Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa
File: 9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa (raw, json)
Hash identifier: 45tDxZYX6iLQZDIv8pTF/DNkRy9LBkx2f1Y2IXe6KlI=
Subject key identifier: 22:23:1C:9F:81:5A:A8:78:C9:5D:C9:8C:2A:D9:D1:EF:7F:05:60:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F646878BFF41F1E51217F986D5CA29309B2C735
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa
Signing time: Mon 03 Aug 2026 01:30:14 +0000
ROA not before: Mon 03 Aug 2026 01:30:14 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:64:68:78:bf:f4:1f:1e:51:21:7f:98:6d:5c:a2:93:09:b2:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:14 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=89174193e2c0a483b7a26a97b53f00f6568fe9cb3ac8fc9a2d3171d2be45c427, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:d6:a1:34:8b:38:06:d9:d8:ec:c1:19:29:
c1:61:b6:c7:1d:ad:7d:dd:2e:fe:14:38:05:eb:18:
19:a1:eb:f4:9d:de:a3:c8:22:e2:e4:f1:b4:6d:69:
99:c4:65:e3:c3:17:b3:fa:a5:9a:57:51:e3:db:3f:
aa:57:77:82:26:6f:0e:ed:14:8e:c1:d0:76:a1:30:
8c:23:c2:a5:c8:7e:2a:d2:0b:d3:5f:88:82:47:e8:
e6:58:a5:e6:11:b0:4d:b8:48:12:07:bd:78:fd:b0:
11:9f:ec:fa:87:3e:dc:2f:83:05:72:87:29:9c:b7:
d4:b1:0d:46:71:28:33:1d:93:ef:eb:28:cb:21:86:
de:36:5a:f6:bb:b3:f4:cf:f1:e5:af:32:43:fd:ff:
80:00:ee:1b:b5:77:ec:a5:a4:3b:b4:1d:d9:a3:b0:
85:08:2d:86:f0:81:8d:99:68:ad:8e:46:6a:f7:29:
96:0f:b4:14:8b:ae:11:3d:d3:27:3d:93:87:76:16:
3e:cc:39:88:68:8f:8b:06:5a:3f:91:0a:40:6d:d3:
cc:2f:99:6f:f3:8b:e4:cc:05:ea:6b:00:cb:1d:39:
a5:35:a7:fe:91:3e:52:02:4d:79:1c:64:0d:39:dc:
18:dd:d7:f8:e3:4c:f1:38:51:1d:1b:ee:64:78:f9:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:1C:9F:81:5A:A8:78:C9:5D:C9:8C:2A:D9:D1:EF:7F:05:60:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:a000::/48
Signature Algorithm: sha256WithRSAEncryption
52:bf:b5:b2:52:71:41:dc:c1:ef:7c:06:24:82:53:8c:a5:48:
3c:ff:c3:61:a8:19:2e:c9:fd:e2:a1:e1:2a:62:e9:a7:4b:40:
64:c2:bc:b2:a3:41:04:7b:8e:f7:9a:86:8d:14:80:f2:78:d3:
2f:50:e4:7a:fd:d5:e5:5c:e4:be:db:83:a0:6e:aa:70:07:9c:
4d:f5:dc:21:72:ad:01:b5:78:0b:85:76:81:59:64:24:1e:44:
f3:ef:00:20:5a:55:e5:11:67:bb:c3:17:22:b3:9f:13:f9:c2:
48:a9:6c:3e:c1:f6:d0:d7:66:74:89:d3:75:8d:a9:92:a9:d0:
c3:5e:97:22:2b:b8:97:7f:79:48:ec:37:1b:f0:80:b9:90:41:
5c:43:94:d3:90:81:94:bd:ae:4e:c1:95:90:7e:d5:f1:ce:60:
e7:c3:6c:16:65:d7:38:9d:4d:b0:c3:00:9d:2b:57:1a:42:1d:
ea:49:2e:bc:0d:71:ae:4a:7c:a8:be:4a:d1:2b:b5:ab:64:15:
e8:1e:8d:a7:1e:d8:56:98:20:bb:3c:ca:37:b5:a4:66:59:92:
ff:c8:9e:eb:20:d4:36:df:df:96:23:3a:68:ab:28:bd:4d:8c:
a0:f1:f6:60:26:d7:d9:b4:cb:9a:08:fb:34:2f:f1:af:2b:d4:
e7:2e:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:43 2026 by rpki-client