Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ddded6d-d3ae-4817-9ffc-571cd2178233.roa
File: 9ddded6d-d3ae-4817-9ffc-571cd2178233.roa (raw, json)
Hash identifier: LQwCwKTh2DtVIQJX2s/GcnUJ2W8uhERB45GwfnZp44g=
Subject key identifier: C3:0E:77:3A:1E:EA:D4:B4:E2:AB:6C:14:BF:92:10:42:58:FA:9F:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33ADBF59FD0E290C6A18A523B541A36E8AE4FEC8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ddded6d-d3ae-4817-9ffc-571cd2178233.roa
Signing time: Wed 09 Sep 2026 15:12:28 +0000
ROA not before: Wed 09 Sep 2026 15:12:28 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ad:bf:59:fd:0e:29:0c:6a:18:a5:23:b5:41:a3:6e:8a:e4:fe:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:28 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=f073b5843b4b1be346820da6288d3b60277396b585cd5231ebd749bdf7a63606, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:09:5d:35:d6:0b:9d:fa:1a:c9:82:04:95:
72:bb:8c:e5:ca:6a:57:ed:82:74:72:28:3b:05:7d:
8a:ee:00:7e:df:a5:02:5e:dd:1b:7e:f0:25:dd:5f:
5e:c8:ff:24:88:84:df:f2:e2:1e:d4:bb:dc:b7:bd:
ba:e1:45:a0:73:cb:63:58:2e:50:65:81:0b:5e:e4:
ae:87:36:c9:c9:e0:73:7a:1c:9c:38:4c:31:c9:7f:
ec:e3:34:ba:10:56:f7:24:55:b8:35:aa:fe:53:17:
7d:f3:e3:2c:f7:e5:6b:85:4e:af:46:c3:f6:6a:aa:
f7:0b:09:93:6e:b4:49:71:40:4e:f8:a1:c2:4c:00:
b9:58:83:ef:75:96:75:8d:78:4a:30:bb:30:01:97:
48:17:4f:b4:e0:b3:5f:fd:b5:f6:60:fa:f5:5a:18:
20:94:da:4d:9b:e7:99:63:32:24:a4:a2:0a:9f:8a:
c4:2f:2f:91:40:94:f0:80:21:13:72:47:57:9b:db:
01:3e:21:28:25:ba:3d:6b:97:97:16:e5:e3:28:e9:
30:d0:df:fa:cb:f1:6d:0a:45:94:e3:0f:35:3e:0d:
43:0c:b7:31:4d:e4:e2:d7:44:11:65:b7:14:b0:23:
e5:0f:bc:f8:39:3c:7d:5e:54:a6:f5:28:75:09:4c:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:77:3A:1E:EA:D4:B4:E2:AB:6C:14:BF:92:10:42:58:FA:9F:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ddded6d-d3ae-4817-9ffc-571cd2178233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:8880::/48
Signature Algorithm: sha256WithRSAEncryption
a5:ca:50:2b:74:05:8b:33:a3:96:0d:a3:f8:f3:1e:38:ea:82:
5a:a9:54:17:07:d4:7c:fb:b7:ec:eb:c5:3b:0d:1b:f1:9a:0a:
27:df:47:1f:10:1e:7d:1d:3c:b7:cc:3a:16:0f:87:08:d7:79:
12:61:0e:8b:2f:c2:4c:fd:20:93:7c:ca:4d:d9:70:64:fc:37:
07:d3:5c:17:ac:06:33:bf:9f:75:d7:81:32:c9:33:f6:fb:4c:
b7:fe:16:cd:c1:4f:bf:5b:1e:d6:a4:05:2d:a4:60:46:5c:fd:
83:93:b9:77:b0:4c:2c:16:65:9e:07:44:cd:fa:23:bb:12:e6:
cc:c0:19:1c:b1:7a:e5:74:71:16:59:ae:f3:f1:a3:47:a4:0d:
66:7a:a7:31:32:97:bf:56:07:6c:08:9a:94:aa:88:8e:6e:1c:
1f:34:f3:ae:52:e1:c3:d4:dc:e5:59:ee:39:71:5a:2a:cf:42:
10:71:d4:72:45:c2:6b:d7:32:04:10:1c:9a:ba:02:61:cc:ae:
da:70:ec:c6:98:6a:10:d6:cb:7e:a4:30:23:36:01:13:f7:73:
9a:df:84:e4:a8:52:11:a2:14:6f:2a:ad:dc:7f:a8:85:35:d0:
c0:1e:38:5a:c8:80:bb:aa:82:94:d0:86:ec:db:62:62:52:71:
a8:d2:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:34 2026 by rpki-client