Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
File: 94d1ece6-a642-4297-8fb7-d7003b36fe75.roa (raw, json)
Hash identifier: h/6NEk97rZFwUA9mRXjSvGjmLUEGm9zfOpL3btjocPQ=
Subject key identifier: 74:74:9F:9F:85:00:6F:46:91:63:43:8E:25:CD:D6:DE:2D:C4:4C:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A6FEB3537C5355A7DBA56F83CBFF216ACA5F7D8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
Signing time: Fri 07 Aug 2026 05:30:17 +0000
ROA not before: Fri 07 Aug 2026 05:30:17 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6f:eb:35:37:c5:35:5a:7d:ba:56:f8:3c:bf:f2:16:ac:a5:f7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:17 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9a65a852252a90fe1d04fd3fe77456a392b2830fc8af961a7ba0ff13b14e9856, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:1f:aa:21:3b:2c:53:46:6b:e0:d6:30:29:
7a:bb:44:a4:e7:1c:3c:3d:d9:69:35:3f:8b:3c:f2:
1a:d5:1c:eb:c4:b4:e5:ff:64:6e:20:2d:79:35:1c:
7a:bb:c6:8d:52:27:b5:ee:08:bf:6a:36:98:26:28:
fb:4d:25:17:2c:3b:79:d1:04:b9:63:94:7a:45:b5:
35:69:97:1a:1b:65:a8:85:56:87:03:76:9f:16:5d:
a6:6d:14:00:ab:de:3f:a6:0b:9f:23:e0:6c:23:43:
f4:e9:50:63:70:b8:7a:ef:e5:03:7b:5f:55:73:ca:
a6:4f:a0:12:e1:44:86:43:2f:b9:7b:05:aa:89:5e:
57:1e:8b:e3:6d:11:78:f9:06:ab:f0:cc:be:ee:c4:
17:0b:3e:9c:88:87:3e:bd:1d:85:20:4a:7b:ce:e5:
e9:f2:85:f0:c2:6a:08:16:39:ae:0e:af:3e:0f:95:
4f:0f:fa:d3:f8:f3:42:76:3c:e9:f3:34:fe:d9:9b:
60:4f:64:15:63:ba:87:c7:0f:5d:af:b1:e5:19:82:
db:83:95:2d:af:58:b7:bc:ae:80:48:40:cc:76:55:
38:1a:d1:59:83:dd:d8:63:f3:3d:de:83:7e:df:a8:
5d:e1:c9:65:16:fe:2a:f7:a8:97:56:11:11:1f:04:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:9F:9F:85:00:6F:46:91:63:43:8E:25:CD:D6:DE:2D:C4:4C:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:800::/38
Signature Algorithm: sha256WithRSAEncryption
60:e9:c0:2e:3a:e5:88:8c:59:77:b5:c4:fb:a9:65:0c:b4:c8:
43:4a:f8:7f:66:fd:70:a7:76:7f:64:80:d4:51:da:f4:c0:a5:
8b:f3:fc:89:c8:6a:1b:57:22:37:f0:91:bc:6b:e2:c9:e4:38:
80:83:3e:69:f0:3a:41:45:74:a2:6d:f9:69:0f:04:6e:11:b2:
cf:2e:2d:fd:10:90:38:ed:b4:48:69:a0:23:4e:4e:71:db:39:
2f:0d:47:e9:e9:b3:1f:d9:a7:1d:77:b6:36:fc:99:a9:82:6e:
6a:c2:c4:23:37:ab:67:79:ab:9e:18:2f:ac:f8:b6:9d:15:b7:
ca:7c:05:53:01:f2:20:70:7a:04:e9:61:5c:ed:3c:62:74:f7:
c4:35:45:ac:c9:6e:09:cf:73:bf:84:40:52:5f:ca:2b:b4:3b:
49:d5:99:82:37:5e:d7:7c:49:e0:0b:79:25:af:f5:7b:83:2f:
64:0d:c9:d7:ed:3f:d6:18:5e:80:29:b5:04:59:9e:00:1d:bd:
ea:d7:c9:01:55:54:96:03:e4:57:d9:42:7c:0b:46:e1:7c:1c:
51:71:b5:63:ef:fd:42:79:d1:ab:d3:59:66:d2:18:55:b6:f2:
94:3e:d4:ca:7a:9c:64:5f:61:8e:2b:e9:23:ad:38:57:2e:1e:
5b:a8:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:35 2026 by rpki-client