Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96632b04-b91d-4e29-8e82-14fddf17bed9.roa
File: 96632b04-b91d-4e29-8e82-14fddf17bed9.roa (raw, json)
Hash identifier: OnZ7mSJ7XGAT+0fym5Zpjc27cm4yh7ez1r40HHv+FUU=
Subject key identifier: 10:3E:05:64:34:DC:1B:6A:EA:D5:EE:8A:97:5C:CE:7C:90:99:2B:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6589DF2FDE3E2A9B6D8079CB3CFE96B06498B413
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96632b04-b91d-4e29-8e82-14fddf17bed9.roa
Signing time: Fri 07 Aug 2026 05:30:35 +0000
ROA not before: Fri 07 Aug 2026 05:30:35 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:89:df:2f:de:3e:2a:9b:6d:80:79:cb:3c:fe:96:b0:64:98:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:35 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=eb848325673a51ce22505f8f8e4849c358ce30c8e1d9c7c7aee22fa75d89e776, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:fe:67:bb:22:04:2c:0a:c0:f9:c0:5e:4a:
9f:bc:6c:54:82:a8:2e:93:ca:41:4a:e8:7e:0f:44:
86:33:0e:57:69:af:97:20:d3:49:dc:3b:07:bb:3d:
46:23:ca:06:88:b9:28:f2:8f:3d:6b:16:33:50:b9:
de:ed:dc:89:a7:0e:76:7a:af:ad:ef:3a:1b:c9:e4:
00:67:b7:2c:cf:35:5f:ed:bc:67:18:fe:4d:4a:95:
6f:2c:66:d8:a8:20:75:64:a7:02:c5:e8:2f:f4:1b:
bd:51:01:d2:d1:c7:ef:05:1e:10:bc:1e:8b:f7:0b:
39:89:a7:07:da:0f:0b:69:74:4a:8f:f1:8f:03:28:
0b:ca:89:52:c3:b0:3a:78:c8:7b:14:5b:11:df:ce:
39:ce:39:f5:59:ea:97:09:22:18:86:8c:99:b2:2c:
1e:8f:86:b8:48:f8:24:9d:34:39:06:fd:dd:6d:db:
4c:28:ed:2b:dd:5d:94:6c:4b:c5:c0:e8:e2:db:ba:
95:36:c2:c7:a1:67:3e:e9:c5:94:81:6a:2a:f9:d5:
a0:a2:2c:06:c9:d8:d9:8c:b3:f8:01:01:c9:04:e4:
75:13:22:f1:50:9c:78:5c:07:e2:c0:03:4f:cb:f1:
2f:7e:a3:83:1e:51:51:26:66:2a:9b:7a:d5:18:af:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:05:64:34:DC:1B:6A:EA:D5:EE:8A:97:5C:CE:7C:90:99:2B:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96632b04-b91d-4e29-8e82-14fddf17bed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8060::/48
Signature Algorithm: sha256WithRSAEncryption
3d:cd:e8:0b:c6:73:7c:ba:37:da:35:91:07:36:9b:61:04:ed:
db:ac:4d:a2:21:1f:d7:1f:4a:da:8d:df:e5:2c:2b:c1:76:b3:
74:91:b9:e3:85:10:ae:e9:a6:5a:5e:72:ad:fe:d6:c5:27:49:
35:16:36:0a:cc:00:68:66:ab:4f:b1:0a:94:0a:ae:fa:4c:18:
d8:f7:84:0b:eb:8d:0a:1a:aa:44:37:89:50:c7:e9:2d:91:45:
5d:97:e0:f4:ae:17:42:e6:99:33:43:c3:61:4d:5b:13:cc:e7:
d0:fe:93:e8:61:06:71:2c:52:da:a0:34:bc:c5:be:ee:ea:76:
3b:fb:12:07:6b:a4:d3:b8:83:8a:e9:46:6c:df:52:05:de:73:
05:94:3f:95:4b:fc:a0:ab:a9:cd:b6:04:b9:88:5f:21:cf:77:
15:5e:5e:4b:74:58:ad:aa:f6:a0:14:ad:c6:62:14:db:03:21:
55:c0:06:e7:9c:51:97:aa:a7:29:88:27:eb:51:5a:45:aa:7e:
27:e0:81:f1:7c:c7:be:9d:2f:c9:e6:e1:c5:29:bb:b7:d2:7a:
c9:a4:f7:f2:f4:99:b9:9d:c7:9a:8e:be:78:a7:2c:63:27:39:
01:89:88:0e:48:ca:d5:12:73:9a:cb:c1:bf:7d:24:e5:12:6c:
69:2c:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:29 2026 by rpki-client