae1bdf284ffa8e70bb19878a401513fa1d588cb569f8ff54a5bc166d40dd6bd3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:01:85:1e:0a:6d:34:6d:55:b9:ef:bf:52:
77:13:f4:90:34:38:04:7b:52:a2:63:d5:13:44:85:
f4:4e:36:70:26:a3:a7:80:43:93:70:ea:f2:cc:c4:
35:37:20:60:0c:68:3a:88:35:6e:70:ba:11:6b:6f:
48:55:fc:b5:e9:48:15:b2:71:39:d2:ef:56:30:5b:
42:68:a9:02:4d:3a:4f:08:7b:30:69:66:d2:e3:7f:
7b:ee:78:fd:28:c5:bd:ba:93:b0:91:07:87:d6:63:
1a:80:d0:ec:db:3c:bb:1b:57:e9:02:fc:b0:30:f1:
a6:fd:17:ad:f4:37:fc:0d:ac:cc:5e:33:13:08:a1:
fe:2c:39:07:9e:d4:68:76:43:30:0f:46:cd:9d:ac:
43:75:73:4c:9b:74:f5:91:d9:82:b7:fe:85:87:72:
21:a6:a0:28:d1:9e:fd:0c:b6:96:1f:d0:3d:a8:26:
9c:50:5b:b2:a7:a1:6a:29:38:fc:e3:75:9c:44:e7:
62:73:63:1a:5d:8c:3f:32:65:a9:85:0d:56:10:50:
02:83:b6:fd:33:29:a5:15:fd:81:d7:a4:32:fe:7d:
e5:f4:e3:69:47:77:55:c3:4a:e5:61:c7:c2:c5:ac:
5f:87:23:b8:b4:78:f6:a3:d1:1a:4a:10:84:3c:d0:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:B2:14:84:E6:90:DE:6E:1F:67:0E:93:56:E6:2D:AD:15:B5:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a06e909-5227-47d9-a58c-be623a2a4cad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:4000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:cc:81:66:ed:03:8d:de:42:4a:dd:3c:0e:77:be:8b:e3:48:
9d:a4:6c:32:c6:cd:97:c5:81:8f:3c:d1:3c:bc:33:84:54:c0:
2d:22:c8:41:83:8b:47:2a:6f:5e:c7:a0:aa:6d:fe:3f:c8:2d:
86:b9:4e:c3:9a:fa:86:de:19:4e:11:e6:32:95:63:de:91:e5:
81:90:a5:7a:7a:06:2c:2f:f9:8a:3d:64:6f:03:86:3a:b6:9b:
c0:88:fd:d1:9a:d9:55:03:4c:5f:25:98:81:9b:44:5a:19:7f:
7e:8d:9f:82:ff:f1:28:bc:74:5b:ff:24:b1:20:fe:a3:9a:ea:
89:64:16:64:31:38:59:b3:bf:9f:ba:81:6a:e7:c0:20:e5:7a:
3c:90:0f:e0:f6:30:e3:7c:b1:44:78:55:3a:e0:b3:40:70:7d:
c5:e8:69:8e:c2:d3:45:c5:9d:e5:b7:64:e4:28:5c:1b:f4:c7:
6a:91:68:c9:49:d1:09:6a:ea:6b:1f:e4:69:ed:28:cc:8b:61:
fb:a5:c3:c4:f7:3e:d2:15:75:14:a5:a0:94:2e:16:3e:ba:b1:
35:0b:cc:5c:20:90:6e:3c:25:f5:36:36:53:82:80:27:5a:49:
c8:d8:64:44:06:c7:13:8f:c6:2b:7e:f5:34:a1:8b:79:01:8b:
2b:a9:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:07 2026 by rpki-client