Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
File: 8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa (raw, json)
Hash identifier: LUkVwahaurudffeZJHeMBXH0uvLJVnOmn8QjJv8OgCQ=
Subject key identifier: 92:7D:BF:09:60:F2:B2:6A:30:F4:91:BA:14:2C:28:AA:5A:F7:3C:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16751FED9EE7AC201F8BD3753B0059C55CBAE31F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
Signing time: Fri 07 Aug 2026 04:50:11 +0000
ROA not before: Fri 07 Aug 2026 04:50:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:75:1f:ed:9e:e7:ac:20:1f:8b:d3:75:3b:00:59:c5:5c:ba:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=84bbd8713debea195ee219e1f79d620a77e056e127b8db69c37c15de1722f118, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:10:47:ce:f7:ed:77:b4:fd:50:1d:84:44:
ef:40:ab:45:b3:16:b6:d2:95:37:ad:44:c2:65:c8:
7d:0a:6d:df:3b:be:47:00:7a:be:5a:da:20:3f:4b:
bd:8b:ec:53:74:15:ce:8a:d9:40:a6:20:c3:2a:87:
64:27:34:9a:3d:4b:c1:c6:e9:e1:b3:7e:92:73:0d:
e5:ee:fd:8c:99:4c:bc:6f:ac:0c:5f:95:10:12:ee:
f7:a0:3c:25:40:da:92:4f:61:93:00:d7:ed:6f:df:
af:92:ea:5e:c2:6d:b9:23:67:63:b8:12:af:79:86:
50:98:b0:32:f2:4f:1c:5e:7f:a5:3b:a8:dd:3c:7d:
a0:9a:af:26:4d:ad:e9:f6:c9:85:ba:41:c5:4c:ba:
af:57:23:4d:33:06:67:1f:6f:73:e3:30:45:76:29:
49:a9:a9:de:07:5d:f1:ec:80:7c:fe:99:2e:f9:ce:
d6:44:f5:c3:3c:d5:1c:99:4f:a9:60:8b:42:53:f5:
0a:7c:ff:02:92:08:0b:af:a5:78:b1:01:88:5c:9a:
7b:3f:22:f5:e9:c2:b7:b9:46:21:65:14:d9:c3:eb:
41:f4:6d:c3:df:a2:3c:0b:bf:c5:b2:fb:9b:39:2e:
97:43:18:e5:68:57:03:1f:d9:01:14:e7:92:fa:b8:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:BF:09:60:F2:B2:6A:30:F4:91:BA:14:2C:28:AA:5A:F7:3C:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ca5077b-0987-4a65-b8ff-a1e27f76cd1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:800::/38
Signature Algorithm: sha256WithRSAEncryption
4f:63:c9:f1:4a:c5:e6:d0:5b:3f:bb:87:ec:13:a2:a5:4f:83:
50:42:e6:27:36:b5:10:a8:2c:94:37:c2:84:87:d7:a1:25:7d:
fb:df:31:4a:e2:bc:ed:1c:a9:8a:95:24:b0:f7:7b:42:43:43:
9d:a2:a3:0f:05:40:43:23:08:92:05:63:8c:ab:a5:83:3e:68:
2c:df:28:09:ca:04:fd:5a:10:fe:1e:05:b5:78:7f:12:48:48:
df:35:78:24:e7:ff:69:70:f6:db:24:9a:31:64:11:4f:57:f1:
b6:4b:dd:fb:a7:dc:15:78:43:36:d0:f6:34:00:a0:3a:aa:40:
bc:61:bd:b1:08:dc:77:23:04:30:96:b4:a0:db:48:8e:7a:44:
d0:ed:32:36:a6:6c:e9:11:a9:a1:23:b5:17:0c:8c:9d:a7:59:
43:a1:9f:b5:db:0a:d1:20:f7:3d:42:30:41:31:77:76:2b:fb:
f6:9e:63:16:a7:10:75:e7:e3:c1:3b:d2:92:52:5a:a6:74:1f:
c2:c7:dc:bc:0e:20:db:8a:0b:76:bb:f4:5e:b5:1a:9b:f8:02:
f3:6f:6a:a3:be:a5:7c:2a:63:81:31:03:fa:a9:32:46:a5:04:
09:54:09:c9:15:62:fd:cc:b1:b2:d8:e9:cc:ca:1f:1b:ec:2d:
6d:ee:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:43 2026 by rpki-client