Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
File: 975dfb4d-ef39-4371-9678-ff7909080d1e.roa (raw, json)
Hash identifier: knllL92R7xG0WzH4IgetWCeOdlJ/LIRSSUOnr6O+9io=
Subject key identifier: B8:DB:A1:FA:C9:73:B9:9B:11:52:16:A4:B0:DC:63:4A:C6:89:17:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FFCA53EE8687414CCE8AED01B4800CA164E464F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
Signing time: Fri 07 Aug 2026 04:50:13 +0000
ROA not before: Fri 07 Aug 2026 04:50:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fc:a5:3e:e8:68:74:14:cc:e8:ae:d0:1b:48:00:ca:16:4e:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c15a8e35a2bf1102834ec78896553d3c4b1f38c9244f9222a222e79d18a3088e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:8c:e3:b9:97:58:99:ff:48:3b:18:12:86:
e2:f9:40:7a:93:31:b7:72:25:72:9a:50:d1:0d:4a:
8a:84:86:cf:b0:2c:e4:77:95:e8:98:83:29:a6:5b:
2b:66:c5:4c:ea:b8:06:82:0a:6b:a0:2a:47:27:a7:
e6:72:c3:43:5a:aa:64:66:78:20:2e:fb:04:87:d9:
d2:42:ae:cf:96:b6:dc:e4:a4:ab:00:1a:76:b7:d5:
97:a4:6e:f9:27:bf:bd:4b:14:bc:e6:a2:26:c5:de:
35:b5:86:de:38:cc:d7:3d:1e:93:cd:e7:a9:06:45:
d6:0b:d4:0e:51:41:64:91:49:31:c9:39:29:64:93:
b1:a6:21:83:ae:11:3d:0b:e5:93:e8:2d:4a:1f:43:
f4:8b:05:c2:9b:2d:e4:75:21:cb:60:6c:e7:30:c4:
9e:3f:3b:2d:8b:49:22:e4:7a:9c:0d:5d:8e:24:fc:
17:b4:29:34:ff:dd:d9:3f:20:38:94:03:17:22:c7:
bb:f0:86:8f:24:e4:72:f5:f5:33:17:1c:1e:cb:ec:
3f:5d:44:e1:5d:e6:2d:8f:d8:8b:3d:bc:89:f3:c5:
4e:38:9d:73:79:58:30:e8:3a:6e:26:bd:9b:4f:8e:
ff:f5:cf:40:d9:d5:24:0e:c7:f1:af:36:2a:55:8b:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:A1:FA:C9:73:B9:9B:11:52:16:A4:B0:DC:63:4A:C6:89:17:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b080::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b2:47:3c:fa:d6:eb:03:d4:47:de:26:ff:39:4d:84:85:43:
4a:65:f3:6e:67:b7:7c:aa:c2:c5:53:c2:45:d7:a2:af:7b:a4:
07:5d:00:e7:1c:fb:26:57:19:2a:16:b3:1c:10:b0:e5:ba:59:
9a:94:f1:77:0d:6e:74:61:f5:33:66:a0:20:7a:28:8d:ab:71:
fd:e6:81:61:73:34:dc:9a:46:c6:e0:eb:b6:fd:b0:af:59:a5:
5b:7b:41:34:b4:54:aa:8d:6c:e4:44:38:06:2a:ff:c6:f2:4d:
4c:bc:f0:c8:ed:ee:ca:69:53:9f:bd:d0:4f:92:65:4f:08:8b:
2e:ae:6b:44:26:87:11:4b:03:be:ab:84:4f:b3:a5:32:7e:d7:
d5:32:71:e4:72:74:13:4d:a2:0c:ec:28:d6:7f:04:1e:90:94:
73:c2:ec:9c:0c:2d:35:74:01:d8:53:f5:45:12:74:4c:67:8c:
8c:a7:d6:aa:b6:df:9b:b8:0c:32:2b:23:a3:32:54:f5:5a:5e:
ab:3d:38:a3:43:7b:8a:68:70:e3:88:b0:3d:8e:83:f9:38:67:
80:d5:37:60:cd:e9:d6:8c:6a:75:41:00:d9:df:6d:d6:b5:ec:
80:a8:af:bb:60:79:2c:3d:96:49:c1:22:b4:b2:ba:55:b0:2e:
59:aa:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:18 2026 by rpki-client