Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/930cf876-2524-48e9-ad28-15c59a5a6986.roa
File: 930cf876-2524-48e9-ad28-15c59a5a6986.roa (raw, json)
Hash identifier: ut0ZqgJTNQL2FeiV17VzKsBUodWZ3QjdCPBGAkTNYYw=
Subject key identifier: AF:06:25:E9:69:5A:50:BD:64:82:CE:56:B8:A4:45:82:EB:52:94:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CCF926A9A1D590FD4FD07B22B78D0A904BC5601
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/930cf876-2524-48e9-ad28-15c59a5a6986.roa
Signing time: Wed 09 Sep 2026 15:12:35 +0000
ROA not before: Wed 09 Sep 2026 15:12:35 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:cf:92:6a:9a:1d:59:0f:d4:fd:07:b2:2b:78:d0:a9:04:bc:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:35 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=ab6fcd62fb0f9ad0d0821b8275eea610129f4bba3bdf76fbd9b39d65c8b4c241, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:05:b0:7c:61:dd:5c:a1:dd:ba:8a:a3:a7:
0b:9a:08:74:f9:9e:fd:9c:54:bd:5c:e1:2d:93:e2:
10:ec:83:5f:7a:b6:99:b1:d8:33:ab:3a:a4:cc:e8:
23:a7:32:d5:65:06:ff:16:08:e6:66:79:4f:18:e8:
7a:d7:54:a6:b4:92:b4:91:d8:1b:bf:d6:2a:2b:6f:
23:6a:5a:a7:3d:fe:fd:c6:43:ad:6d:b1:bf:40:e6:
f0:6d:51:b8:1b:46:c5:e8:a0:5b:93:03:19:ff:94:
af:a3:74:19:38:7e:c5:4b:2e:96:73:3c:c1:ae:14:
6f:35:ff:9c:fb:d0:c5:84:3d:76:ea:50:fd:6e:e9:
59:0c:bc:f2:24:30:67:27:70:6f:08:46:f4:9d:be:
f2:20:c2:47:40:12:6a:7a:70:77:4c:e4:47:08:a3:
d3:65:61:f9:24:72:24:16:ca:dd:5c:37:e4:37:25:
87:fc:5f:c5:78:a0:fa:2a:2d:eb:9f:6c:57:8a:d2:
d5:f9:4b:5a:0f:f4:11:ae:ef:5a:89:54:2e:40:16:
29:52:98:f8:96:d6:e4:88:d3:84:81:a3:51:4e:11:
2a:6f:1d:4e:34:59:f0:50:fb:65:cf:8d:ea:3e:af:
a9:02:96:28:c2:ec:7a:07:14:8e:b4:d0:46:52:64:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:25:E9:69:5A:50:BD:64:82:CE:56:B8:A4:45:82:EB:52:94:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/930cf876-2524-48e9-ad28-15c59a5a6986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8880::/48
Signature Algorithm: sha256WithRSAEncryption
74:80:60:82:c3:a5:a6:0d:cb:d1:db:51:e5:74:13:47:81:11:
c2:72:68:52:a0:ae:d8:3b:58:09:93:d1:c8:e3:4a:05:b2:2b:
6c:fd:29:56:0e:45:1d:42:b5:58:6c:00:22:49:66:ee:aa:ed:
45:13:18:a6:eb:e2:79:d2:ae:ee:86:82:59:11:d9:d7:9e:76:
45:cc:43:a8:96:47:cc:a1:01:c8:98:6e:11:9c:f6:c1:be:76:
67:3e:99:b3:2c:09:1f:ac:69:0f:06:9d:cd:8e:b2:39:24:dd:
7d:a7:70:5b:4c:18:7a:12:e9:6f:47:a6:ba:7d:e2:67:e9:0b:
43:0a:c1:6c:cc:e5:03:b9:a1:24:86:01:5e:11:11:3f:23:90:
29:f9:4c:c7:6c:84:fd:6e:bf:a8:d5:be:92:41:7c:a7:8c:49:
11:d6:4c:4e:bb:0e:3b:92:6a:ee:47:d8:aa:fc:03:a3:53:41:
6d:7b:ae:c1:7f:bb:6d:5b:a3:09:6a:9c:17:d9:90:b3:e0:80:
81:f3:07:8c:23:be:1d:f1:f5:65:41:f6:33:1a:a1:0d:de:35:
e8:b1:5d:d9:36:fe:98:b2:ad:87:37:05:0f:a4:54:af:db:5a:
7c:37:f5:b4:a0:8c:32:cd:64:ae:85:f9:78:0c:78:6a:b5:a0:
2f:18:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:40 2026 by rpki-client