Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e2724b1-eada-45ed-aa0b-3d926ca1fb24.roa
File: 9e2724b1-eada-45ed-aa0b-3d926ca1fb24.roa (raw, json)
Hash identifier: n6NLH5I9SlquJwQSvMPJaWxLT8Tk4s/gv9Cnd9h6oLs=
Subject key identifier: 63:4D:F5:DE:0D:AF:6E:2C:26:D2:43:0A:FA:98:C6:83:03:19:B7:36
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FFA392F4AFEB37199773021ED8B2B5C1B395F3B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e2724b1-eada-45ed-aa0b-3d926ca1fb24.roa
Signing time: Wed 19 Aug 2026 01:00:10 +0000
ROA not before: Wed 19 Aug 2026 01:00:10 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fa:39:2f:4a:fe:b3:71:99:77:30:21:ed:8b:2b:5c:1b:39:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:10 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=3e2dc19e52129bf78d46e78fbcb8c37e5f148b47317050b9b0da0c120acb9f40, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:ae:8e:d2:21:ec:66:8b:38:b5:96:eb:d3:
76:3f:17:8f:d2:c7:0a:f3:ce:18:80:6d:6b:4f:78:
f7:7b:75:5a:f8:cf:c6:d9:33:24:0f:4f:3b:f7:29:
cb:f3:f2:40:94:97:7c:1e:47:79:18:2e:14:28:8e:
ee:4d:4b:58:f2:3a:fb:75:8e:56:ac:da:d0:67:dc:
6e:6c:b3:72:a4:31:20:15:8c:f3:46:b3:18:f8:0e:
f2:30:22:04:a6:d3:b0:89:7a:d5:73:74:fd:82:1e:
c1:a5:1a:e6:a1:74:23:db:24:7d:2e:dc:8d:7b:6e:
b1:ba:41:a1:68:6c:df:10:f3:28:fb:68:87:80:b9:
23:5f:51:45:de:ce:4a:fd:70:2f:60:9b:aa:c3:6e:
e9:7a:93:e4:64:e5:b6:be:24:bf:f0:85:6d:15:31:
68:3b:4d:d4:70:59:f9:9b:d4:c2:34:b9:99:9a:a3:
97:45:24:f7:8c:a2:0a:94:73:be:d1:65:ce:d3:63:
58:dd:b9:ee:12:ea:3a:e9:74:bc:8b:8b:eb:ce:18:
53:ee:bd:e2:77:d4:e9:ef:44:c2:c3:80:e7:e3:9c:
d0:5c:27:de:7e:c6:fc:a8:c0:0a:70:2b:63:94:0f:
6a:c6:f1:99:c2:4c:f4:29:bf:3f:e4:a0:b4:d0:df:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4D:F5:DE:0D:AF:6E:2C:26:D2:43:0A:FA:98:C6:83:03:19:B7:36
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e2724b1-eada-45ed-aa0b-3d926ca1fb24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:57:08:62:e6:c6:a7:05:cb:26:13:3b:e2:5f:b8:b9:79:71:
eb:0e:65:af:a9:c7:1c:3c:4f:0c:ac:3b:d7:16:5a:47:2f:1c:
6f:ae:6a:f0:b4:17:0f:42:99:4c:95:df:6c:99:e0:26:5f:15:
6f:e6:f8:69:ea:38:58:f4:4d:e7:46:0e:84:46:03:a1:31:94:
33:1c:2e:f8:84:cf:4e:f7:28:bb:d6:37:0a:fc:e7:c9:8d:31:
39:a7:12:2d:8d:7b:9f:3f:5e:a1:41:85:68:78:3d:7c:6b:51:
7d:37:08:81:c8:f2:f4:ec:2e:a8:61:4b:08:82:b4:a1:3f:7f:
8a:01:ce:82:65:2b:32:2e:8d:af:4c:2a:e9:c1:cd:49:82:57:
a6:23:27:c2:32:b8:ff:f3:33:b0:15:ea:d6:d6:6c:51:a0:18:
ff:48:5f:3b:6b:55:12:35:ad:39:6e:f3:dc:fc:dc:88:25:fc:
60:18:90:ce:1e:c4:06:f0:bb:04:36:f8:e4:fa:d5:04:95:49:
53:71:4b:73:b2:b6:e5:90:09:46:39:e1:09:3e:2e:f5:61:26:
39:d2:f3:dd:95:b4:a5:60:22:90:1a:13:64:ac:8f:02:d0:19:
b6:59:34:1b:d1:9a:d5:c5:16:9c:cf:21:c8:ca:9f:8b:e1:12:
6a:f7:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:47 2026 by rpki-client