Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93932fd5-a431-4690-94d6-ed2f97f585c1.roa
File: 93932fd5-a431-4690-94d6-ed2f97f585c1.roa (raw, json)
Hash identifier: xnbG3RnP6q2H1rU6FggpXF8ru8J8BK2pW5S0aHAfRpw=
Subject key identifier: 0D:86:16:5A:C4:0D:EE:64:C8:71:A1:80:13:2A:9F:5A:9D:DA:F2:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A4EA64B6F88CB5D33587A19F582AEFBBF12795C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93932fd5-a431-4690-94d6-ed2f97f585c1.roa
Signing time: Fri 07 Aug 2026 04:30:40 +0000
ROA not before: Fri 07 Aug 2026 04:30:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4e:a6:4b:6f:88:cb:5d:33:58:7a:19:f5:82:ae:fb:bf:12:79:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=95701239dc14187af6fa8d9ab37b58c60fc8952c693bf540e96354dcc44cb23c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:26:36:8f:09:ea:10:40:ab:41:2b:ce:3d:
b6:ec:93:fc:31:1d:14:b8:02:96:0e:8b:61:43:97:
3d:58:cd:79:19:af:2f:75:91:f1:3f:ca:d4:b1:24:
03:c9:de:0c:ee:44:bf:98:c5:fa:e6:56:a8:0f:74:
d0:e0:ee:e4:31:80:be:b2:e1:13:9e:cd:ff:e2:e5:
bc:a9:79:a5:63:06:00:ce:a8:95:23:7b:95:0a:0b:
c2:01:c4:47:70:49:f3:99:a2:54:5f:2a:a3:08:f3:
ad:6d:25:1c:5c:28:74:32:f8:a6:28:06:4f:03:58:
3f:b3:a3:f7:93:22:d2:86:b2:a1:bc:27:a0:b4:f5:
0d:81:5a:24:55:9b:e6:3d:34:4c:b0:c0:8f:fc:62:
f3:2f:4e:c6:a7:d1:99:9b:31:40:e9:1c:07:41:eb:
f1:d2:6c:a1:a9:39:1f:d5:6e:87:80:78:3c:33:54:
94:d4:f1:dd:28:ca:46:65:b3:f8:24:c4:01:7c:cf:
c9:ff:ae:48:7b:fa:7a:76:9e:c3:f5:a3:07:5d:eb:
09:44:c9:ff:7b:04:51:64:f3:d0:31:f7:94:26:98:
e3:d3:f4:98:d2:f1:d4:66:b3:ae:d2:23:5f:a9:cb:
9b:f1:7a:ef:15:b1:90:62:5c:a2:47:9d:f4:c4:0a:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:16:5A:C4:0D:EE:64:C8:71:A1:80:13:2A:9F:5A:9D:DA:F2:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93932fd5-a431-4690-94d6-ed2f97f585c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:800::/38
Signature Algorithm: sha256WithRSAEncryption
1c:45:dd:83:a2:e6:5e:99:6f:3f:b3:d6:37:90:e1:34:56:71:
df:6d:45:44:35:9c:e8:69:8e:6c:97:a7:44:c3:04:7d:0e:e2:
65:5d:d1:db:c2:75:97:b0:bd:c7:b9:ec:8b:ed:7c:ce:f9:03:
ea:72:20:83:25:c7:1a:3c:e3:90:d9:a8:3e:3f:48:61:f3:71:
52:8b:10:fc:ec:f4:44:69:65:59:3b:d1:d2:b1:03:71:46:89:
40:e9:ed:bf:db:e4:2f:2b:6b:93:69:11:00:2c:e2:66:15:49:
d5:c3:f7:4a:3a:2b:6e:7e:0f:c8:12:91:38:a8:77:c5:48:a1:
3d:04:9f:cd:7d:d1:4e:48:e5:6a:de:02:7e:d5:2f:e4:1d:30:
f8:4b:3f:97:3e:b5:ff:84:b5:f9:43:5f:f4:f8:fd:5b:60:aa:
6c:c6:db:b4:7f:a7:7e:78:6e:8c:fa:89:51:d5:82:25:13:2c:
fb:a3:37:db:2f:48:05:ee:cd:68:e0:67:e6:6f:6c:44:b0:98:
7c:36:3d:14:e9:97:79:e1:df:5c:e1:5d:f5:57:97:1b:6f:f5:
e1:49:e3:6d:b7:b5:44:7b:a7:74:24:46:6d:ae:f6:b7:e6:0c:
75:3f:36:63:a1:36:57:35:6f:b6:31:1e:76:36:18:b9:84:66:
32:36:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:40 2026 by rpki-client